[pull] master from aio-libs:master - #697
Merged
Merged
Conversation
Bumps [pip](https://github.com/pypa/pip) from 26.1.2 to 26.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p> <blockquote> <h1>26.2 (2026-07-29)</h1> <h2>Deprecations and Removals</h2> <ul> <li> <p>Newly published packages will no longer be immediately visible to pip if the index uses caching. To install a newly published package, use <code>--refresh-package</code>. (<code>[#13680](pypa/pip#13680) <https://github.com/pypa/pip/issues/13680></code>_)</p> </li> <li> <p>Drop support for detecting legacy, non-:pep:<code>405</code>, <code>virtualenv</code> (< 20) environments. (<code>[#14062](pypa/pip#14062) <https://github.com/pypa/pip/issues/14062></code>_)</p> </li> <li> <p>Constraints files, including <code>PIP_CONSTRAINT</code>, no longer affect isolated build environments. Use <code>--build-constraint</code> or the <code>PIP_BUILD_CONSTRAINT</code> environment variable to constrain build dependencies instead.</p> <p>The <code>--use-feature=build-constraint</code> flag is now always enabled and has no effect. (<code>[#14094](pypa/pip#14094) <https://github.com/pypa/pip/issues/14094></code>_)</p> </li> </ul> <h2>Features</h2> <ul> <li> <p>Declare support for Python 3.15 (<code>[#14208](pypa/pip#14208) <https://github.com/pypa/pip/issues/14208></code>_)</p> </li> <li> <p>Support self-referential extras officially. pip has supported this by accident since version 21.2. (<code>[#11296](pypa/pip#11296) <https://github.com/pypa/pip/issues/11296></code>_)</p> </li> <li> <p>Add <code>--only-deps</code> flag to instruct pip to select only the dependencies of supplied packages. It cannot be used with <code>--no-deps</code>, <code>-r</code>, <code>--group</code>, or <code>--requirements-from-script</code>. (<code>[#11440](pypa/pip#11440) <https://github.com/pypa/pip/issues/11440></code>_)</p> </li> <li> <p>Cache simple responses in accordance to their <code>Cache-Control</code> header instead of always revalidating on every request. To refresh cached package index responses and ensure newly published packages are found, use <code>--refresh-package <package></code>. (<code>[#13680](pypa/pip#13680) <https://github.com/pypa/pip/issues/13680></code>_)</p> </li> <li> <p>Add <code>--no-require-hashes</code> to disable automatic enablement of <code>--require-hashes</code> when encountering a requirement with hashes. (<code>[#14169](pypa/pip#14169) <https://github.com/pypa/pip/issues/14169></code>_)</p> </li> <li> <p>Honor <code>--only-final</code> when sourcing requirements with <code>-r pylock.toml</code>. (<code>[#13950](pypa/pip#13950) <https://github.com/pypa/pip/issues/13950></code>_)</p> </li> <li> <p>Add support for <code>pylock.toml</code> <code>upload-time</code> field, so <code>--uploaded-prior-to</code> works with <code>-r pylock.toml</code>. (<code>[#14168](pypa/pip#14168) <https://github.com/pypa/pip/issues/14168></code>_)</p> </li> <li> <p>Better error messages in case of conflicts with requirements from <code>-r pylock.toml</code>. (<code>[#13963](pypa/pip#13963) <https://github.com/pypa/pip/issues/13963></code>_)</p> </li> <li> <p>Add experimental support for isolating build subprocesses by creating standard virtual environments. This will fix most (if not all) subtle isolation issues that can lead to broken builds exclusive to pip. The feature can be enabled via <code>--use-feature=venv-isolation</code> and will be enabled by default in a future release.</p> <p>Note that the feature has limited compatibility with <code>--use-feature=inprocess-build-deps</code>. While most builds should work with both features enabled, there are known edge cases. <code>inprocess-build-deps</code> will not be enabled by default until they are fixed. (<code>[#14070](pypa/pip#14070) <https://github.com/pypa/pip/issues/14070></code>_)</p> </li> <li> <p>Present more informative diagnostic errors on uncaught network errors. (<code>[#14115](pypa/pip#14115) <https://github.com/pypa/pip/issues/14115></code>_)</p> </li> <li> <p>Allow opting out of Git partial clones with <code>PIP_NO_PARTIAL_CLONE_FOR_BROKEN_GIT_SERVER</code>. (<code>[#11043](pypa/pip#11043) <https://github.com/pypa/pip/issues/11043></code>_)</p> </li> <li> <p>Add a <code>--no-proxy-env</code> (or <code>--proxy ""</code>) option to ignore proxies configured via non-pip environment variables or configuration files. A proxy set with <code>--proxy</code> is still used. (<code>[#5378](pypa/pip#5378) <https://github.com/pypa/pip/issues/5378></code>_)</p> </li> <li> <p>Add support for