Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-virtualenv for
openSUSE:Factory checked in at 2026-10-30 18:04:02
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-virtualenv (Old)
and /work/SRC/openSUSE:Factory/.python-virtualenv.new.1255 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-virtualenv"
Fri Oct 30 18:04:02 2026 rev:78 rq:1393631 version:21.15.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-virtualenv/python-virtualenv.changes
2026-10-16 20:06:42.669676435 +0200
+++
/work/SRC/openSUSE:Factory/.python-virtualenv.new.1255/python-virtualenv.changes
2026-10-30 18:04:41.796165625 +0100
@@ -1,0 +2,33 @@
+Thu Oct 29 10:54:00 UTC 2026 - Markéta Machová <[email protected]>
+
+- Update to 21.15.1
+ * No significant changes
+ 21.15.0
+ * Support Python 3.15
+ 21.14.13 (CVE-2026-115586, bsc#1288119)
+ * Stop bash running commands from --prompt or an environment name
+ containing $(...), backticks or a backslash after shopt -s promptvars,
+ set -o posix, or in a child shell that inherits an exported PS1
+ * Write the .venv redirect and the wheel RECORD with exclusive create,
+ so a link planted after the existence check cannot redirect the write
+ 21.14.9 (CVE-2026-113714, bsc#1287079, CVE-2026-113715, bsc#1286953,
+ CVE-2026-113716, bsc#1286949, CVE-2026-113717, bsc#1286948,
+ CVE-2026-113718, bsc#1286947, CVE-2026-113719, bsc#1287017,
+ CVE-2026-113720, bsc#1287057, CVE-2026-113721, bsc#1287076,
+ CVE-2026-113722, bsc#1287086, CVE-2026-113723, bsc#1287188,
+ CVE-2026-113724, bsc#1287194, CVE-2026-113725, bsc#1287269,
+ CVE-2026-113726, bsc#1287317)
+ * Parse VIRTUALENV_PERIODIC_UPDATE_INSECURE as a boolean, so 0, false,
+ no and off keep certificate verification enabled
+ * Reject destinations whose resolved path contains the platform’s PATH
+ separator, including separators inherited from the working directory
+ or a directory symlink
+ * Preserve an existing pyvenv.cfg when a prompt or configuration value
+ cannot be encoded as UTF-8, instead of leaving the file empty
+ * Skip writing a .venv redirect when the environment name contains a
+ line boundary
+ * Preserve non-ASCII values in activate_this.py when applications read
+ the script with a legacy text encoding before executing it
+ * Many more changes, see https://virtualenv.pypa.io/en/latest/changelog.html
+
+-------------------------------------------------------------------
@@ -9 +42 @@
-- Update to 21.14.2
+- Update to 21.14.2 (CVE-2026-113732, bsc#1287319, CVE-2026-113776,
bsc#1287341)
Old:
----
virtualenv-21.14.2.tar.gz
New:
----
virtualenv-21.15.1.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-virtualenv.spec ++++++
--- /var/tmp/diff_new_pack.huVpLB/_old 2026-10-30 18:04:44.418275423 +0100
+++ /var/tmp/diff_new_pack.huVpLB/_new 2026-10-30 18:04:44.424275674 +0100
@@ -31,7 +31,7 @@
%endif
%{?sle15_python_module_pythons}
Name: python-virtualenv%{psuffix}
-Version: 21.14.2
+Version: 21.15.1
Release: 0
Summary: Virtual Python Environment builder
License: MIT
@@ -41,20 +41,21 @@
BuildRequires: %{python_module base >= 3.8}
BuildRequires: %{python_module pip}
BuildRequires: python-rpm-macros
-Requires: python-python-discovery >= 1.6
-Requires: (python-distlib >= 0.3.7 with python-distlib < 1)
-Requires: (python-filelock >= 3.20.3 with python-filelock < 4)
-Requires: (python-platformdirs >= 3.9.1 with python-platformdirs < 5)
+Requires: python-packaging >= 26.3
+Requires: python-python-discovery >= 1.6.1
+Requires: (python-distlib >= 0.4.3 with python-distlib < 1)
+Requires: (python-filelock >= 3.24.2 with python-filelock < 5)
+Requires: (python-platformdirs >= 4.4 with python-platformdirs < 5)
BuildArch: noarch
%if !%{with test}
# Don't install the build requirements during testing, see setuptools_scm
comment below
+BuildRequires: %{python_module hatch-fancy-pypi-readme >= 25.1}
BuildRequires: %{python_module hatch-vcs >= 0.3}
-BuildRequires: %{python_module hatchling >= 1.17.1}
+BuildRequires: %{python_module hatchling >= 1.28}
BuildRequires: fdupes
%else
BuildRequires: %{python_module devel}
BuildRequires: %{python_module flaky >= 3.7}
-BuildRequires: %{python_module packaging >= 23.1}
BuildRequires: %{python_module pytest >= 7.4}
BuildRequires: %{python_module pytest-env >= 0.8.2}
BuildRequires: %{python_module pytest-mock >= 3.11.1}
++++++ virtualenv-21.14.2.tar.gz -> virtualenv-21.15.1.tar.gz ++++++
++++ 12828 lines of diff (skipped)
