A small patch release that fixes conda packages polluting PATH with dozens of transitive dependency binaries.
Fixed
- Conda backend no longer exposes transitive dependency binaries on PATH -- Installing a conda package such as
conda:postgresqlwould previously add every binary from every transitive dependency to PATH. For example,conda:postgresqlexposed 106 binaries including ncurses utilities (clear,reset,tput,tabs), openldap commands (ldapadd), and krb5 tools (kinit) -- all of which could shadow standard system commands. Now only binaries belonging to the main requested package are placed on PATH (e.g.,psql,pg_dump,createdb,initdb,pg_ctl,postgres, etc.). Dependency binaries remain installed and available to packages that need them internally, but are no longer visible on PATH. No user configuration is needed -- this is automatic for all new conda installs, and existing installs gracefully fall back to the previous behavior. #8543 by @simonepri
New Contributors
- @simonepri made their first contribution in #8543
Full Changelog: v2026.3.6...v2026.3.7