Skip to content

Bump virtualenv from 20.35.4 to 20.36.0#269

Merged
docktermj merged 1 commit into
mainfrom
dependabot/pip/virtualenv-20.36.0
Jan 7, 2026
Merged

Bump virtualenv from 20.35.4 to 20.36.0#269
docktermj merged 1 commit into
mainfrom
dependabot/pip/virtualenv-20.36.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jan 7, 2026 •
edited by github-actions Bot
Loading

Bumps virtualenv from 20.35.4 to 20.36.0.

Release notes

Sourced from virtualenv's releases.

20.36.0

What's Changed

New Contributors

Full Changelog: pypa/virtualenv@20.35.3...20.36.0

Changelog

Sourced from virtualenv's changelog.

v20.36.0 (2026-01-07)

Features - 20.36.0

- Add support for PEP 440 version specifiers in the ``--python`` flag. Users can now specify Python versions using operators like ``>=``, ``<=``, ``~=``, etc. For example: ``virtualenv --python=">=3.12" myenv`` `. (:issue:`2994`)
Commits
  • 9719376 release 20.36.0
  • 0276db6 Add support for PEP 440 version specifiers in the --python flag. (#3008)
  • 4f900c2 Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 (#3...
  • 13afcc6 fix: resolve EncodingWarning in tox upgrade environment (#3007)
  • 31b5d31 [pre-commit.ci] pre-commit autoupdate (#2997)
  • 7c28422 fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 (...
  • 365628c test_too_many_open_files: assert on errno.EMFILE instead of strerror (#3001)
  • 5d09a90 fix: wrong path on migrated venv (#2996)
  • 23032cb [pre-commit.ci] pre-commit autoupdate (#2995)
  • 70afcd7 [pre-commit.ci] pre-commit autoupdate (#2993)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Resolves #3008
Resolves #3
Resolves #3007
Resolves #2997
Resolves #3001
Resolves #2996
Resolves #2995
Resolves #2993
Resolves pypa/virtualenv#2981
Resolves pypa/virtualenv#2982
Resolves pypa/virtualenv#2989
Resolves pypa/virtualenv#2990
Resolves pypa/virtualenv#2996
Resolves pypa/virtualenv#3001
Resolves pypa/virtualenv#3002
Resolves pypa/virtualenv#3007
Resolves pypa/virtualenv#3006
Resolves pypa/virtualenv#3008

@dependabot
Bump virtualenv from 20.35.4 to 20.36.0
21b6c83 
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.35.4 to 20.36.0.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.35.4...20.36.0)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 20.36.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jan 7, 2026
@dependabot dependabot Bot requested a review from a team as a code owner January 7, 2026 19:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jan 7, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jan 7, 2026

🤖 Claude Code Review

Code Review Analysis

Code Quality

✅ Code follows style guide - This is a simple dependency version bump in a requirements file. No code style issues apply.

✅ No commented-out code - Clean change, no comments.

✅ Meaningful variable names - N/A for dependency files.

✅ DRY principle followed - N/A for dependency files.

✅ Identify Defects - No bugs, logic errors, or vulnerabilities introduced. This is a minor version bump of virtualenv (20.35.4 → 20.36.0), which is a development-only dependency used for creating isolated Python environments.

✅ Project memory configuration considered - The change aligns with the project structure described in .claude/CLAUDE.md, which mentions the Makefile manages a .venv Python environment. This is a standard dependency update.

Testing

⚠️ Unit tests for new functions - N/A, but note: Dependency updates typically don't require new tests, but the existing test suite should pass after the upgrade.

⚠️ Integration tests for new endpoints - N/A for dependency changes.

⚠️ Edge cases covered - N/A for dependency changes.

⚠️ Test coverage > 80% - Cannot verify from diff, but this change shouldn't affect coverage.

Recommendation: Ensure CI/CD pipeline runs successfully to validate the dependency update doesn't break existing functionality.

Documentation

✅ Readme updated if needed - Not required for minor dependency version bumps.

✅ API docs updated - Not required; this is a development dependency.

✅ Inline comments for complex logic - N/A for requirements files.

❌ CHANGELOG.md updated - CHANGELOG.md should document this dependency update. While minor, dependency updates are typically tracked for transparency and reproducibility.

✅ Markdown formatting - N/A for this change.

Security

✅ No hardcoded credentials - None present.

✅ Input validation implemented - N/A for dependency files.

✅ Proper error handling - N/A for dependency files.

✅ No sensitive data in logs - None present.

✅ No license files or AQAAAD strings - None detected.

Summary

This is a low-risk dependency update. The only issue found is:

Minor Issue (development-requirements.txt):

  • Missing CHANGELOG.md entry for the virtualenv bump from 20.35.4 to 20.36.0

Recommendation: Add a brief entry to CHANGELOG.md documenting this development dependency update, then approve the PR after CI/CD validation passes.

Automated code review analyzing defects and coding standards

@docktermj docktermj merged commit 92da508 into main Jan 7, 2026
11 checks passed
@docktermj docktermj deleted the dependabot/pip/virtualenv-20.36.0 branch January 7, 2026 23:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@docktermj docktermj docktermj approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Initial functionality

2 participants

@docktermj @senzingdevops