Bump pipenv from 2026.1.0 to 2026.2.0

[dependabot]

Bumps pipenv from 2026.1.0 to 2026.2.0.

Release notes

Sourced from pipenv's releases.

Release v2026.2.0

🤖 AI-Generated Changelog

Added

• Support sequential script execution via TOML array syntax in [scripts] section
• Add --all flag to install and sync commands to install all Pipfile categories
• Support PIPENV_DEFAULT_CATEGORIES environment variable for configuring default package categories
• Allow venv_in_project to be set in the [pipenv] section of Pipfile
• Support inline environment variable assignments in pipenv run
• Add support for Python Install Manager (pymanager) on Windows

Fixed

• Respect extra-index-url and fix trusted-host handling in pip.conf
• Show download progress during locking phase
• Fix atomic writes for lockfile cache path in bad lock situations
• Fix --no-binary option not being stored in Pipfile
• Fix lockfile storing file URLs instead of version strings for index-resolved packages
• Fix resolver to use Pipfile Python version for marker evaluation
• Fix --dry-run help text for the update command
• Preserve environment variable references in credentials during update
• Fix pipenv --rm removing the wrong virtualenv when .venv directory coexists with WORKON_HOME venv
• Recreate virtualenv when --python version differs from the existing virtual environment
• Fix subdependency local file path resolution
• Fix outdated checks for file-locked packages
• Respect environment markers in install -r to match sync behavior
• Fix PermissionError on Windows when scanning restricted PATH entries
• Preserve file:// URL in Pipfile and fix local editable path/file key handling
• Fix uninstall --all no longer wiping Pipfile.lock
• Use path key for local dependencies and file key for remote URLs in Pipfile entries
• Fix broken version comparison in system Python version compatibility check
• Fix PowerShell full .exe path recognition in pipenv activate on Windows
• Suppress PTY echo of setup commands in fork_compat
• Improve dependency conflict error messages
• Clean up orphaned virtualenvs after integration tests
• Fix inline env var Pipfile quoting for shlex compatibility

Changed

• Update pythonfinder vendored dependency to version 3.0.2
• Expand platform marker support documentation with platform_machine examples
• Bump black from 24.3.0 to 26.3.1

---

🔗 Full Changelog: pypa/pipenv@v2026.1.0...v2026.2.0

Changelog

Sourced from pipenv's changelog.

2026.2.0 (2026-03-18)

pipenv 2026.2.0 (2026-03-18)

No significant changes.

Commits

• 6665744 Release v2026.2.0
• 009dadb Bumped version to 2026.2.0.
• 10a7a69 Merge pull request #6559 from pypa/fix/pip-conf-extra-index-url-5710
• 8c36622 Merge pull request #6560 from pypa/fix/show-download-progress-5718
• eacc556 Show download progress during locking phase (fixes #5718)
• 0ec84bf fix: respect extra-index-url and fix trusted-host in pip.conf (#5710)
• f84cdfa fix ruff
• 845de2d fix ruff
• cad8339 Merge pull request #6558 from pypa/fix/atomicwrites-lockfile-cache-path
• 76ff120 fix for bad lock situation
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)