- Update to 3.36.1 (fixes CVE-2026-22702, bsc#1256458)

* fix: resolve TOCTOU vulnerabilities in app_data and lock directory creation
- Update to 3.36.0
  * fix: Prevent NameError when accessing _DISTUTILS_PATCH during file
    overwrite
  * Upgrade pip and fix 3.15 picking old wheel
  * fix: wrong path on migrated venv 
  * test_too_many_open_files: assert on errno.EMFILE instead of strerror
  * fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146
  * fix: resolve EncodingWarning in tox upgrade environment
  * Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1
  * Add support for PEP 440 version specifiers in the --python flag
- disable test that is broken upstream

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-virtualenv?expand=0&rev=165

.gitattributes

@@ -0,0 +1,23 @@
+## Default LFS
+*.7z filter=lfs diff=lfs merge=lfs -text
+*.bsp filter=lfs diff=lfs merge=lfs -text
+*.bz2 filter=lfs diff=lfs merge=lfs -text
+*.gem filter=lfs diff=lfs merge=lfs -text
+*.gz filter=lfs diff=lfs merge=lfs -text
+*.jar filter=lfs diff=lfs merge=lfs -text
+*.lz filter=lfs diff=lfs merge=lfs -text
+*.lzma filter=lfs diff=lfs merge=lfs -text
+*.obscpio filter=lfs diff=lfs merge=lfs -text
+*.oxt filter=lfs diff=lfs merge=lfs -text
+*.pdf filter=lfs diff=lfs merge=lfs -text
+*.png filter=lfs diff=lfs merge=lfs -text
+*.rpm filter=lfs diff=lfs merge=lfs -text
+*.tbz filter=lfs diff=lfs merge=lfs -text
+*.tbz2 filter=lfs diff=lfs merge=lfs -text
+*.tgz filter=lfs diff=lfs merge=lfs -text
+*.ttf filter=lfs diff=lfs merge=lfs -text
+*.txz filter=lfs diff=lfs merge=lfs -text
+*.whl filter=lfs diff=lfs merge=lfs -text
+*.xz filter=lfs diff=lfs merge=lfs -text
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.zst filter=lfs diff=lfs merge=lfs -text

