Skip to content

build(deps-dev): bump pip-dependencies group (fix #9603 - virtualenv for tox 4.52.1)#9607

Merged
ThomasWaldmann merged 1 commit into
borgbackup:masterfrom
ThomasWaldmann:fix-dependabot-9603
May 12, 2026
Merged

build(deps-dev): bump pip-dependencies group (fix #9603 - virtualenv for tox 4.52.1)#9607
ThomasWaldmann merged 1 commit into
borgbackup:masterfrom
ThomasWaldmann:fix-dependabot-9603

Conversation

@ThomasWaldmann
Copy link
Copy Markdown
Member

This is a fix for the broken dependabot PR #9603.

Root cause: PR #9603 bumped tox from 4.48.1 → 4.52.1, but tox>=4.52.1 requires virtualenv>=21.1. The PR kept virtualenv==20.39.1 (20.x), causing a pip dependency conflict and failing all CI jobs with:

ERROR: Cannot install -r requirements.d/development.lock.txt (line 8) and virtualenv==20.39.1
because these package versions have conflicting dependencies.

The conflict is caused by:
    The user requested virtualenv==20.39.1
    tox 4.52.1 depends on virtualenv>=21.1

Fix: Bump virtualenv from 20.39.1 → 21.3.2 (latest stable) in development.lock.txt.

All other changes are identical to PR #9603:

  • setuptools: 80.10.2 → 82.0.0 (lock) / >=78.1.1 → >=82.0.0 (txt)
  • build: 1.4.3 → 1.4.4
  • tox: 4.48.1 → 4.52.1
  • pytest-cov: 7.0.0 → 7.1.0
  • types-PyYAML: 6.0.12.20260408 → 6.0.12.20260510
  • virtualenv: 20.39.1 → 21.3.2 ← the fix

Closes #9603

…4.52.1

Include all changes from dependabot PR borgbackup#9603 plus fix the broken
virtualenv pin: tox 4.52.1 requires virtualenv>=21.1, but PR borgbackup#9603
kept virtualenv==20.39.1 (20.x). Bumped virtualenv to 21.3.2.

Fixes: borgbackup#9603
@codecov
Copy link
Copy Markdown

codecov Bot commented May 12, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.33%. Comparing base (227484b) to head (6d3abf7).
⚠️ Report is 6 commits behind head on master.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #9607      +/-   ##
==========================================
- Coverage   83.34%   83.33%   -0.01%     
==========================================
  Files          89       89              
  Lines       15546    15546              
  Branches     2342     2342              
==========================================
- Hits        12957    12956       -1     
- Misses       1835     1836       +1     
  Partials      754      754              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@ThomasWaldmann ThomasWaldmann merged commit 0263d1d into borgbackup:master May 12, 2026
15 of 16 checks passed
@ThomasWaldmann ThomasWaldmann deleted the fix-dependabot-9603 branch May 12, 2026 20:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant