Skip to content

Bump pip from 26.0.1 to 26.1.1#12481

Merged
github-actions[bot] merged 1 commit into
3.14from
dependabot/pip/3.14/pip-26.1.1
May 7, 2026
Merged

Bump pip from 26.0.1 to 26.1.1#12481
github-actions[bot] merged 1 commit into
3.14from
dependabot/pip/3.14/pip-26.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps pip from 26.0.1 to 26.1.1.

Changelog

Sourced from pip's changelog.

26.1.1 (2026-05-04)

Bug Fixes

  • Fix issue where uninstallation left behind empty directories. Revert the removal of the adjacent __pycache__ directory when a .py file is removed. ([#13973](https://github.com/pypa/pip/issues/13973) <https://github.com/pypa/pip/issues/13973>_)

26.1 (2026-04-26)

Deprecations and Removals

  • Drop support for Python 3.9. ([#13795](https://github.com/pypa/pip/issues/13795) <https://github.com/pypa/pip/issues/13795>_)

Features

  • Add experimental support to read requirements from standardized pylock.toml files (-r pylock.toml). ([#13876](https://github.com/pypa/pip/issues/13876) <https://github.com/pypa/pip/issues/13876>_)
  • Allow --uploaded-prior-to to accept a duration in days (e.g., P3D for 3 days ago). ([#13674](https://github.com/pypa/pip/issues/13674) <https://github.com/pypa/pip/issues/13674>_)

Enhancements

  • Speed up dependency resolution when there are complex conflicts. ([#13859](https://github.com/pypa/pip/issues/13859) <https://github.com/pypa/pip/issues/13859>_)
  • Reduce memory usage when resolving large dependency trees. ([#13843](https://github.com/pypa/pip/issues/13843) <https://github.com/pypa/pip/issues/13843>_)
  • Emit a deprecation warning when pip imports an unexpected module after installation of a distribution has started. ([#13912](https://github.com/pypa/pip/issues/13912) <https://github.com/pypa/pip/issues/13912>_)
  • Allow URL constraints to apply to requirements with extras. ([#12018](https://github.com/pypa/pip/issues/12018) <https://github.com/pypa/pip/issues/12018>_)
  • Allow unpinned requirements to use hashes from constraints. Constraints like {name}=={version} --hash=... feeds into hash verification for a corresponding requirement. ([#9243](https://github.com/pypa/pip/issues/9243) <https://github.com/pypa/pip/issues/9243>_)
  • Improve conflict reports that involve direct URLs. ([#13932](https://github.com/pypa/pip/issues/13932) <https://github.com/pypa/pip/issues/13932>_)
  • Show all errors instead of first error for faulty dependency_groups definitions. ([#13917](https://github.com/pypa/pip/issues/13917) <https://github.com/pypa/pip/issues/13917>_)

Bug Fixes

  • Fix recovery hint for missing RECORD file to use --ignore-installed instead of --force-reinstall. ([#12645](https://github.com/pypa/pip/issues/12645) <https://github.com/pypa/pip/issues/12645>_)
  • Fix misleading error message when a constraint file cannot be opened. ([#13226](https://github.com/pypa/pip/issues/13226) <https://github.com/pypa/pip/issues/13226>_)
  • Show the filename rather than the full URL when downloading files from non-PyPI indexes in non-verbose mode. ([#13494](https://github.com/pypa/pip/issues/13494) <https://github.com/pypa/pip/issues/13494>_)
  • Remove the adjacent __pycache__ directory when a .py file is removed. ([#13725](https://github.com/pypa/pip/issues/13725) <https://github.com/pypa/pip/issues/13725>_)
  • Force UTF-8 encoding for :pep:723 metadata. ([#13861](https://github.com/pypa/pip/issues/13861) <https://github.com/pypa/pip/issues/13861>_)
  • Minor performance improvement when filtering candidates during resolution. ([#13916](https://github.com/pypa/pip/issues/13916) <https://github.com/pypa/pip/issues/13916>_)
  • Fix a hang on Windows when stdout is closed during verbose output. ([#13927](https://github.com/pypa/pip/issues/13927) <https://github.com/pypa/pip/issues/13927>_)
  • Common path prefixes are determined by path segment, not character by character. ([#13847](https://github.com/pypa/pip/issues/13847) <https://github.com/pypa/pip/issues/13847>_)
  • Fix installing .tar.gz source distributions that look like a zip file. ([#13867](https://github.com/pypa/pip/issues/13867) <https://github.com/pypa/pip/issues/13867>_)

... (truncated)

Commits
  • 4432a37 Bump for release
  • 4943e17 Merge pull request #13973 from pypa/revert-13725-vfazio-remove-all-optimizati...
  • e9e7b90 Add news
  • 0ff6964 Revert "Remove pycache when package is removed"
  • cc6b082 Merge pull request #13951 from sbidoul/release/26.1
  • b2671f1 Bump for development
  • 90b2b3e Bump for release
  • 193f289 Update AUTHORS.txt
  • 63c3709 Merge pull request #13876 from sbidoul/install-from-pylock-reqs-sbi
  • e5fe702 Merge pull request #13949 from pypa/revert-13888-resolver-editable-links
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 7, 2026
@dependabot dependabot Bot requested review from asvetlov and webknjaz as code owners May 7, 2026 10:48
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 7, 2026
@github-actions github-actions Bot enabled auto-merge (squash) May 7, 2026 10:51
@codspeed-hq

codspeed-hq Bot commented May 7, 2026 •
edited
Loading

Copy link
Copy Markdown

Merging this PR will not alter performance

✅ 67 untouched benchmarks
⏩ 4 skipped benchmarks1

Comparing dependabot/pip/3.14/pip-26.1.1 (c9f3974) with 3.14 (299693b)2

Open in CodSpeed

Footnotes

  1. 4 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

  2. No successful run was found on 3.14 (e1dc665) during the generation of this report, so 299693b was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩

@codecov

codecov Bot commented May 7, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.10%. Comparing base (4f58585) to head (c9f3974).
⚠️ Report is 30 commits behind head on 3.14.
✅ All tests successful. No failed tests found.

Additional details and impacted files 
@@            Coverage Diff             @@
##             3.14   #12481      +/-   ##
==========================================
- Coverage   98.20%   98.10%   -0.10%     
==========================================
  Files         135      133       -2     
  Lines       47121    47088      -33     
  Branches     2525     2516       -9     
==========================================
- Hits        46273    46195      -78     
- Misses        671      713      +42     
- Partials      177      180       +3
Flag Coverage Δ
CI-GHA 98.16% <ø> (-0.10%) ⬇️
OS-Linux 97.93% <ø> (-0.10%) ⬇️
OS-Windows 95.50% <ø> (-0.16%) ⬇️
OS-macOS 97.05% <ø> (-0.16%) ⬇️
Py-3.10.11 96.69% <ø> (+<0.01%) ⬆️
Py-3.10.20 97.01% <ø> (-0.16%) ⬇️
Py-3.11.15 97.44% <ø> (-0.02%) ⬇️
Py-3.11.9 96.98% <ø> (+<0.01%) ⬆️
Py-3.12.10 ?
Py-3.12.13 97.53% <ø> (+<0.01%) ⬆️
Py-3.13.13 97.54% <ø> (-0.22%) ⬇️
Py-3.14.4 96.84% <ø> (-0.96%) ⬇️
Py-3.14.4t 96.83% <ø> (-0.01%) ⬇️
Py-pypy3.11.15-7.3.21 96.67% <ø> (+<0.01%) ⬆️
VM-macos 97.05% <ø> (-0.16%) ⬇️
VM-ubuntu 97.93% <ø> (-0.10%) ⬇️
VM-windows 95.50% <ø> (-0.16%) ⬇️
cython-coverage 38.09% <ø> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@dependabot
Bump pip from 26.0.1 to 26.1.1
c9f3974 
Bumps [pip](https://github.com/pypa/pip) from 26.0.1 to 26.1.1.
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@26.0.1...26.1.1)

---
updated-dependencies:
- dependency-name: pip
  dependency-version: 26.1.1
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/3.14/pip-26.1.1 branch from 9439bda to c9f3974 Compare May 7, 2026 11:46
@github-actions github-actions Bot merged commit 5ee867a into 3.14 May 7, 2026
41 checks passed
@github-actions github-actions Bot deleted the dependabot/pip/3.14/pip-26.1.1 branch May 7, 2026 12:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@webknjaz webknjaz Awaiting requested review from webknjaz webknjaz is a code owner

@asvetlov asvetlov Awaiting requested review from asvetlov asvetlov is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants