GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — gh-159894: Upgrade bundled pip to 26.2.2 by notatallshaw · Pull Request #159910 · python/cpython

Conversation

notatallshaw commented Oct 20, 2026

Copy link

Copy Markdown

Contributor

Update ensurepip's bundled pip from 26.2.1 to 26.2.2.

Issue: Update bundled pip to 26.2.2 #159894

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions

notatallshaw requested review from pfmoore and pradyunsg as code owners

October 20, 2026 17:23

bedevere-app Bot mentioned this pull request

Oct 20, 2026

Update bundled pip to 26.2.2 #159894

Closed

bedevere-app Bot added the awaiting review label

Oct 20, 2026

StanFromIreland reviewed

Oct 20, 2026

View reviewed changes

Comment thread

Misc/NEWS.d/next/Library/2026-10-20-13-15-00.gh-issue-159894.8Kp4mN.rst Resolved

Uh oh!

There was an error while loading. Please reload this page.

hugovk added needs backport to 3.14

bugs and security fixes

needs backport to 3.15 bugs and security fixes labels

Oct 20, 2026

StanFromIreland reviewed

Oct 20, 2026

View reviewed changes

Comment thread

Misc/NEWS.d/next/Library/2026-10-20-13-15-00.gh-issue-159894.8Kp4mN.rst Resolved

Uh oh!

There was an error while loading. Please reload this page.


          pythongh-159894: Upgrade bundled pip to 26.2.2

bee6e7d

notatallshaw force-pushed the gh-159894-pip-26.2.2 branch from 92445a5 to bee6e7d Compare

October 20, 2026 17:35

hugovk approved these changes

Oct 20, 2026

View reviewed changes

bedevere-app Bot added awaiting merge and removed awaiting review labels

Oct 20, 2026

StanFromIreland approved these changes

Oct 20, 2026

View reviewed changes

StanFromIreland left a comment

Copy link

Copy Markdown

Member

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

(In the future, please try to avoid force-pushing, see the devguide for more information.)

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions

StanFromIreland enabled auto-merge (squash)

October 20, 2026 17:38

notatallshaw commented Oct 20, 2026

Copy link

Copy Markdown

Contributor Author

(In the future, please try to avoid force-pushing, see the devguide for more information.)

Noted and apologies, I don't think I've ever got feedback before on updating a pip PR and I was trying to address this quickly so I didn't consult the dev guide.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

StanFromIreland commented Oct 20, 2026

Copy link

Copy Markdown

Member

No worries, it's all good here, this isn't a particularly large PR anyway :-)

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

Yhg1s added the needs backport to 3.13 only security fixes label

Oct 20, 2026

StanFromIreland merged commit 39d7c0f into python:main

Oct 20, 2026

60 checks passed

Uh oh!

There was an error while loading. Please reload this page.

bedevere-app Bot removed the awaiting merge label

Oct 20, 2026

miss-islington-app Bot commented Oct 20, 2026

Copy link

Copy Markdown

Thanks @notatallshaw for the PR, and @StanFromIreland for merging it 🌮🎉.. I'm working now to backport this PR to: 3.13, 3.14, 3.15.
🐍🍒⛏🤖

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

bedevere-app Bot commented Oct 20, 2026

Copy link

Copy Markdown

GH-159941 is a backport of this pull request to the 3.15 branch.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

bedevere-app Bot removed the needs backport to 3.15 bugs and security fixes label

Oct 20, 2026

bedevere-app Bot commented Oct 20, 2026

Copy link

Copy Markdown

GH-159942 is a backport of this pull request to the 3.14 branch.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

bedevere-app Bot removed the needs backport to 3.14 bugs and security fixes label

Oct 20, 2026

bedevere-app Bot commented Oct 20, 2026

Copy link

Copy Markdown

GH-159943 is a backport of this pull request to the 3.13 branch.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

bedevere-app Bot removed the needs backport to 3.13 only security fixes label

Oct 20, 2026

hugovk pushed a commit that referenced this pull request

Oct 20, 2026


          [3.14] gh-159894: Upgrade bundled pip to 26.2.2 (GH-159910) (#159942)

ce7dafd

gh-159894: Upgrade bundled pip to 26.2.2 (GH-159910)
(cherry picked from commit 39d7c0f)

Co-authored-by: Damian Shaw <[email protected]>

hugovk pushed a commit that referenced this pull request

Oct 20, 2026


          [3.15] gh-159894: Upgrade bundled pip to 26.2.2 (GH-159910) (#159941)

576b233

gh-159894: Upgrade bundled pip to 26.2.2 (GH-159910)
(cherry picked from commit 39d7c0f)

Co-authored-by: Damian Shaw <[email protected]>

Yhg1s pushed a commit that referenced this pull request

Oct 21, 2026


          [3.13] gh-159894: Upgrade bundled pip to 26.2.2 (GH-159910) (#159943)

d811ad4

gh-159894: Upgrade bundled pip to 26.2.2 (GH-159910)
(cherry picked from commit 39d7c0f)

Co-authored-by: Damian Shaw <[email protected]>

yosifkit mentioned this pull request

Oct 21, 2026

[security] Update python docker-library/official-images#22554

Merged

icanhasmath added a commit to ActiveState/cpython that referenced this pull request

Oct 28, 2026


          pythongh-159894: Upgrade bundled pip to 26.2.2 (3.10.22.x)

005744b

Upstream upgraded ensurepip's bundled pip to 26.2.2 only on 3.13+
(pythonGH-159910, cherry picked to 3.13 as d811ad4); the security-only
3.11 branch kept pip 24.0 and relies on the pythongh-160040 ssl denylist.
3.10 has no upstream release left, and the pip 23.0.1 it bundles
carries a vendored certifi that still trusts the compromised eMudhra
emSign root, so every venv created with ensurepip started out with a
pip that loads those CAs. pip 26.2.2 supports Python >= 3.10.

Wheel sha256 fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70,
matching PyPI and the hash published in the python.org eMudhra
advisory.

Reviewers

hugovk

hugovk approved these changes

StanFromIreland

StanFromIreland approved these changes

pfmoore

Awaiting requested review from pfmoore

pfmoore is a code owner

pradyunsg

Awaiting requested review from pradyunsg

pradyunsg is a code owner

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

4 participants

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.