chore(deps): update dependency virtualenv to v20.26.6 [security] #188

renovate · 2025-01-14T01:44:07Z

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

This PR contains the following updates:

Package	Change	Age	Confidence
virtualenv	`==20.23.1` -> `==20.26.6`

GitHub Vulnerability Alerts

CVE-2024-53899

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

Release Notes

pypa/virtualenv (virtualenv)

`v20.26.6`

Compare Source

What's Changed

release 20.26.5 by @gaborbernat in #2766
Fix #2768: Quote template strings in activation scripts by @y5c4l3 in #2771

New Contributors

@y5c4l3 made their first contribution in #2771

Full Changelog: pypa/virtualenv@20.26.5...20.26.6

`v20.26.5`

Compare Source

What's Changed

release 20.26.4 by @gaborbernat in #2761
Use uv over pip by @gaborbernat in #2765

Full Changelog: pypa/virtualenv@20.26.4...20.26.5

`v20.26.4`

Compare Source

What's Changed

release 20.26.3 by @gaborbernat in #2742
Fix whitespace around backticks in changelog by @edmorley in #2751
Test latest Python 3.13 by @hugovk in #2752
Fix typo in Nushell activation script by @edmorley in #2754
GitHub Actions: Replace deprecated macos-12 with macos-13 by @hugovk in #2756
Fix #2728: Activating venv create unwanted console output by @ShootGan in #2748
Upgrade bundled wheels by @gaborbernat in #2760

New Contributors

@ShootGan made their first contribution in #2748

Full Changelog: pypa/virtualenv@20.26.3...20.26.4

`v20.26.3`

Compare Source

What's Changed

release 20.26.2 by @gaborbernat in #2724
Bump embeded wheels by @gaborbernat in #2741

Full Changelog: pypa/virtualenv@20.26.2...20.26.3

`v20.26.2`

Compare Source

What's Changed

Release 20.26.1 by @gaborbernat in #2713
Update activate_this.py documentation to use runpy instead of exec by @FredStober in #2716
Apply ruff/bugbear new rules by @DimitriPapadopoulos in #2718
Fix the CI by @HandSonic in #2721
Fix #1949: zipapp virtual environment creation fails if zipapp path is symlinked by @HandSonic in #2722
Fix bad return code in bash activation if hashing is disabled by @fenkes-ibm in #2717

New Contributors

@FredStober made their first contribution in #2716
@HandSonic made their first contribution in #2721
@fenkes-ibm made their first contribution in #2717

Full Changelog: pypa/virtualenv@20.26.1...20.26.2

`v20.26.1`

Compare Source

What's Changed

release 20.26.0 by @gaborbernat in #2710
Fix PATH-based Python discovery on Windows by @ofek in #2712

Full Changelog: pypa/virtualenv@20.26.0...20.26.1

`v20.26.0`

Compare Source

What's Changed

release 20.25.3 by @gaborbernat in #2704
Fixed a case when template variable is WindowsPath by @NtWriteCode in #2707
Allow builtin interpreter discovery to find specific Python versions given a general spec by @flying-sheep in #2709

New Contributors

@NtWriteCode made their first contribution in #2707
@flying-sheep made their first contribution in #2709

Full Changelog: pypa/virtualenv@20.25.3...20.26.0

`v20.25.3`

Compare Source

What's Changed

release 20.25.2 by @gaborbernat in #2703
Fix for tests: Python 3.13.0a6 renamed pathmod to parser by @befeleme in #2702

New Contributors

@befeleme made their first contribution in #2702

Full Changelog: pypa/virtualenv@20.25.2...20.25.3

`v20.25.2`

Compare Source

What's Changed

release 20.25.1 by @gaborbernat in #2692
Fix windows utf8 encoding issue by @PzaThief in #2687
Update changelog.rst by @Callek in #2701
Fix indentation in activate.fish by @junzh0u in #2700

New Contributors

@PzaThief made their first contribution in #2687
@Callek made their first contribution in #2701
@junzh0u made their first contribution in #2700

Full Changelog: pypa/virtualenv@20.25.1...20.25.2

`v20.25.1`

Compare Source

What's Changed

release 20.25.0 by @gaborbernat in #2675
Upgrade embeded wheels by @gaborbernat in #2681
Resolve symbolic links for environment metadata by @ofek in #2686
Avoid importing contextlib in _virtualenv by @hauntsaninja in #2688

Full Changelog: pypa/virtualenv@20.25.0...20.25.1

`v20.25.0`

Compare Source

What's Changed

release 20.24.6 by @gaborbernat in #2657
Allow platformdirs v4 by @alex in #2664
Bump wheels package by @gaborbernat in #2665
Bump setuptools and wheels by @gaborbernat in #2669
Run CI tests on Python 3.13, fix tests by @hroncok in #2673

Full Changelog: pypa/virtualenv@20.24.6...20.25.0

`v20.24.7`

Compare Source

What's Changed

release 20.24.6 by @gaborbernat in #2657
Allow platformdirs v4 by @alex in #2664
Bump wheels package by @gaborbernat in #2665

Full Changelog: pypa/virtualenv@20.24.6...20.24.7

`v20.24.6`

Compare Source

What's Changed

release 20.24.5 by @gaborbernat in #2643
Change "Virtualenv" to "virtualenv" to match style by @jackiekazil in #2646
[test] Use get_hookimpls method instead of the private attribute by @danigm in #2649
Remove extra closing parenthesis by @patrick-csliu in #2651
Fix the CI by @gaborbernat in #2655
Upgrade pip and setuptools by @gaborbernat in #2656

New Contributors

@jackiekazil made their first contribution in #2646
@danigm made their first contribution in #2649
@patrick-csliu made their first contribution in #2651

Full Changelog: pypa/virtualenv@20.24.5...20.24.6

`v20.24.5`

Compare Source

What's Changed

release 20.24.4 by @gaborbernat in #2633
Fix brew cannot copy by @gaborbernat in #2640
Test with 3.12 rc by @gaborbernat in #2641
Upgrade setuptools by @gaborbernat in #2642
GitHub Actions: Add PyPy 3.10 to testing by @cclauss in #2638

New Contributors

@cclauss made their first contribution in #2639

Full Changelog: pypa/virtualenv@20.24.4...20.24.5

`v20.24.4`

Compare Source

What's Changed

Fix typo found by codespell by @DimitriPapadopoulos in #2624
Updating extend.rst typo by @sagardesai1 in #2626

New Contributors

@DimitriPapadopoulos made their first contribution in #2624
@sagardesai1 made their first contribution in #2626

Full Changelog: pypa/virtualenv@20.24.3...20.24.4

`v20.24.3`

Compare Source

What's Changed

release 20.24.2 by @gaborbernat in #2615
Update compatibility docs by @jugmac00 in #2618
fix ResourceWarning on process exit (#2472) by @sigma67 in #2617
added scripts in tasks directory to sdist on build (#2610) by @sigma67 in #2620
Bump wheel by @gaborbernat in #2622

New Contributors

@sigma67 made their first contribution in #2617

Full Changelog: pypa/virtualenv@20.24.2...20.24.3

`v20.24.2`

Compare Source

What's Changed

release 20.24.1 by @gaborbernat in #2612
Bump pip and wheel by @gaborbernat in #2614

Full Changelog: pypa/virtualenv@20.24.1...20.24.2

`v20.24.1`

Compare Source

What's Changed

release 20.24.0 by @gaborbernat in #2608
Upgrade pip by @arielkirkwood in #2611

New Contributors

@arielkirkwood made their first contribution in #2611

Full Changelog: pypa/virtualenv@20.24.0...20.24.1

`v20.24.0`

Compare Source

What's Changed

release 20.23.1 by @gaborbernat in #2590
Fix the CI by @gaborbernat in #2593
Quickstart guide by @AlvesJorge in #2599
Updated CLI documentation with config file name by @nathanczh in #2602
Exclude dependabot and pre-commit ci from release notes by @gaborbernat in #2603
Export VIRTUAL_ENV_PROMPT in activation scripts (#2194) by @jimporter in #2606
Upgrade setuptools by @gaborbernat in #2607

New Contributors

@AlvesJorge made their first contribution in #2599
@nathanczh made their first contribution in #2602
@jimporter made their first contribution in #2606

Full Changelog: pypa/virtualenv@20.23.1...20.24.0

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-01-14T01:44:08Z

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

Branch has one or more failed status checks

chore(deps): update dependency virtualenv to v20.26.6 [security]

37b920b

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update dependency virtualenv to v20.26.6 [security] #188

chore(deps): update dependency virtualenv to v20.26.6 [security] #188

Uh oh!

renovate bot commented Jan 14, 2025 •

edited

Loading

Uh oh!

renovate bot commented Jan 14, 2025

Uh oh!

Uh oh!

Uh oh!

chore(deps): update dependency virtualenv to v20.26.6 [security] #188

Are you sure you want to change the base?

chore(deps): update dependency virtualenv to v20.26.6 [security] #188

Uh oh!

Conversation

renovate bot commented Jan 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

GitHub Vulnerability Alerts

Release Notes

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

renovate bot commented Jan 14, 2025

Branch automerge failure

Uh oh!

Uh oh!

renovate bot commented Jan 14, 2025 •

edited

Loading