Title: Bump virtualenv from 20.31.2 to 20.36.1 by dependabot[bot] · Pull Request #443 · python-openapi/openapi-spec-validator · GitHub
Open Graph Title: Bump virtualenv from 20.31.2 to 20.36.1 by dependabot[bot] · Pull Request #443 · python-openapi/openapi-spec-validator
X Title: Bump virtualenv from 20.31.2 to 20.36.1 by dependabot[bot] · Pull Request #443 · python-openapi/openapi-spec-validator
Description: Bumps virtualenv from 20.31.2 to 20.36.1.
Release notes
Sourced from virtualenv's releases.
20.36.1
What's Changed
release 20.36.0 by @gaborbernat in pypa/virtualenv#3011
fix: resolve TOCTOU vulnerabilities in app_data and lock directory creation by @gaborbernat in pypa/virtualenv#3013
Full Changelog: pypa/virtualenv@20.36.0...20.36.1
20.36.0
What's Changed
release 20.35.3 by @gaborbernat in pypa/virtualenv#2981
fix: Prevent NameError when accessing _DISTUTILS_PATCH during file ov… by @gracetyy in pypa/virtualenv#2982
Upgrade pip and fix 3.15 picking old wheel by @gaborbernat in pypa/virtualenv#2989
release 20.35.4 by @gaborbernat in pypa/virtualenv#2990
fix: wrong path on migrated venv by @sk1234567891 in pypa/virtualenv#2996
test_too_many_open_files: assert on errno.EMFILE instead of strerror by @pltrz in pypa/virtualenv#3001
fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 by @pythonhubdev in pypa/virtualenv#3002
fix: resolve EncodingWarning in tox upgrade environment by @gaborbernat in pypa/virtualenv#3007
Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 by @rahuldevikar in pypa/virtualenv#3006
Add support for PEP 440 version specifiers in the --python flag. by @rahuldevikar in pypa/virtualenv#3008
New Contributors
@gracetyy made their first contribution in pypa/virtualenv#2982
@sk1234567891 made their first contribution in pypa/virtualenv#2996
@pltrz made their first contribution in pypa/virtualenv#3001
@pythonhubdev made their first contribution in pypa/virtualenv#3002
@rahuldevikar made their first contribution in pypa/virtualenv#3006
Full Changelog: pypa/virtualenv@20.35.3...20.36.0
20.35.4
What's Changed
release 20.35.3 by @gaborbernat in pypa/virtualenv#2981
fix: Prevent NameError when accessing _DISTUTILS_PATCH during file ov… by @gracetyy in pypa/virtualenv#2982
Upgrade pip and fix 3.15 picking old wheel by @gaborbernat in pypa/virtualenv#2989
New Contributors
@gracetyy made their first contribution in pypa/virtualenv#2982
Full Changelog: pypa/virtualenv@20.35.3...20.35.4
20.35.3
... (truncated)
Changelog
Sourced from virtualenv's changelog.
v20.36.1 (2026-01-09)
Bugfixes - 20.36.1
- Fix TOCTOU vulnerabilities in app_data and lock directory creation that could be exploited via symlink attacks - reported by :user:`tsigouris007`, fixed by :user:`gaborbernat`. (:issue:`3013`)
v20.36.0 (2026-01-07)
Features - 20.36.0
Add support for PEP 440 version specifiers in the --python flag. Users can now specify Python versions using operators like >=, <=, ~=, etc. For example: virtualenv --python=">=3.12" myenv . (:issue:2994`)
v20.35.4 (2025-10-28)
Bugfixes - 20.35.4
- Fix race condition in ``_virtualenv.py`` when file is overwritten during import, preventing ``NameError`` when ``_DISTUTILS_PATCH`` is accessed - by :user:`gracetyy`. (:issue:`2969`)
- Upgrade embedded wheels:
pip to 25.3 from 25.2 (:issue:2989)
v20.35.3 (2025-10-10)
Bugfixes - 20.35.3
Accept RuntimeError in test_too_many_open_files, by :user:esafak (:issue:2935)
v20.35.2 (2025-10-10)
Bugfixes - 20.35.2
- Revert out changes related to the extraction of the discovery module - by :user:`gaborbernat`. (:issue:`2978`)
v20.35.1 (2025-10-09)
Bugfixes - 20.35.1
Patch get_interpreter to handle missing cache and app_data - by :user:esafak (:issue:2972)
Fix backwards incompatible changes to PythonInfo - by :user:gaborbernat. (:issue:2975)
v20.35.0 (2025-10-08)
Features - 20.35.0
... (truncated)
Commits
d0ad11d release 20.36.1
dec4cec Merge pull request #3013 from gaborbernat/fix-sec
5fe5d38 release 20.36.0 (#3011)
9719376 release 20.36.0
0276db6 Add support for PEP 440 version specifiers in the --python flag. (#3008)
4f900c2 Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 (#3...
13afcc6 fix: resolve EncodingWarning in tox upgrade environment (#3007)
31b5d31 [pre-commit.ci] pre-commit autoupdate (#2997)
7c28422 fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 (...
365628c test_too_many_open_files: assert on errno.EMFILE instead of strerror (#3001)
Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show
Open Graph Description: Bumps virtualenv from 20.31.2 to 20.36.1. Release notes Sourced from virtualenv's releases. 20.36.1 What's Changed release 20.36.0 by @gaborbernat in pypa/virtualenv#3011 fix: resolve ...
X Description: Bumps virtualenv from 20.31.2 to 20.36.1. Release notes Sourced from virtualenv's releases. 20.36.1 What's Changed release 20.36.0 by @gaborbernat in pypa/virtualenv#3011 fix: ...
Opengraph URL: https://github.com/python-openapi/openapi-spec-validator/pull/443
X: @github
Domain: patch-diff.githubusercontent.com
| route-pattern | /:user_id/:repository/pull/:id/checks(.:format) |
| route-controller | pull_requests |
| route-action | checks |
| fetch-nonce | v2:71516121-6e9d-f09e-748e-581736f24011 |
| current-catalog-service-hash | 87dc3bc62d9b466312751bfd5f889726f4f1337bdff4e8be7da7c93d6c00a25a |
| request-id | B25A:209C5F:2A5C479:3ADD8FD:6977AB7D |
| html-safe-nonce | 312bbb8602a1d8a3f82e4fcef038ca582a0bb3c247fa2ab26d85102c4c8da87d |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCMjVBOjIwOUM1RjoyQTVDNDc5OjNBREQ4RkQ6Njk3N0FCN0QiLCJ2aXNpdG9yX2lkIjoiODg2MTM0ODMzNDcxMTMxOTQyMSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 9420395f59c8c0cecc6c2690a47f98769acfe4212c089f3097eebe065ac83417 |
| hovercard-subject-tag | pull_request:3171082268 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,checks,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/python-openapi/openapi-spec-validator/pull/443/checks |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Bumps virtualenv from 20.31.2 to 20.36.1. Release notes Sourced from virtualenv's releases. 20.36.1 What's Changed release 20.36.0 by @gaborbernat in pypa/virtualenv#3011 fix: resolve ... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | e8b91803a5fc7ac066710509c57c636dab6ed4620bd9213b470a4617c79989c9 |
| turbo-cache-control | no-preview |
| go-import | github.com/python-openapi/openapi-spec-validator git https://github.com/python-openapi/openapi-spec-validator.git |
| octolytics-dimension-user_id | 126442889 |
| octolytics-dimension-user_login | python-openapi |
| octolytics-dimension-repository_id | 102581313 |
| octolytics-dimension-repository_nwo | python-openapi/openapi-spec-validator |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 102581313 |
| octolytics-dimension-repository_network_root_nwo | python-openapi/openapi-spec-validator |
| turbo-body-classes | logged-out env-production page-responsive full-width full-width-p-0 |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 9b4562e3c5c60b38349a7d80ec8e160c11fe84b6 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width