pipenv 2026.10.0 on Python PyPI

🤖 AI-Generated Changelog

Support file:// URLs as package index and mirror sources
Support non-Git local VCS schemes in URL unpacking
Accept newer minor pylock.toml lock versions with a warning instead of failing

Correctly check pylock.toml requires-python and environments fields before installing
Pick the correct matching entry for packages listed more than once in pylock.toml
Preserve local, VCS, and file sources when generating pylock.toml
Convert file:// requirements.txt URLs to paths before resolving
Fix malformed pip line for file URL extras on --skip-lock path
Fix file:// Pipfile entries being mis-handled as filesystem paths on Windows
Fix VCS Pipfile entries collapsing when the name also resolves via the index
Fix broken pip line when building file=...+extras=[...] dependencies
Preserve existing Pipfile sources during requirements import
Preserve requirements-file source order during deduplication
Make requirements.txt -i <url> replace the default index rather than add to it
Skip --trusted-host for hostless source URLs regardless of verify_ssl
Fix insecure verify_ssl=false handling on hardcoded file:// source blocks
Recalculate lock hash after writing temporary Pipfile source

Vendor bumps: packaging to 26.3, plette to 2.4.0, build to 1.6.1, pyproject_hooks to 1.3.3, dotenv to 1.2.4
Vendor tomli for hatchling's build isolation on Python < 3.11
Consolidate VCS_SCHEMES into pipenv.utils.constants
Migrate integration tests off real network dependencies to offline file://-based fixtures

🔗 Full Changelog: v2026.9.1...v2026.10.0