Bump virtualenv from 20.24.5 to 20.26.6 in /.github/workflows

Bumps virtualenv from 20.24.5 to 20.26.6.

Release notes

20.26.5

What's Changed

release 20.26.4 by @gaborbernat in pypa/virtualenv#2761

Use uv over pip by @gaborbernat in pypa/virtualenv#2765

Full Changelog: https://github.com/pypa/virtualenv/compare/20.26.4...20.26.5

20.26.4

What's Changed

release 20.26.3 by @gaborbernat in pypa/virtualenv#2742

Fix whitespace around backticks in changelog by @edmorley in pypa/virtualenv#2751

Test latest Python 3.13 by @hugovk in pypa/virtualenv#2752

Fix typo in Nushell activation script by @edmorley in pypa/virtualenv#2754

GitHub Actions: Replace deprecated macos-12 with macos-13 by @hugovk in pypa/virtualenv#2756

Fix #2728: Activating venv create unwanted console output by @ShootGan in pypa/virtualenv#2748

Upgrade bundled wheels by @gaborbernat in pypa/virtualenv#2760

New Contributors

@ShootGan made their first contribution in pypa/virtualenv#2748

Full Changelog: https://github.com/pypa/virtualenv/compare/20.26.3...20.26.4

20.26.3

What's Changed

release 20.26.2 by @gaborbernat in pypa/virtualenv#2724

Bump embeded wheels by @gaborbernat in pypa/virtualenv#2741

Full Changelog: https://github.com/pypa/virtualenv/compare/20.26.2...20.26.3

20.26.2

What's Changed

Release 20.26.1 by @gaborbernat in pypa/virtualenv#2713

Update activate_this.py documentation to use runpy instead of exec by @FredStober in pypa/virtualenv#2716

Apply ruff/bugbear new rules by @DimitriPapadopoulos in pypa/virtualenv#2718

Fix the CI by @HandSonic in pypa/virtualenv#2721

Fix #1949: zipapp virtual environment creation fails if zipapp path is symlinked by @HandSonic in pypa/virtualenv#2722

Fix bad return code in bash activation if hashing is disabled by @fenkes-ibm in pypa/virtualenv#2717

New Contributors

@FredStober made their first contribution in pypa/virtualenv#2716

... (truncated)

Changelog

Sourced from virtualenv's changelog.

v20.26.6 (2024-09-27)

Bugfixes - 20.26.6

- Properly quote string placeholders in activation script templates to mitigate potential command injection - by :user:`y5c4l3`. (:issue:`2768`) v20.26.5 (2024-09-17)

Bugfixes - 20.26.5

Upgrade embedded wheels: setuptools to 75.1.0 from 74.1.2 - by :user:gaborbernat. (:issue:2765)

v20.26.4 (2024-09-07)

Bugfixes - 20.26.4

- no longer create `()` output in console during activation of a virtualenv by .bat file. (:issue:`2728`)
- Upgrade embedded wheels:

wheel to 0.44.0 from 0.43.0
pip to 24.2 from 24.1
setuptools to 74.1.2 from 70.1.0 (:issue:2760)

v20.26.3 (2024-06-21)
Bugfixes - 20.26.3

Upgrade embedded wheels:
- setuptools to 70.1.0 from 69.5.1
- pip to 24.1 from 24.0 (:issue:2741)

v20.26.2 (2024-05-13)

Bugfixes - 20.26.2

- ``virtualenv.pyz`` no longer fails when zipapp path contains a symlink - by :user:`HandSonic` and :user:`petamas`. (:issue:`1949`)
- Fix bad return code from activate.sh if hashing is disabled - by :user:'fenkes-ibm'. (:issue:`2717`)
v20.26.1 (2024-04-29)
Bugfixes - 20.26.1

... (truncated)

Commits

ec04726 release 20.26.6
86ddded Fix #2768: Quote template strings in activation scripts (#2771)
6bb3f62 [pre-commit.ci] pre-commit autoupdate (#2769)
220d49c Bump pypa/gh-action-pypi-publish from 1.10.1 to 1.10.2 (#2767)
cf340c8 Merge pull request #2766 from pypa/release-20.26.5
f3172b4 release 20.26.5
22b9795 Use uv over pip (#2765)
35d8269 [pre-commit.ci] pre-commit autoupdate (#2764)
ee77feb [pre-commit.ci] pre-commit autoupdate (#2763)
c516056 Update README.md
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

glyph / MOPUp