Skip to content

build(deps-dev): bump the pip-dependencies group in /requirements.d with 3 updates#9552

Merged
ThomasWaldmann merged 1 commit intomasterfrom
dependabot/pip/requirements.d/pip-dependencies-875f133aec
Mar 31, 2026
Merged

build(deps-dev): bump the pip-dependencies group in /requirements.d with 3 updates#9552
ThomasWaldmann merged 1 commit intomasterfrom
dependabot/pip/requirements.d/pip-dependencies-875f133aec

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 31, 2026

Bumps the pip-dependencies group in /requirements.d with 3 updates: virtualenv, build and tox.

Updates virtualenv from 20.38.0 to 20.39.1

Release notes

Sourced from virtualenv's releases.

20.39.1

What's Changed

Full Changelog: pypa/virtualenv@20.39.0...20.39.1

20.39.0

What's Changed

Full Changelog: pypa/virtualenv@20.38.0...20.39.0

Changelog

Sourced from virtualenv's changelog.

Features - 20.39.1

  • Add support for creating virtual environments with RustPython - by :user:elmjag. (:issue:3010)

v20.39.0 (2026-02-23)

Features - 20.39.0

  • Automatically resolve version manager shims (pyenv, mise, asdf) to the real Python binary during discovery, preventing incorrect interpreter selection when shims are on PATH - by :user:gaborbernat. (:issue:3049)
  • Add architecture (ISA) awareness to Python discovery — users can now specify a CPU architecture suffix in the --python spec string (e.g. cpython3.12-64-arm64) to distinguish between interpreters that share the same version and bitness but target different architectures. Uses sysconfig.get_platform() as the data source, with cross-platform normalization (amd64 ↔ x86_64, aarch64 ↔ arm64). Omitting the suffix preserves existing behavior - by :user:rahuldevikar. (:issue:3059)

v20.38.0 (2026-02-19)

Commits
  • 0272c72 release 20.39.1
  • b1ca37f 🐛 fix(create): add pythonw3.exe to Windows venvs (#3073)
  • 1d4a338 ✨ feat(create): add RustPython support (#3071)
  • a10c5d4 Align dependency versions across projects (#3069)
  • 22a8860 [pre-commit.ci] pre-commit autoupdate (#3068)
  • ad56e78 release 20.39.0
  • ae90556 Add auto-upgrade workflow for embedded dependencies (#3057)
  • 4582e41 🐛 fix(discovery): resolve version-manager shims to real binaries (#3067)
  • e32d82d Add architecture (ISA) awareness to Python discovery (#3058)
  • f8f7f48 🧪 test(discovery): fix test_py_info_cache_clear outside venv (#3065)
  • Additional commits viewable in compare view

Updates build from 1.4.0 to 1.4.2

Release notes

Sourced from build's releases.

1.4.2

What's Changed

New Contributors

Full Changelog: pypa/build@1.4.1...1.4.2

1.4.1

What's Changed

Full Changelog: pypa/build@1.4.0...1.4.1

Changelog

Sourced from build's changelog.

#################### 1.4.2 (2026-03-25) ####################

Bugfixes

  • Ensure the uv installer uses the current version of Python, avoiding an issue if UV_PYTHON is set, for example. (:issue:977)
  • Fix _has_valid_outer_pip returning True when pip is missing, causing build to try using a non-existent pip instead of falling back to virtualenv. (:issue:1003)

#################### 1.4.1 (2026-03-24) ####################

Features

  • Allow setting build constraints - by :user:gaborbernat (:issue:963)
  • Automate releases with pre-release workflow and trusted publishing - by :user:gaborbernat (:issue:991)

Documentation

  • Fix documentation grammar and typos (:issue:979)
  • Reorganize documentation using Diataxis framework - by :user:gaborbernat (:issue:988)
  • Document release process and workflow security practices in contributing guide (:issue:991)

Miscellaneous

  • :issue:991

Bugfixes

  • Fix pip hack workaround - by :user:gaborbernat (:issue:980)

#################### 1.4.0 (2026-01-08) ####################

  • Add --quiet flag (:pr:947)
  • Add option to dump PEP 517 metadata with --metadata (:pr:940, :pr:943)

... (truncated)

Commits
  • 7b7ae07 chore: prepare for 1.4.2
  • 17f3b57 fix: release changelog issue (#1006)
  • b945752 fix: _has_valid_outer_pip when pip is missing (#1003)
  • 74ae997 🔧 fix(towncrier): match docstrfmt RST formatting expectations (#1002)
  • 3786929 🐛 fix(release): detect pre-commit environment inconsistencies (#1001)
  • 737bdb7 fix(uv): always pass the python to use (#996)
  • bd88956 chore: prepare for 1.4.1
  • 062e7e2 🐛 fix(deps): add pre-commit to release dependency group (#1000)
  • 3d8e260 🐛 fix(ci): resolve pre-release auth failure and change detection (#999)
  • f2a2610 chore: fix fix job (#997)
  • Additional commits viewable in compare view

Updates tox from 4.44.0 to 4.46.3

Release notes

Sourced from tox's releases.

v4.46.3

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.46.2...4.46.3

v4.46.2

What's Changed

Full Changelog: tox-dev/tox@4.46.1...4.46.2

v4.46.1

What's Changed

Full Changelog: tox-dev/tox@4.46.0...4.46.1

v4.46.0

What's Changed

Full Changelog: tox-dev/tox@4.45.0...4.46.0

v4.45.0

What's Changed

... (truncated)

Changelog

Sourced from tox's changelog.

Bug fixes - 4.46.3

  • Fix SchemaStore update workflow creating PRs with merge conflicts by branching from upstream master - by :user:gaborbernat. (:issue:3828)
  • Fixed the minimum version of virtualenv, to avoid incompatibility. (:issue:3829)

v4.46.2 (2026-02-25)

Bug fixes - 4.46.2

  • Fix SchemaStore update workflow authentication and PR creation for fork repositories - by :user:gaborbernat. (:issue:3826)

v4.46.1 (2026-02-25)

Bug fixes - 4.46.1

  • Allow glob patterns (*, ?) in depends configuration for ini files - by :user:gaborbernat. (:issue:3822)
  • Fix false positive schema validation errors with tombi by adding additionalProperties: true to partial-tox.json on SchemaStore - by :user:gaborbernat. (:issue:3823)

v4.46.0 (2026-02-24)

Features - 4.46.0

  • Add architecture (ISA) awareness to Python discovery. tox now propagates the machine field (e.g. arm64, x86_64) from :pypi:virtualenv's interpreter info — derived from :func:python:sysconfig.get_platform — through the Python specification, validation, and journal. This allows selecting a Python interpreter by CPU architecture via :ref:base_python (e.g. cpython3.12-64-arm64) and ensures tox validates the running interpreter's architecture matches the requested one. Requires virtualenv >= 20.39 - by :user:rahuldevikar. (:issue:3069)
  • Add env_base TOML sections for named environment templates that generate multiple environments from factor combinations via Cartesian product -- by :user:gaborbernat. (:issue:3817)

Bug fixes - 4.46.0

  • Drop chardet dependency and use BOM detection with locale fallback for requirements file decoding, matching pip's own approach - by :user:gaborbernat. (:issue:3818)
  • Allow --help to render even when the configuration file is malformed or missing - by :user:gaborbernat.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps-dev): bump the pip-dependencies group
4a10a94 
Bumps the pip-dependencies group in /requirements.d with 3 updates: [virtualenv](https://github.com/pypa/virtualenv), [build](https://github.com/pypa/build) and [tox](https://github.com/tox-dev/tox).


Updates `virtualenv` from 20.38.0 to 20.39.1
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.38.0...20.39.1)

Updates `build` from 1.4.0 to 1.4.2
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.4.0...1.4.2)

Updates `tox` from 4.44.0 to 4.46.3
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.44.0...4.46.3)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 20.39.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip-dependencies
- dependency-name: build
  dependency-version: 1.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
- dependency-name: tox
  dependency-version: 4.46.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies python Pull requests that update python code labels Mar 31, 2026
@ThomasWaldmann ThomasWaldmann merged commit 84fb1c9 into master Mar 31, 2026
13 of 14 checks passed
@dependabot dependabot bot deleted the dependabot/pip/requirements.d/pip-dependencies-875f133aec branch March 31, 2026 08:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ThomasWaldmann