Skip to content

chore(deps): bump virtualenv from 20.35.4 to 20.36.1 - #151

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/virtualenv-20.36.1
Open

chore(deps): bump virtualenv from 20.35.4 to 20.36.1#151
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/virtualenv-20.36.1

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJul 12, 2026

Copy link
Copy Markdown

Bumps virtualenv from 20.35.4 to 20.36.1.

Release notes

Sourced from virtualenv's releases.

20.36.0

What's Changed

New Contributors

Full Changelog: pypa/virtualenv@20.35.3...20.36.0

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 20.36.1

  • Fix TOCTOU vulnerabilities in app_data and lock directory creation that could be exploited via symlink attacks - reported by :user:tsigouris007, fixed by :user:gaborbernat. (:issue:3013)

v20.36.0 (2026-01-07)


Features - 20.36.0

  • Add support for PEP 440 version specifiers in the --python flag. Users can now specify Python versions using operators like >=, <=, ~=, etc. For example: virtualenv --python=">=3.12" myenv. (:issue:2994`)

v20.35.4 (2025-10-28)


Commits
  • d0ad11d release 20.36.1
  • dec4cec Merge pull request #3013 from gaborbernat/fix-sec
  • 5fe5d38 release 20.36.0 (#3011)
  • 9719376 release 20.36.0
  • 0276db6 Add support for PEP 440 version specifiers in the --python flag. (#3008)
  • 4f900c2 Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 (#3...
  • 13afcc6 fix: resolve EncodingWarning in tox upgrade environment (#3007)
  • 31b5d31 [pre-commit.ci] pre-commit autoupdate (#2997)
  • 7c28422 fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 (...
  • 365628c test_too_many_open_files: assert on errno.EMFILE instead of strerror (#3001)
  • Additional commits viewable in compare view

@dependabotdependabotBot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 12, 2026
CopilotAI review requested due to automatic review settings July 12, 2026 07:26
@dependabot
dependabotBot requested a review from a team as a code ownerJuly 12, 2026 07:26
@dependabotdependabotBot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 12, 2026

CopilotAI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot can't review bot-authored pull requests automatically. A user with Copilot access can request a review manually.

@dependabot
dependabotBotforce-pushed the dependabot/uv/virtualenv-20.36.1 branch 4 times, most recently from c956e56 to aebd61fCompareJuly 23, 2026 17:04
@dependabot
dependabotBot requested review from a team and cristipufu as code ownersJuly 23, 2026 17:04
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.35.4 to 20.36.1.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.35.4...20.36.1)
---
updated-dependencies:
- dependency-name: virtualenv
dependency-version: 20.36.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/uv/virtualenv-20.36.1 branch from aebd61f to d066284CompareAugust 4, 2026 11:18
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filepython:uvPull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant