Update dependency virtualenv to v20.26.6 [SECURITY] #25
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==20.7.2->==20.26.6GitHub Vulnerability Alerts
CVE-2024-53899
virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.
Release Notes
pypa/virtualenv (virtualenv)
v20.26.6Compare Source
v20.26.5Compare Source
v20.26.4Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.26.3...20.26.4
v20.26.3Compare Source
What's Changed
Full Changelog: pypa/virtualenv@20.26.2...20.26.3
v20.26.2Compare Source
v20.26.1Compare Source
v20.26.0Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.25.3...20.26.0
v20.25.3Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.25.2...20.25.3
v20.25.2Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.25.1...20.25.2
v20.25.1Compare Source
v20.25.0Compare Source
What's Changed
Full Changelog: pypa/virtualenv@20.24.6...20.25.0
v20.24.7Compare Source
What's Changed
Full Changelog: pypa/virtualenv@20.24.6...20.24.7
v20.24.6Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.24.5...20.24.6
v20.24.5Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.24.4...20.24.5
v20.24.4Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.24.3...20.24.4
v20.24.3Compare Source
What's Changed
tasksdirectory to sdist on build (#2610) by @sigma67 in https://github.com/pypa/virtualenv/pull/2620New Contributors
Full Changelog: pypa/virtualenv@20.24.2...20.24.3
v20.24.2Compare Source
What's Changed
Full Changelog: pypa/virtualenv@20.24.1...20.24.2
v20.24.1Compare Source
What's Changed
pipby @arielkirkwood in https://github.com/pypa/virtualenv/pull/2611New Contributors
Full Changelog: pypa/virtualenv@20.24.0...20.24.1
v20.24.0Compare Source
What's Changed
VIRTUAL_ENV_PROMPTin activation scripts (#2194) by @jimporter in https://github.com/pypa/virtualenv/pull/2606New Contributors
Full Changelog: pypa/virtualenv@20.23.1...20.24.0
v20.23.1Compare Source
What's Changed
pytest-freezegunby @jugmac00 in https://github.com/pypa/virtualenv/pull/2576New Contributors
Full Changelog: pypa/virtualenv@20.23.0...20.23.1
v20.23.0Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.22.0...20.23.0
v20.22.0Compare Source
What's Changed
Full Changelog: pypa/virtualenv@20.21.1...20.22.0
v20.21.1Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.21.0...20.21.1
v20.21.0Compare Source
What's Changed
ReentrantFileLockthread-safe and, thereby, fix race condition invirtualenv.cli_runby @radoering in https://github.com/pypa/virtualenv/pull/2517New Contributors
Full Changelog: pypa/virtualenv@20.20.0...20.21.0
v20.20.0Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.19.0...20.20.0
v20.19.0Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.18.0...20.19.0
v20.18.0Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.17.1...20.18.0
v20.17.1Compare Source
What's Changed
VIRTUAL_ENV_DISABLE_PROMPTin nushell activation script by @m-lima in https://github.com/pypa/virtualenv/pull/2458New Contributors
Full Changelog: pypa/virtualenv@20.17.0...20.17.1
v20.17.0Compare Source
What's Changed
Full Changelog: pypa/virtualenv@20.16.7...20.17.0
v20.16.7Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.16.6...20.16.7
v20.16.6Compare Source
What's Changed
find_compatible_in_houseby @schaap in https://github.com/pypa/virtualenv/pull/2430New Contributors
Full Changelog: pypa/virtualenv@20.16.5...20.16.6
v20.16.5Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.16.4...20.16.5
v20.16.4Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.16.3...20.16.4
v20.16.3Compare Source
What's Changed
Full Changelog: pypa/virtualenv@20.16.2...20.16.3
v20.16.2Compare Source
What's Changed
Full Changelog: pypa/virtualenv@20.16.1...20.16.2
v20.16.1Compare Source
What's Changed
Full Changelog: pypa/virtualenv@20.16.0...20.16.1
v20.16.0Compare Source
What's Changed
siteafter rewrite by @YouJiacheng in https://github.com/pypa/virtualenv/pull/2379New Contributors
Full Changelog: pypa/virtualenv@20.15.1...20.16.0
v20.15.1Compare Source
v20.15.0Compare Source
What's Changed
New Contributors
Full Changelog: pypa/virtualenv@20.14.1...20.15.0
v20.14.1Compare Source
v20.14.0Compare Source
v20.13.4Compare Source
v20.13.3Compare Source
v20.13.2Compare Source
v20.13.1Compare Source
v20.13.0Compare Source
v20.12.1Compare Source
v20.12.0Compare Source
v20.11.2Compare Source
v20.11.1Compare Source
v20.11.0Compare Source
[`v20.
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.