[pull] main from pypa:main by pull[bot] · Pull Request #42 · sysfce2/python-virtualenv

pull · 2024-11-26T03:07:07Z

See Commits and Changes for more details.

Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

Signed-off-by: Bernát Gábor <bgabor8@bloomberg.net>

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

updates: - [github.com/python-jsonschema/check-jsonschema: 0.31.0 → 0.31.1](python-jsonschema/check-jsonschema@0.31.0...0.31.1) - [github.com/codespell-project/codespell: v2.4.0 → v2.4.1](codespell-project/codespell@v2.4.0...v2.4.1) - [github.com/astral-sh/ruff-pre-commit: v0.9.3 → v0.9.4](astral-sh/ruff-pre-commit@v0.9.3...v0.9.4)

[pre-commit.ci] pre-commit autoupdate

Signed-off-by: Bernát Gábor <bgabor8@bloomberg.net>

Remove old virtualenv wheel

Bump pip to 25.0.1

release 20.29.2

updates: - [github.com/astral-sh/ruff-pre-commit: v0.9.4 → v0.9.6](astral-sh/ruff-pre-commit@v0.9.4...v0.9.6) - [github.com/rbubley/mirrors-prettier: v3.4.2 → v3.5.0](rbubley/mirrors-prettier@v3.4.2...v3.5.0)

for more information, see https://pre-commit.ci

[pre-commit.ci] pre-commit autoupdate

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

Previously, message and args would each get interpolated separately, with a result like wrote python info of %s at (PosixPath('/usr/bin/python3.12'), PosixPath('/home/...f265.json')) [DEBUG via_disk_folder:153] Now, remove the formatting placeholder from the message passed by concrete classes. msg then becomes unnecessary; pass it in as part of msg_args. The result is more like wrote python info of /usr/bin/python3.12 at /home/...f265.json [DEBUG via_disk_folder:153]

Remove duplicate bug report template

Fix debug logging interpolation

When enumerating over search paths in `$PATH`, ignore any entry where `Path.iterdir()` fails or produces no results.

Ignore directories in PATH that can't be opened

updates: - [github.com/tox-dev/pyproject-fmt: v2.5.0 → v2.5.1](tox-dev/pyproject-fmt@v2.5.0...v2.5.1) - [github.com/astral-sh/ruff-pre-commit: v0.9.7 → v0.9.9](astral-sh/ruff-pre-commit@v0.9.7...v0.9.9) - [github.com/rbubley/mirrors-prettier: v3.5.2 → v3.5.3](rbubley/mirrors-prettier@v3.5.2...v3.5.3)

…3074) Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

This change adds full return-type and parameter-type annotations to all ~625 functions and methods across the entire virtualenv source tree. It brings the codebase from ~26% type coverage to near-complete coverage, matching the standard already established in the sibling tox project. Key changes include: - PEP 561 marker: Added `py.typed` so downstream consumers get inline type information. - Ruff ANN rules enabled: Replaced the blanket "ANN" ignore in `pyproject.toml` with only the two specific exceptions (ANN003, ANN401), and added FBT001 to the global ignore since the existing boolean-positional-argument function signatures are public API. - ty type checker hardened: Added --error-on-warning to both `type` and `type-3.8` tox environments in `tox.toml`. - All modules annotated: config, run, create (including CPython/PyPy/GraalPy/RustPython builders), activation (all 7 shells), seed (pip install, wheels, periodic update), app_data, util (lock, path, subprocess, zipapp), and discovery — every function now has explicit parameter types and return types. - Both linters pass clean: ruff check and ty check --python-version 3.14 --error-on-warning report zero errors. All pre-existing tests continue to pass. Fixes: #3075 ### Thanks for contributing, make sure you address all the checklists (for details on how see [development documentation](https://virtualenv.pypa.io/en/latest/development.html#development)) - [x] ran the linter to address style issues (`tox -e fix`) - [x] wrote descriptive pull request text - [x] ensured there are test(s) validating the fix - [x] added news fragment in `docs/changelog` folder - [x] updated/extended the documentation --------- Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

GitHub recognizes SECURITY.md in .github/ directory. Remove the duplicate from repo root.

Remove .yml duplicates and rename to .yaml where needed: rename dependabot.yml->.yaml rename release.yml->.yaml rename FUNDING.yml->.yaml

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

…ion (#3092)

Automated upgrade of embedded pip, setuptools, and wheel dependencies. This PR was created automatically by the [upgrade workflow](https://github.com/pypa/virtualenv/actions/workflows/upgrade.yaml). --------- Co-authored-by: gaborbernat <690238+gaborbernat@users.noreply.github.com> Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

updates: - [github.com/tox-dev/pyproject-fmt: v2.16.2 → v2.19.0](tox-dev/pyproject-fmt@v2.16.2...v2.19.0) - [github.com/astral-sh/ruff-pre-commit: v0.15.5 → v0.15.6](astral-sh/ruff-pre-commit@v0.15.5...v0.15.6)  --------- Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com> Co-authored-by: Bernát Gábor <bgabor8@bloomberg.net>

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

GitHub Actions workflows were vulnerable to several security issues including template injection, credential exposure, and permission over-scoping. These vulnerabilities could allow attackers to execute arbitrary code or access sensitive tokens. This change adds `zizmor` as a pre-commit hook to continuously audit workflow security and fixes all existing vulnerabilities. The fixes include pinning actions to commit hashes, moving secrets to dedicated environments, isolating GitHub context from shell execution, and restricting permissions to the minimum required scope. All workflows now pass security audit with zero findings. Future workflow changes will be automatically checked before commit. --------- Signed-off-by: Bernát Gábor <bgabor8@bloomberg.net> Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

updates: - [github.com/python-jsonschema/check-jsonschema: 0.37.0 → 0.37.1](python-jsonschema/check-jsonschema@0.37.0...0.37.1) - [github.com/astral-sh/ruff-pre-commit: v0.15.7 → v0.15.8](astral-sh/ruff-pre-commit@v0.15.7...v0.15.8)  Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

pull bot added ⤵️ pull merge-conflict Resolve conflicts manually labels Nov 26, 2024

robsdedude and others added 28 commits January 17, 2025 09:29

Change PyInfo cache versioning mechanism (#2827)

fd0dc85

Add changelog for PyInfo fix

61bee9f

Signed-off-by: Bernát Gábor <bgabor8@bloomberg.net>

release 20.29.1

e07c0c3

release 20.29.1 (#2828)

d409f6a

[pre-commit.ci] pre-commit autoupdate (#2830)

a6a5c45

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

[pre-commit.ci] pre-commit autoupdate (#2833)

192cef7

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

Merge pull request #2837 from pypa/pre-commit-ci-update-config

cb02b4f

[pre-commit.ci] pre-commit autoupdate

Remove old virtualenv wheel

7b8fde4

Signed-off-by: Bernát Gábor <bgabor8@bloomberg.net>

Bump pip to 25.0.1

d8a68e6

Signed-off-by: Bernát Gábor <bgabor8@bloomberg.net>

Merge pull request #2842 from gaborbernat/remove-whl

6203457

Remove old virtualenv wheel

Merge pull request #2843 from gaborbernat/bump-2-10

a2d2c3e

Bump pip to 25.0.1

release 20.29.2

ca670cd

Merge pull request #2844 from pypa/release-20.29.2

d651b6f

release 20.29.2

[pre-commit.ci] pre-commit autoupdate

5c5abd2

updates: - [github.com/astral-sh/ruff-pre-commit: v0.9.4 → v0.9.6](astral-sh/ruff-pre-commit@v0.9.4...v0.9.6) - [github.com/rbubley/mirrors-prettier: v3.4.2 → v3.5.0](rbubley/mirrors-prettier@v3.4.2...v3.5.0)

[pre-commit.ci] auto fixes from pre-commit.com hooks

20fd7f5

for more information, see https://pre-commit.ci

Merge pull request #2845 from pypa/pre-commit-ci-update-config

1e3fa86

[pre-commit.ci] pre-commit autoupdate

[pre-commit.ci] pre-commit autoupdate (#2846)

27a1138

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

[pre-commit.ci] pre-commit autoupdate (#2847)

eaef9bb

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

Remove duplicate bug report template

ca5935a

Merge pull request #2850 from shenxianpeng/remove-duplicate-template

5b74c9a

Remove duplicate bug report template

Merge pull request #2849 from tipabu/logging-interpolation

7365ad2

Fix debug logging interpolation

Ignore directories in PATH that can't be opened (#2794)

ee9d84c

When enumerating over search paths in `$PATH`, ignore any entry where `Path.iterdir()` fails or produces no results.

Add test

220b6b8

Add changelog entry

4567521

Merge pull request #2852 from barneygale/fix-2794

1fc647e

Ignore directories in PATH that can't be opened

gaborbernat and others added 30 commits February 25, 2026 12:18

📝 docs(changelog): add removal entry for python-discovery extraction (#…

8ec3142

…3074) Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

release 21.0.0

7687420

Add security policy

17d98ba

release 21.1.0

404a3e5

Move SECURITY.md to .github/SECURITY.md

ada469c

GitHub recognizes SECURITY.md in .github/ directory. Remove the duplicate from repo root.

Standardize .github files to .yaml suffix

7f2e162

Remove .yml duplicates and rename to .yaml where needed: rename dependabot.yml->.yaml rename release.yml->.yaml rename FUNDING.yml->.yaml

chore(deps): bump actions/download-artifact from 4 to 8 (#3084)

e1118ba

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump actions/checkout from 4 to 6 (#3083)

9601a70

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump actions/upload-artifact from 4 to 7 (#3082)

e768d56

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump actions/setup-python from 5 to 6 (#3080)

a1d3963

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(deps): bump peter-evans/create-pull-request from 7 to 8 (#3081)

fbb3bd1

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Add type annotations to embed wheel generator output (#3085)

eb27e55

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

chore(deps): bump astral-sh/setup-uv from 4 to 7 (#3086)

f2062bc

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

[pre-commit.ci] pre-commit autoupdate (#3087)

b7ab17e

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

fix broken README heading introduced in docs restructure (#3088)

0cd0e09

🐛 fix(bash): use BASH_SOURCE in activate relocation (#3091)

f05bf08

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

🐛 fix(create): prevent venv from racing virtualenv on gitignore creat…

e1af35d

…ion (#3092)

release 21.2.0

0b6f444

Rename u.bugfix.rst to 3093.bugfix.rst

98c1891

[pre-commit.ci] pre-commit autoupdate (#3095)

1a838b2

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

Enhance upgrade workflow: age check, dedup, issue tracking (#3094)

080a1bd

🐛 fix(create): use commonpath for correct path validation (#3097)

dc10a34

[pre-commit.ci] pre-commit autoupdate (#3098)

3925ac8

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

Add current and previous maintainers (#3101)

0f63b3d

Remove persist-credentials: false from jobs needing push access (#3102)

235b124

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[pull] main from pypa:main#42

[pull] main from pypa:main#42
pull[bot] wants to merge 274 commits intosysfce2:mainfrom
pypa:main

pull bot commented Nov 26, 2024 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Conversation

pull bot commented Nov 26, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

pull bot commented Nov 26, 2024 •

edited

Loading