Skip to content

Bump virtualenv from 20.35.4 to 20.36.0#141

Merged
docktermj merged 1 commit intomainfrom
dependabot/pip/virtualenv-20.36.0
Jan 7, 2026
Merged

Bump virtualenv from 20.35.4 to 20.36.0#141
docktermj merged 1 commit intomainfrom
dependabot/pip/virtualenv-20.36.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 7, 2026 •
edited by github-actions bot
Loading

Bumps virtualenv from 20.35.4 to 20.36.0.

Release notes

Sourced from virtualenv's releases.

20.36.0

What's Changed

New Contributors

Full Changelog: pypa/virtualenv@20.35.3...20.36.0

Changelog

Sourced from virtualenv's changelog.

v20.36.0 (2026-01-07)

Features - 20.36.0

- Add support for PEP 440 version specifiers in the ``--python`` flag. Users can now specify Python versions using operators like ``>=``, ``<=``, ``~=``, etc. For example: ``virtualenv --python=">=3.12" myenv`` `. (:issue:`2994`)
Commits
  • 9719376 release 20.36.0
  • 0276db6 Add support for PEP 440 version specifiers in the --python flag. (#3008)
  • 4f900c2 Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 (#3...
  • 13afcc6 fix: resolve EncodingWarning in tox upgrade environment (#3007)
  • 31b5d31 [pre-commit.ci] pre-commit autoupdate (#2997)
  • 7c28422 fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 (...
  • 365628c test_too_many_open_files: assert on errno.EMFILE instead of strerror (#3001)
  • 5d09a90 fix: wrong path on migrated venv (#2996)
  • 23032cb [pre-commit.ci] pre-commit autoupdate (#2995)
  • 70afcd7 [pre-commit.ci] pre-commit autoupdate (#2993)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Resolves #3008
Resolves #3
Resolves #3007
Resolves #2997
Resolves #3001
Resolves #2996
Resolves #2995
Resolves #2993
Resolves pypa/virtualenv#2981
Resolves pypa/virtualenv#2982
Resolves pypa/virtualenv#2989
Resolves pypa/virtualenv#2990
Resolves pypa/virtualenv#2996
Resolves pypa/virtualenv#3001
Resolves pypa/virtualenv#3002
Resolves pypa/virtualenv#3007
Resolves pypa/virtualenv#3006
Resolves pypa/virtualenv#3008

@dependabot
Bump virtualenv from 20.35.4 to 20.36.0
8923222 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.35.4 to 20.36.0.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.35.4...20.36.0)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 20.36.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 7, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 7, 2026 17:24
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 7, 2026
@github-actions
Copy link

github-actions bot commented Jan 7, 2026

🤖 Claude Code Review

Code Review Analysis

✅ Code Quality

  • ✅ Code follows style guide: This is a dependency version update in pyproject.toml, which is straightforward and doesn't involve code style considerations.
  • ✅ No commented-out code: N/A - no code changes
  • ✅ Meaningful variable names: N/A - no new variables
  • ✅ DRY principle followed: N/A - no code duplication possible
  • ✅ Identify Defects: No bugs or security vulnerabilities introduced. This is a minor version bump of virtualenv from 20.35.4 to 20.36.0 in development dependencies.

✅ Testing

  • ✅ Unit tests for new functions: N/A - no new functions
  • ✅ Integration tests for new endpoints: N/A - no new endpoints
  • ✅ Edge cases covered: N/A - dependency update only
  • ✅ Test coverage > 80%: Not affected by this change

✅ Documentation

  • ✅ Readme updated if needed: Not required - internal dependency update
  • ✅ API docs updated: Not required - no API changes
  • ✅ Inline comments for complex logic: N/A - no code logic
  • ✅ CHANGELOG.md updated: May need updating depending on project conventions for dependency bumps
  • ✅ Markdown formatting: N/A - no markdown changes

✅ Security

  • ✅ No hardcoded credentials: None present
  • ✅ Input validation implemented: N/A - dependency update only
  • ✅ Proper error handling: N/A - no code changes
  • ✅ No sensitive data in logs: N/A - no logging code
  • ✅ No license files (.lic) or AQAAAD strings: None detected

Summary

Status: ✅ APPROVED

This is a clean dependency version update with no concerns. The change bumps virtualenv from version 20.35.4 to 20.36.0 in the development dependencies section of pyproject.toml:49.

Recommendations:

  1. Optional: Consider updating CHANGELOG.md if your project tracks dependency updates (check project conventions)
  2. Ensure CI/CD pipeline passes with the new virtualenv version
  3. No other concerns identified

This is a low-risk change appropriate for automated dependency management tools like Dependabot.

Automated code review analyzing defects and coding standards

@docktermj docktermj merged commit 95e0b97 into main Jan 7, 2026
49 checks passed
@docktermj docktermj deleted the dependabot/pip/virtualenv-20.36.0 branch January 7, 2026 23:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@docktermj docktermj docktermj approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Initialial functionality

1 participant

@docktermj