Title: Bump virtualenv from 20.35.4 to 20.36.1 by dependabot[bot] · Pull Request #150 · SocketDev/socket-python-cli · GitHub
Open Graph Title: Bump virtualenv from 20.35.4 to 20.36.1 by dependabot[bot] · Pull Request #150 · SocketDev/socket-python-cli
X Title: Bump virtualenv from 20.35.4 to 20.36.1 by dependabot[bot] · Pull Request #150 · SocketDev/socket-python-cli
Description: Bumps virtualenv from 20.35.4 to 20.36.1.
Release notes
Sourced from virtualenv's releases.
20.36.1
What's Changed
release 20.36.0 by @gaborbernat in pypa/virtualenv#3011
fix: resolve TOCTOU vulnerabilities in app_data and lock directory creation by @gaborbernat in pypa/virtualenv#3013
Full Changelog: pypa/virtualenv@20.36.0...20.36.1
20.36.0
What's Changed
release 20.35.3 by @gaborbernat in pypa/virtualenv#2981
fix: Prevent NameError when accessing _DISTUTILS_PATCH during file ov… by @gracetyy in pypa/virtualenv#2982
Upgrade pip and fix 3.15 picking old wheel by @gaborbernat in pypa/virtualenv#2989
release 20.35.4 by @gaborbernat in pypa/virtualenv#2990
fix: wrong path on migrated venv by @sk1234567891 in pypa/virtualenv#2996
test_too_many_open_files: assert on errno.EMFILE instead of strerror by @pltrz in pypa/virtualenv#3001
fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 by @pythonhubdev in pypa/virtualenv#3002
fix: resolve EncodingWarning in tox upgrade environment by @gaborbernat in pypa/virtualenv#3007
Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 by @rahuldevikar in pypa/virtualenv#3006
Add support for PEP 440 version specifiers in the --python flag. by @rahuldevikar in pypa/virtualenv#3008
New Contributors
@gracetyy made their first contribution in pypa/virtualenv#2982
@sk1234567891 made their first contribution in pypa/virtualenv#2996
@pltrz made their first contribution in pypa/virtualenv#3001
@pythonhubdev made their first contribution in pypa/virtualenv#3002
@rahuldevikar made their first contribution in pypa/virtualenv#3006
Full Changelog: pypa/virtualenv@20.35.3...20.36.0
Changelog
Sourced from virtualenv's changelog.
v20.36.1 (2026-01-09)
Bugfixes - 20.36.1
- Fix TOCTOU vulnerabilities in app_data and lock directory creation that could be exploited via symlink attacks - reported by :user:`tsigouris007`, fixed by :user:`gaborbernat`. (:issue:`3013`)
v20.36.0 (2026-01-07)
Features - 20.36.0
Add support for PEP 440 version specifiers in the --python flag. Users can now specify Python versions using operators like >=, <=, ~=, etc. For example: virtualenv --python=">=3.12" myenv . (:issue:2994`)
Commits
d0ad11d release 20.36.1
dec4cec Merge pull request #3013 from gaborbernat/fix-sec
5fe5d38 release 20.36.0 (#3011)
9719376 release 20.36.0
0276db6 Add support for PEP 440 version specifiers in the --python flag. (#3008)
4f900c2 Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 (#3...
13afcc6 fix: resolve EncodingWarning in tox upgrade environment (#3007)
31b5d31 [pre-commit.ci] pre-commit autoupdate (#2997)
7c28422 fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 (...
365628c test_too_many_open_files: assert on errno.EMFILE instead of strerror (#3001)
Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show
Open Graph Description: Bumps virtualenv from 20.35.4 to 20.36.1. Release notes Sourced from virtualenv's releases. 20.36.1 What's Changed release 20.36.0 by @gaborbernat in pypa/virtualenv#3011 fix: resolve ...
X Description: Bumps virtualenv from 20.35.4 to 20.36.1. Release notes Sourced from virtualenv's releases. 20.36.1 What's Changed release 20.36.0 by @gaborbernat in pypa/virtualenv#3011 fix: ...
Opengraph URL: https://github.com/SocketDev/socket-python-cli/pull/150
X: @github
Domain: patch-diff.githubusercontent.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:ab1abda3-3745-e89e-d392-969c3f7e2bfc |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 898A:3891C0:21E6666:2D580BB:69705E0C |
| html-safe-nonce | 3108f64e718b3822b526000b23cc39f76cc51f5ae85c8e0bad7b3c2df8eb231d |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4OThBOjM4OTFDMDoyMUU2NjY2OjJENTgwQkI6Njk3MDVFMEMiLCJ2aXNpdG9yX2lkIjoiNDQ4Nzc4MDM0OTc2MDI2NTc0MCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 8600c33a5cfdfcf310f1cfbb2014522e699df56fb74936f9c1aed175f7567bc5 |
| hovercard-subject-tag | pull_request:3179602827 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/SocketDev/socket-python-cli/pull/150/files |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Bumps virtualenv from 20.35.4 to 20.36.1. Release notes Sourced from virtualenv's releases. 20.36.1 What's Changed release 20.36.0 by @gaborbernat in pypa/virtualenv#3011 fix: resolve ... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 9920a62ba22d06470388e2904804fb7e5ec51c9e35f81784e9191394c74b2bd2 |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/SocketDev/socket-python-cli git https://github.com/SocketDev/socket-python-cli.git |
| octolytics-dimension-user_id | 69326764 |
| octolytics-dimension-user_login | SocketDev |
| octolytics-dimension-repository_id | 802230750 |
| octolytics-dimension-repository_nwo | SocketDev/socket-python-cli |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 802230750 |
| octolytics-dimension-repository_network_root_nwo | SocketDev/socket-python-cli |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 7d6181066430cc06553c8396ca201e194ae33cb9 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width