pulling username from keyring subprocess provider (<code>[#12543](pypa/pip#12543) <https://github.com/pypa/pip/issues/12543></code>_)</p> </li> <li> <p>Speedup tab autocompletion by lazy-importing certain modules. (<code>[#4768](pypa/pip#4768) <https://github.com/pypa/pip/issues/4768></code>_)</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/pip/commit/4b6ae5c4d7d63a61a99fbecbead8dbc35cc8b357"><code>4b6ae5c</code></a> Bump for release</li> <li><a href="https://github.com/pypa/pip/commit/50b6d3cf998e141d106e72ba17380c39f979188d"><code>50b6d3c</code></a> Update AUTHORS.txt</li> <li><a href="https://github.com/pypa/pip/commit/dbddfbde3a2f57401c9ad1b910aee6d195af7b8d"><code>dbddfbd</code></a> Tweak news entries for pip 26.2 (<a href="https://redirect.github.com/pypa/pip/issues/14212">#14212</a>)</li> <li><a href="https://github.com/pypa/pip/commit/6576b7596c97bb95ce02098303d25bf82dd44943"><code>6576b75</code></a> Merge pull request <a href="https://redirect.github.com/pypa/pip/issues/14165">#14165</a> from sbidoul/refactor-pylock-hanling-sbi</li> <li><a href="https://github.com/pypa/pip/commit/0090e0065ae0087d5d6c171a4eb1821e127aa120"><code>0090e00</code></a> Address a variety of typos detected in code review</li> <li><a href="https://github.com/pypa/pip/commit/e12ddd958df6878f38f2a6f777e4653613eb4821"><code>e12ddd9</code></a> Add support for --uploaded-prior-to with -r pylock.toml</li> <li><a href="https://github.com/pypa/pip/commit/5eefdbcb09ab9783ab89f33fb85c48abf45eb7be"><code>5eefdbc</code></a> Better conflict report for requirements from -r pylock.toml</li> <li><a href="https://github.com/pypa/pip/commit/6d71ff83d64b36504761990911e797c0f5d259d1"><code>6d71ff8</code></a> Test --only-final with -r pylock.toml</li> <li><a href="https://github.com/pypa/pip/commit/e7d6eb9983980a6380a12e0822da2c1c560e1bb4"><code>e7d6eb9</code></a> Refactor -r pylock.toml</li> <li><a href="https://github.com/pypa/pip/commit/756506d154a5b5b5746e9c66bc6e52d6ae3803a9"><code>756506d</code></a> Add TODO about pylock.select and --no-binary</li> <li>Additional commits viewable in <a href="https://github.com/pypa/pip/compare/26.1.2...26.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.3 to 4.37.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v4.37.4</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h2>4.37.4 - 29 Jul 2026</h2> <ul> <li>This version of the CodeQL Action adds support for the <code>tools</code> input for the <code>codeql-action/init</code> step to be specified using a <code>github-codeql-tools</code> <a href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository property</a>. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to <code>toolcache</code> to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for <code>tools</code> in the workflow definition always takes precedence unless the value of the repository property starts with <code>!</code>. <a href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/f205ea1c3313d32999d8d6a48b4f6530d4437b38"><code>f205ea1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4053">#4053</a> from github/update-v4.37.4-9130ce0f7</li> <li><a href="https://github.com/github/codeql-action/commit/e40d079dd9dd4a5c74f625cecd83867c8208aa71"><code>e40d079</code></a> Update changelog for v4.37.4</li> <li><a href="https://github.com/github/codeql-action/commit/9130ce0f733a0d17b9e1b9692c2af19be6c69dda"><code>9130ce0</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4051">#4051</a> from github/update-bundle/codeql-bundle-v2.26.2</li> <li><a href="https://github.com/github/codeql-action/commit/c62d82468641dca0f8df108ab73e2a8407ac9cf7"><code>c62d824</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/da0c1901011e62af9c02aae8bf5b8885b11f7741"><code>da0c190</code></a> Update default bundle to codeql-bundle-v2.26.2</li> <li><a href="https://github.com/github/codeql-action/commit/18420e3271f74589575af831a523c833acda327f"><code>18420e3</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4043">#4043</a> from github/mbg/ts/changelog</li> <li><a href="https://github.com/github/codeql-action/commit/7e8d8970f03ec5a78ab372fc0778e8e4194111a5"><code>7e8d897</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4046">#4046</a> from github/mbg/repo-prop/code-quality</li> <li><a href="https://github.com/github/codeql-action/commit/2d4c474c2ca5ea2965b9e53fabb7b67b0100016c"><code>2d4c474</code></a> Log <code>!analysisKindSupported</code> case</li> <li><a href="https://github.com/github/codeql-action/commit/98c05a17d327d7c4055fca83114434ab56baacf6"><code>98c05a1</code></a> Fix argument validation in <code>rollback-changelog.ts</code></li> <li><a href="https://github.com/github/codeql-action/commit/8289a49271cbb335d374e7e2e7a50c1576be0afe"><code>8289a49</code></a> Ignore repository property for unsupported analysis kinds</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/v4.37.3...v4.37.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.32.0 to 3.32.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/py-filelock/releases">filelock's releases</a>.</em></p> <blockquote> <h2>3.32.2</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>Fix test failures on NetBSD (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/689">#689</a>) by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/693">tox-dev/filelock#693</a></li> <li>🧪 test(soft-rw): deflake writer phase-2 peer-marker test by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/694">tox-dev/filelock#694</a></li> <li>hand back the claim when a heartbeat thread fails to start by <a href="https://github.com/dxbjavid"><code>@dxbjavid</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/691">tox-dev/filelock#691</a></li> <li>🧪 test(unix): deflake sticky-bit concurrent-unlink on graalpy by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/695">tox-dev/filelock#695</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.32.1...3.32.2">https://github.com/tox-dev/filelock/compare/3.32.1...3.32.2</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst">filelock's changelog</a>.</em></p> <blockquote> <p>########### Changelog ###########</p> <p>.. towncrier-draft-entries:: Unreleased</p> <p>.. towncrier release notes start</p> <hr /> <p>3.32.2 (2026-07-29)</p> <hr /> <ul> <li>A <code>SoftReadWriteLock</code> or <code>SoftFileLease</code> acquire whose heartbeat thread fails to start now unlinks its marker and hands the claim back, instead of leaving an unrefreshed marker a peer takes while the caller believes it still holds the lock. :pr:<code>691</code></li> </ul> <hr /> <p>3.32.1 (2026-07-26)</p> <hr /> <ul> <li>Canceling an <code>AsyncSoftReadWriteLock</code> acquire now releases the claim instead of leaking a marker whose heartbeat wedges every contender. :pr:<code>686</code></li> </ul> <hr /> <p>3.32.0 (2026-07-21)</p> <hr /> <ul> <li><code>SoftReadWriteLock</code> closes the directory handle it opens to scan for readers as soon as a scan stops early, rather than holding it until the generator is collected. :pr:<code>685</code></li> <li>Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:<code>683</code></li> <li>The source distribution ships the capability probes the tests import, and reading one no longer needs <code>coverage</code> installed, so the suite runs from an unpacked sdist instead of failing on a missing <code>coverage_pragmas</code>. :pr:<code>685</code></li> </ul> <hr /> <p>3.31.2 (2026-07-21)</p> <hr /> <ul> <li><code>filelock</code> imports again on runtimes whose <code>errno</code> omits <code>ENOTSUP</code>, such as GraalPy, where importing the package raised <code>ImportError</code>. It probes the code instead, preferring <code>ENOTSUP</code>, falling back to <code>EOPNOTSUPP</code> where that name is absent, and dropping to <code>ENOSYS</code>/<code>EXDEV</code> where neither exists. Platforms defining <code>ENOTSUP</code> keep their behavior. :pr:<code>681</code></li> </ul> <hr /> <p>3.31.1 (2026-07-20)</p> <hr /> <ul> <li>A <code>SoftFileLease</code> acquired on one thread keeps its claim when another thread fails to acquire the same lease object, so its heartbeat carries on refreshing the marker instead of being torn down and letting a peer take the live claim. :pr:<code>680</code></li> </ul> <hr /> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/filelock/commit/9a6cc4365b1e47368bce33ab005beb749983f3e5"><code>9a6cc43</code></a> Release 3.32.2</li> <li><a href="https://github.com/tox-dev/filelock/commit/56879c7fcbc2ffc412ce575c612a2003df2be2d3"><code>56879c7</code></a> 🧪 test(unix): deflake sticky-bit concurrent-unlink on graalpy (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/695">#695</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/ecf5be040662529d093b1b70dd8ec564666b5a55"><code>ecf5be0</code></a> hand back the claim when a heartbeat thread fails to start (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/691">#691</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/ee70d2edff7f9824987758445b51a22d81003017"><code>ee70d2e</code></a> 🧪 test(soft-rw): deflake writer phase-2 peer-marker test (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/694">#694</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/1eb14ddb6b979f49bc0c6818e8daba7dd08c28c1"><code>1eb14dd</code></a> Fix test failures on NetBSD (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/689">#689</a>) (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/693">#693</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/d81e85936c51fa88430a0d91db595e989c0a088b"><code>d81e859</code></a> build(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/692">#692</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/6fbc90559e8e7efa5c24e66392aea662b19369c8"><code>6fbc905</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/690">#690</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/34d1c38260dc50d6b5d3c4b83f8b5f7125c17436"><code>34d1c38</code></a> build(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/688">#688</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/bf13ec7338eca96b2d09c719f464a0f1b8a1f093"><code>bf13ec7</code></a> Release 3.32.1</li> <li><a href="https://github.com/tox-dev/filelock/commit/887f1142cde10ba49c7270b7f0a8614239df1df3"><code>887f114</code></a> build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/687">#687</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tox-dev/py-filelock/compare/3.32.0...3.32.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 21.7.0 to 21.7.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/virtualenv/releases">virtualenv's releases</a>.</em></p> <blockquote> <h2>21.7.1</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>📝 docs(branding): clarify official logo vs favicon by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3200">pypa/virtualenv#3200</a></li> <li>Upgrade embedded pip/setuptools/wheel by <a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot] in <a href="https://redirect.github.com/pypa/virtualenv/pull/3201">pypa/virtualenv#3201</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/21.7.0...21.7.1">https://github.com/pypa/virtualenv/compare/21.7.0...21.7.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst">virtualenv's changelog</a>.</em></p> <blockquote> <h1>Bugfixes - 21.7.1</h1> <ul> <li> <p>Upgrade embedded wheels:</p> <ul> <li>pip to <code>26.2</code> from <code>26.1.2</code> (:issue:<code>u</code>)</li> </ul> </li> </ul> <h1>Improved Documentation - 21.7.1</h1> <ul> <li>Document that <code>virtualenv.png</code> is the official logo and <code>virtualenv.svg</code> is a simplified favicon-only mark - by :user:<code>gaborbernat</code>. (:issue:<code>3199</code>)</li> </ul> <hr /> <p>v21.7.0 (2026-07-21)</p> <hr /> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/virtualenv/commit/e46c8e94d63b4214da3c24e1bc4febcfbfee7395"><code>e46c8e9</code></a> release 21.7.1</li> <li><a href="https://github.com/pypa/virtualenv/commit/b66560a65d38d2ea7fe29829685b86a8d55146b5"><code>b66560a</code></a> Upgrade embedded pip/setuptools/wheel (<a href="https://redirect.github.com/pypa/virtualenv/issues/3201">#3201</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/bf5f5206ec83e7536068e6f9525f8c8a9cda69ab"><code>bf5f520</code></a> 📝 docs(branding): clarify official logo vs favicon (<a href="https://redirect.github.com/pypa/virtualenv/issues/3200">#3200</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/8507c7b0a0210eaa67c5c81d4d081d7c49fa679f"><code>8507c7b</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/3197">#3197</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/694406aeafe8a16011e6c04bb7728d1cd531df12"><code>694406a</code></a> chore(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 (<a href="https://redirect.github.com/pypa/virtualenv/issues/3198">#3198</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/b486255413664ba1e7e264a7807e361feda5367b"><code>b486255</code></a> chore(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (<a href="https://redirect.github.com/pypa/virtualenv/issues/3196">#3196</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/ac2ad97d67d2ecd6ceaaffde99586d98b7cfc8ea"><code>ac2ad97</code></a> chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0 (<a href="https://redirect.github.com/pypa/virtualenv/issues/3195">#3195</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/df94b342b732f96859595104bebbcfa74a88616b"><code>df94b34</code></a> chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (<a href="https://redirect.github.com/pypa/virtualenv/issues/3194">#3194</a>)</li> <li>See full diff in <a href="https://github.com/pypa/virtualenv/compare/21.7.0...21.7.1">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )