Skip to content

build(deps): Bump pipx from 1.18.11 to 1.18.15 - #134

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/pipx-1.18.15
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/pipx-1.18.15

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor

Bumps pipx from 1.18.11 to 1.18.15.

Release notes

Sourced from pipx's releases.

1.18.15

Bug fixes

  • pipx pin --skip accepts case and punctuation variants of injected package names, with or without their suffix (#2425) by @​kowellaloo9698-afk and @​gaborbernat.
  • pipx repair now refuses an environment whose pipx_metadata.json a killed install lost or a newer pipx wrote, as pipx reinstall and pipx reinstall-all do, instead of reporting it healthy (#2423) by @​AP24110011695 and @​gaborbernat.

New Contributors

🐍 PyPI release

📜 Full Changelog

1.18.14

Bug fixes

  • pipx list --short --include-injected now lists injected packages, as --pinned --include-injected already does (#2415) by @​Pixeless001 and @​gaborbernat.
  • pipx uninject matches package names in any spelling, so mixed-case finds a package that pip recorded as Mixed_Case, and it refuses the main package however the name is spelled (#2420) by @​guransh0925 and @​gaborbernat.

New Contributors

🐍 PyPI release

📜 Full Changelog

1.18.13

No user-facing changes.

🐍 PyPI release

📜 Full Changelog

1.18.12

Security

  • pipx run now treats requirements with a version, extras, a marker or a direct URL as packages, and script URLs as downloads, even when the working directory contains a matching file (#2408) by @​gaborbernat.

🐍 PyPI release

... (truncated)

Changelog

Sourced from pipx's changelog.

1.18.15 <https://github.com/pypa/pipx/tree/1.18.15>_ - 2026-11-06

.. _release-1-18-15-fixed:

Fixed

  • pipx pin --skip accepts case and punctuation variants of injected package names, with or without their suffix (:pr:2425) by :user:kowellaloo9698-afk and :user:gaborbernat.
  • pipx repair now refuses an environment whose pipx_metadata.json a killed install lost or a newer pipx wrote, as pipx reinstall and pipx reinstall-all do, instead of reporting it healthy (:pr:2423) by :user:AP24110011695 and :user:gaborbernat.

.. _release-1-18-14:

1.18.14 <https://github.com/pypa/pipx/tree/1.18.14>_ - 2026-11-05

.. _release-1-18-14-fixed:

Fixed

  • pipx list --short --include-injected now lists injected packages, as --pinned --include-injected already does (:pr:2415) by :user:Pixeless001 and :user:gaborbernat.
  • pipx uninject matches package names in any spelling, so mixed-case finds a package that pip recorded as Mixed_Case, and it refuses the main package however the name is spelled (:pr:2420) by :user:guransh0925 and :user:gaborbernat.

.. _release-1-18-13:

1.18.13 <https://github.com/pypa/pipx/tree/1.18.13>_ - 2026-11-04

No user-facing changes.

.. _release-1-18-12:

1.18.12 <https://github.com/pypa/pipx/tree/1.18.12>_ - 2026-11-03

.. _release-1-18-12-security:

Security

  • pipx run now treats requirements with a version, extras, a marker or a direct URL as packages, and script URLs as downloads, even when the working directory contains a matching file (:pr:2408) by :user:gaborbernat.

... (truncated)

Commits
  • 7bb8b42 release 1.18.15
  • a1c10be 🐛 fix(pin): match skipped packages in any spelling (#2425)
  • 270d3d3 🐛 fix(repair): refuse environments that lost their record (#2423)
  • b51811a 🔥 chore(ci): drop the manual package workflows (#2421)
  • 855621d release 1.18.14
  • c3415ec 🐛 fix(uninject): match package names in any spelling (#2420)
  • b2f3acc 🐛 fix(list): show injected packages with --short --include-injected (#2415)
  • 55c4e4b ♻️ refactor(reinstall): drop unreachable symlink unlink (#2417)
  • f36d23d 👷 ci: run release notes before PyPI publish (#2418)
  • b69de95 👷 ci: run nightly checks in the overnight window (#2419)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 10, 2026
Bumps [pipx](https://github.com/pypa/pipx) from 1.18.11 to 1.18.15.
- [Release notes](https://github.com/pypa/pipx/releases)
- [Changelog](https://github.com/pypa/pipx/blob/main/docs/changelog.rst)
- [Commits](pypa/pipx@1.18.11...1.18.15)

---
updated-dependencies:
- dependency-name: pipx
  dependency-version: 1.18.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant