github pypa/pipenv v2026.7.0
Release v2026.7.0

4 hours ago

🤖 AI-Generated Changelog

Added

  • Added wall-clock timeout enforcement for the resolver subprocess via PIPENV_RESOLVER_TIMEOUT_S environment variable, making hung resolver processes recoverable
  • Added structured diagnostic logging from the resolver subprocess, populating Diagnostics.resolver_log with resolve records for improved debugging
  • Added support for major-only Python version specifiers (e.g., python_version = "3") in environment markers

Changed

  • Unified in-process and subprocess resolver paths into a single resolve_for_pipenv function, simplifying the resolver architecture
  • Resolver subprocess now communicates using typed ResolverRequest/ResolverResponse schemas, improving protocol stability and error surfacing
  • Improved resolver error reporting: subprocess errors are now surfaced via response file with structured messages
  • PIPENV_PYPI_MIRROR credentials are now written to the resolver's netrc, fixing authentication in mirrored index scenarios
  • Indexes without upload times are now tolerated by the resolver
  • Marker-skipped dependency entries are now tolerated during resolution, and subprocess stderr is forwarded again

Fixed

  • Fixed crash when locking for the first time or adding a new dependency category (old_lock_data initialization)
  • Fixed do_init so that ignore_pipfile/skip_lock flags are only pinned during initialization, not propagated to dependency installation
  • Fixed Sources.all to always return a list
  • Fixed is_virtual_environment to tolerate virtual environment directories without a bin/Scripts subdirectory
  • Fixed resolver to bootstrap pipenv on sys.path before importing the schema module
  • Fixed resolver subprocess to correctly rehydrate resolved_default_deps as a dict rather than a list
  • Fixed -r flag missing from README requirements.txt example

Security

  • Updated pip and cryptography dependencies to address security vulnerabilities

Deprecated

  • Scheduled removal of legacy check command behaviors targeting the 2027 major release

🔗 Full Changelog: v2026.6.2...v2026.7.0

Don't miss a new pipenv release

NewReleases is sending notifications on new releases.