.gitignore

@@ -0,0 +1 @@
+.osc

_multibuild

@@ -0,0 +1,3 @@
+<multibuild>
+  <package>test</package>
+</multibuild>

python-virtualenv.spec

@@ -0,0 +1,144 @@
+#
+# spec file for package python-virtualenv
+#
+# Copyright (c) 2026 SUSE LLC and contributors
+#
+# All modifications and additions to the file contributed by third parties
+# remain the property of their copyright owners, unless otherwise agreed
+# upon. The license for this file, and modifications and additions to the
+# file, is the same license as for the pristine package itself (unless the
+# license for the pristine package is not an Open Source License, in which
+# case the license is the MIT License). An "Open Source License" is a
+# license that conforms to the Open Source Definition (Version 1.9)
+# published by the Open Source Initiative.
+
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
+#
+
+
+%global flavor @BUILD_FLAVOR@%{nil}
+%if "%{flavor}" == "test"
+%define psuffix -test
+%bcond_without test
+%else
+%define psuffix %{nil}
+%bcond_with test
+%endif
+%if 0%{?suse_version} > 1500
+%bcond_without libalternatives
+%else
+%bcond_with libalternatives
+%endif
+%{?sle15_python_module_pythons}
+Name:           python-virtualenv%{psuffix}
+Version:        20.36.1
+Release:        0
+Summary:        Virtual Python Environment builder
+License:        MIT
+URL:            https://virtualenv.pypa.io/
+# SourceRepository: https://github.com/pypa/virtualenv
+Source:         https://files.pythonhosted.org/packages/source/v/virtualenv/virtualenv-%{version}.tar.gz
+BuildRequires:  %{python_module base >= 3.8}
+BuildRequires:  %{python_module pip}
+BuildRequires:  python-rpm-macros
+Requires:       (python-distlib >= 0.3.7 with python-distlib < 1)
+Requires:       (python-filelock >= 3.20.3 with python-filelock < 4)
+Requires:       (python-platformdirs >= 3.9.1 with python-platformdirs < 5)
+BuildArch:      noarch
+%if !%{with test}
+# Don't install the build requirements during testing, see setuptools_scm comment below
+BuildRequires:  %{python_module hatch-vcs >= 0.3}
+BuildRequires:  %{python_module hatchling >= 1.17.1}
+BuildRequires:  fdupes
+%else
+BuildRequires:  %{python_module devel}
+BuildRequires:  %{python_module flaky >= 3.7}
+BuildRequires:  %{python_module packaging >= 23.1}
+BuildRequires:  %{python_module pytest >= 7.4}
+BuildRequires:  %{python_module pytest-env >= 0.8.2}
+BuildRequires:  %{python_module pytest-mock >= 3.11.1}
+BuildRequires:  %{python_module pytest-timeout >= 2.1}
+BuildRequires:  %{python_module setuptools >= 68}
+BuildRequires:  %{python_module setuptools-wheel >= 68}
+BuildRequires:  %{python_module time-machine >= 2.10}
+BuildRequires:  %{python_module virtualenv = %{version}}
+# Conflict with setuptools_scm giving a warning, https://github.com/pypa/virtualenv/issues/2668
+BuildConflicts: %{python_module setuptools_scm}
+%endif
+%if %{with libalternatives}
+BuildRequires:  alts
+Requires:       alts
+%else
+Requires(post): update-alternatives
+Requires(postun): update-alternatives
+%endif
+%if 0%{python_version_nodots} < 38
+Requires:       python-importlib-metadata >= 6.6
+%endif
+%python_subpackages
+
+%description
+virtualenv is a tool to create isolated Python environments.
+The basic problem being addressed is one of dependencies and versions, and
+indirectly permissions. Imagine you have an application that needs version 1
+of LibFoo, but another application requires version 2.
+
+Or more generally, what if you want to install an application and leave it be?
+If an application works, any change in its libraries or the versions of those
+libraries can break the application.
+
+Also, what if you cant install packages into the global site-packages
+directory? For instance, on a shared host.
+
+In all these cases, virtualenv can help you. It creates an environment that
+has its own installation directories, that doesnt share libraries with other
+virtualenv environments (and optionally doesnt use the globally installed
+libraries either).
+
+%prep
+%autosetup -p1 -n virtualenv-%{version}
+
+# Dependencies on all those shells are too cumbersome.
+rm -r tests/unit/activation
+
+%if !%{with test}
+%build
+%pyproject_wheel
+
+%install
+%pyproject_install
+%python_expand %fdupes %{buildroot}%{$python_sitelib}
+%python_clone -a %{buildroot}%{_bindir}/virtualenv
+%endif
+
+%if %{with test}
+%check
+# online tests downloads from pypi
+donttest="test_seed_link_via_app_data"
+donttest+=" or test_py_info_cache_invalidation_on_py_info_change" # https://github.com/pypa/virtualenv/issues/2939
+# take the first wheels directory we can find, they all contain the same file
+export PIP_FIND_LINKS=$(ls -1d /usr/lib/python3.*/wheels | head -n 1)
+%pytest -k "not ($donttest)"
+donttest+=" or test_embed_wheel_versions"
+%pytest -k "not ($donttest)"
+%endif
+
+%pre
+%python_libalternatives_reset_alternative virtualenv
+
+%post
+%python_install_alternative virtualenv
+
+%postun
+%python_uninstall_alternative virtualenv
+
+%if !%{with test}
+%files %{python_files}
+%license LICENSE
+%doc README.md
+%{python_sitelib}/virtualenv
+%{python_sitelib}/virtualenv-%{version}.dist-info
+%python_alternative %{_bindir}/virtualenv
+%endif
+
+%changelog

virtualenv-20.36.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8befb5c81842c641f8ee658481e42641c68b5eab3521d8e092d18320902466ba
+size 6032239