From 056d9297b2cb96c83466a3eaac3055acd9432229 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 29 Oct 2025 10:19:08 +0000
Subject: [PATCH] Bump virtualenv from 20.35.3 to 20.35.4 (#11738)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.35.3 to
20.35.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/virtualenv/releases">virtualenv's
releases</a>.</em></p>
<blockquote>
<h2>20.35.4</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>release 20.35.3 by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/2981">pypa/virtualenv#2981</a></li>
<li>fix: Prevent NameError when accessing _DISTUTILS_PATCH during file
ov… by <a href="https://github.com/gracetyy"><code>@​gracetyy</code></a>
in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2982">pypa/virtualenv#2982</a></li>
<li>Upgrade pip and fix 3.15 picking old wheel by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/2989">pypa/virtualenv#2989</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/gracetyy"><code>@​gracetyy</code></a>
made their first contribution in <a
href="https://redirect.github.com/pypa/virtualenv/pull/2982">pypa/virtualenv#2982</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pypa/virtualenv/compare/20.35.3...20.35.4">https://github.com/pypa/virtualenv/compare/20.35.3...20.35.4</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst">virtualenv's
changelog</a>.</em></p>
<blockquote>
<h2>v20.35.4 (2025-10-28)</h2>
<p>Bugfixes - 20.35.4</p>
<pre><code>- Fix race condition in ``_virtualenv.py`` when file is
overwritten during import, preventing ``NameError`` when
``_DISTUTILS_PATCH`` is accessed - by :user:`gracetyy`. (:issue:`2969`)
- Upgrade embedded wheels:
<ul>
<li>pip to <code>25.3</code> from <code>25.2</code>
(:issue:<code>2989</code>)
</code></pre></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/virtualenv/commit/03815342726b1a8b33b55b5057bfd46b1d6b74c1"><code>0381534</code></a>
release 20.35.4</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/25207be3cecc22049cba1989ceee87dfed9a4d67"><code>25207be</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/virtualenv/issues/2989">#2989</a>
from gaborbernat/bump-pip</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/d593841e93c401bb230646d38de480ac4ac42da4"><code>d593841</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/virtualenv/issues/2984">#2984</a>
from pypa/pre-commit-ci-update-config</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/f742f8da0a3c313d617d41a0c44aac29d4e61edd"><code>f742f8d</code></a>
[pre-commit.ci] pre-commit autoupdate</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/0a644b0b6e0c68e89584fbce8339b366cb4cdf91"><code>0a644b0</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/virtualenv/issues/2982">#2982</a>
from gracetyy/fix/distutils_patch</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/2b125eb79cd4764dac26df30d9bf7b661bd74100"><code>2b125eb</code></a>
refactor: fix last commit according to review feedback</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/71d5e0929dca30a429a0144e0645a6b55d2851e5"><code>71d5e09</code></a>
[pre-commit.ci] auto fixes from pre-commit.com hooks</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/fd0a8342a383c126608e005e9ff0a7612e53a219"><code>fd0a834</code></a>
refactor: fix last commit according to review feedback</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/c5e51d4e45dbca840dac5929fbb7ed145c81c1fd"><code>c5e51d4</code></a>
refactor: use pytest tmp_path fixture instead of
tempfile.TemporaryDirectory</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/629f7b836399aa90cfe29bbcbaac547d43181d45"><code>629f7b8</code></a>
Merge branch 'main' into fix/distutils_patch</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/virtualenv/compare/20.35.3...20.35.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=virtualenv&package-manager=pip&previous-version=20.35.3&new-version=20.35.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 requirements/constraints.txt | 2 +-
 requirements/dev.txt         | 2 +-
 requirements/lint.txt        | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index 77483742779..c6d01bdb10c 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -272,7 +272,7 @@ uvloop==0.21.0 ; platform_system != "Windows"
     #   -r requirements/lint.in
 valkey==6.1.1
     # via -r requirements/lint.in
-virtualenv==20.35.3
+virtualenv==20.35.4
     # via pre-commit
 wait-for-it==2.3.0
     # via -r requirements/test-common.in
diff --git a/requirements/dev.txt b/requirements/dev.txt
index b769c365454..1b47d4c9710 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -262,7 +262,7 @@ uvloop==0.21.0 ; platform_system != "Windows" and implementation_name == "cpytho
     #   -r requirements/lint.in
 valkey==6.1.1
     # via -r requirements/lint.in
-virtualenv==20.35.3
+virtualenv==20.35.4
     # via pre-commit
 wait-for-it==2.3.0
     # via -r requirements/test-common.in
diff --git a/requirements/lint.txt b/requirements/lint.txt
index 3a30e150665..440c594ac76 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -121,7 +121,7 @@ uvloop==0.21.0 ; platform_system != "Windows"
     # via -r requirements/lint.in
 valkey==6.1.1
     # via -r requirements/lint.in
-virtualenv==20.35.3
+virtualenv==20.35.4
     # via pre-commit
 zlib-ng==1.0.0
     # via -r requirements/lint.in