2026.8.0 (2026-08-20)
=====================
pipenv 2026.8.0 (2026-08-20)
============================


Features & Improvements
-----------------------

- Pipenv now includes scaffolding for pluggable resolver backends. The
  ``--resolver NAME`` CLI flag, ``PIPENV_RESOLVER`` environment variable,
  and ``[pipenv] resolver`` Pipfile setting are now recognized, but only
  ``pip`` (the default) is shipped in this release. Selecting an unknown
  backend will produce a clear error message. Future releases will add
  additional backends.  `#T_F.5 <https://github.com/pypa/pipenv/issues/T_F.5>`_
- Add a pure-Python PEP 691 / PEP 503 simple-API client + parsed-manifest
  cache + parallel fetcher under ``pipenv/resolver/``.  Initiative G
  phase 1 ships the standalone surface; no integration yet.  Phase 2
  (cache-prime bridge) and Phase 3 (full backend) will wire it in.
  ``pipenv lock --clear`` and ``pipenv install --clear`` now invalidate
  this parsed-manifest cache in addition to pip's HTTP cache.  `#initiative-g-phase1-pep691-client <https://github.com/pypa/pipenv/issues/initiative-g-phase1-pep691-client>`_
- Add ``[pipenv] prefetch_index_manifests`` opt-in setting (also
  ``PIPENV_PREFETCH_INDEX_MANIFESTS=1``) that pre-fetches simple-API
  index pages for top-level Pipfile packages in parallel before the
  resolver runs.  Most beneficial on cold caches or slow networks;
  off-by-default because warm-cache dev machines see neutral-to-
  slightly-slower behaviour.  Initiative G phase 2.  `#initiative-g-phase2-prefetch-bridge <https://github.com/pypa/pipenv/issues/initiative-g-phase2-prefetch-bridge>`_

Bug Fixes
---------

- Fixed corrupt Pipfile and lockfile errors so they retain the affected path and
  backup location while reporting the file-specific error message.
- Allow dependency locking to fall back to a prerelease of a final lower bound, such as resolving ``odin~=2.11`` to ``2.11rc3`` before the ``2.11`` final release is available.  `#6701 <https://github.com/pypa/pipenv/issues/6701>`_
- Python-version mismatch warnings now recommend ``pipenv remove`` instead of the deprecated ``pipenv --rm`` flag.  `#6704 <https://github.com/pypa/pipenv/issues/6704>`_
- Hash-lookup sessions now use pip's combined certificate trust configuration, so custom CA bundles do not discard the public roots trusted by pip.  `#6711 <https://github.com/pypa/pipenv/issues/6711>`_
- PyPI hash collection now handles requests and pip network exceptions and falls back to the resolver's other hash sources.  `#6712 <https://github.com/pypa/pipenv/issues/6712>`_

Vendored Libraries
------------------

- Updated the bundled pip to 26.2.
- Updated the bundled pip to 26.2.1.

2026.7.1 (2026-08-03)
=====================
pipenv 2026.7.1 (2026-08-03)
============================


Features & Improvements
-----------------------

- Added support for ``cool-down-period`` in the ``[pipenv]`` section of the Pipfile.
  Setting ``cool-down-period = "30d"`` instructs the resolver to only consider
  package versions uploaded at least the specified number of days ago, via pip's
  ``--uploaded-prior-to`` flag.

Behavior Changes
----------------

- Added a configurable timeout for the resolver subprocess invoked by
  ``pipenv install``, ``pipenv lock``, and ``pipenv sync``. A hung mirror or
  stuck pip download previously caused the resolver to block forever from
  the user's perspective; the wait is now bounded by
  ``PIPENV_RESOLVER_TIMEOUT_S`` (default ``1800`` seconds = 30 minutes,
  chosen generously so normal resolutions are unaffected). On timeout the
  subprocess is killed and a clear error is surfaced that names the
  environment variable so users with legitimately large resolutions can
  extend it.
- Resolver subprocess now produces structured error messages on
  dependency conflicts, surfacing the conflicting packages and the
  specific requirements that cause the conflict instead of a wall of
  unstructured pip output.  `#T_F.3 <https://github.com/pypa/pipenv/issues/T_F.3>`_
- Pipenv now enforces a wall-clock timeout on the resolver across both
  the subprocess and in-process branches. The deadline is resolved with
  the precedence ``[pipenv] resolver_timeout_seconds`` (Pipfile) >
  ``PIPENV_RESOLVER_TIMEOUT_S`` (env var) > default (1800 seconds), and
  is stamped onto ``RequestMetadata.deadline_seconds`` so the resolver
  subprocess sees the same value the parent uses for
  ``subprocess.wait(timeout=...)``. A hung resolver is now killed and a
  structured error surfaced naming the override, instead of hanging
  indefinitely. The in-process debug branch
  (``PIPENV_RESOLVER_PARENT_PYTHON=1``) enforces the same deadline via
  ``SIGALRM`` on Unix; Windows continues to rely on the subprocess
  path for enforcement.  `#T_F.6 <https://github.com/pypa/pipenv/issues/T_F.6>`_

Bug Fixes
---------

- Fixed a latent bug in ``pipenv.utils.dependencies.pep423_name`` whose
  scheme-token guard had an inverted predicate, making the branch that
  preserves URL/VCS specifiers (e.g. ``git+ssh://host/path/some_repo``)
  from underscore-mangling unreachable. The predicate is now correct;
  bare package names continue to be lowercased and have ``_`` rewritten
  to ``-`` as before. The sibling helper ``normalize_name`` in
  ``pipenv.utils.requirements`` has been removed and its four callers
  migrated to ``pep423_name``.
- Restored authentication to private indexes when ``[[source]]`` URLs use
  environment-variable placeholders. The GHSA-8xgg-v3jj-95m2 fix moved
  credentials off pip's argv onto a merged netrc, but
  ``write_credentials_netrc`` wrote our Pipfile-derived ``machine`` blocks
  BEFORE the appended user netrc — and ``netrc.authenticators()`` returns
  the LAST matching entry, so a stale system entry for the same host
  silently overrode the freshly-expanded creds. Our blocks now come AFTER
  the user's existing content. Additionally, the ``pylock.toml`` reader
  now runs ``expand_url_credentials`` over its sources so users with
  ``[pipenv] use_pylock = true`` see the same env-var expansion that
  ``Pipfile.lock`` reads have always had.  `#6670 <https://github.com/pypa/pipenv/issues/6670>`_
- Restored documented ``pipenv update`` (no args) semantics of ``lock + sync``.
  Since 2026.0.0, ``pipenv update`` only re-resolved Pipfile entries whose
  locked version no longer satisfied the Pipfile specifier, so relaxing a
  pin (e.g. ``urllib3 = "<2.7.0"`` → ``urllib3 = "*"``) would not pick up
  newer allowed releases — the lockfile silently stayed at the existing
  pin. ``pipenv update`` now routes through ``do_lock`` when no packages
  are given, re-resolving every Pipfile entry. The targeted
  ``pipenv update <pkg>`` path is unchanged.  `#6672 <https://github.com/pypa/pipenv/issues/6672>`_
- Restored authentication to a private index configured via
  ``PIPENV_PYPI_MIRROR`` with embedded credentials (e.g.
  ``https://user:pass@mirror.example.com``). The GHSA-8xgg-v3jj-95m2 fix moved
  credentials off pip's argv onto a temporary netrc, but the resolver's netrc
  was written from the un-mirrored Pipfile sources, so the mirror's credentials
  were dropped and resolution failed with ``401`` / ``ResolutionFailure``. The
  resolver netrc now applies the same ``PIPENV_PYPI_MIRROR`` substitution the
  resolver subprocess uses, so the mirror credentials reach pip again.  `#6677 <https://github.com/pypa/pipenv/issues/6677>`_
- Restored support for a major-only ``python_version`` such as ``python_version
  = "3"`` in the Pipfile ``[requires]`` section, which the documentation lists as
  valid. The version check added in 6535 compared the major and minor components
  whenever fewer than three were given, but ``"3"`` parses to ``3.0``, so every
  3.x interpreter but 3.0 was reported as a mismatch. That produced a spurious
  warning on install and a fatal ``DeployException`` under ``--deploy``. Only the
  components actually given are compared now, so ``"3"`` matches any 3.x while
  ``"3.13"`` and ``"3.13.1"`` keep their existing meaning.  `#6687 <https://github.com/pypa/pipenv/issues/6687>`_
- Allow ``cool-down-period`` locking to use package links from indexes that do
  not expose upload-time metadata, while retaining the filter for indexes that do.  `#6691 <https://github.com/pypa/pipenv/issues/6691>`_
- Prevent Pipenv's own environment from leaking into bundled pip subprocesses, which
  could cause locked transitive dependencies to be skipped when they were installed
  alongside Pipenv but missing from the project environment.  `#6698 <https://github.com/pypa/pipenv/issues/6698>`_

Vendored Libraries
------------------

- Bump vendored ``plette`` to ``2.2.1``.
- Bump patched ``pip`` to ``26.1.2`` and refresh vendored libraries:
  ``pipdeptree`` to ``3.1.0``, ``packaging`` to ``26.2``,
  ``pythonfinder`` to ``3.0.4``, and ``tomlkit`` to ``0.15.0``.
  Also harden ``is_within_directory()`` in patched pip to use
  ``os.path.commonpath()`` instead of ``startswith``, fixing a
  containment check edge case for root directories and Windows
  drive mismatches.  `#6680 <https://github.com/pypa/pipenv/issues/6680>`_
- Bump vendored ``urllib3`` in patched pip to ``2.7.0`` (fixes GHSA-qccp-gfcp-xxvc,
  sensitive headers forwarded across origins in proxied low-level redirects).
  Raise minimum ``virtualenv`` requirement from ``>=20.24.2`` to ``>=20.26.6``
  (fixes GHSA-rqc4-2hc7-8c8v, command injection through activation scripts).
  The three other urllib3 CVEs reported in this issue (GHSA-2xpw-w6gg-jr37,
  GHSA-38jv-5279-wg99, GHSA-gm62-xv2j-4w53) were already resolved in 2.6.3.  `#6684 <https://github.com/pypa/pipenv/issues/6684>`_

Improved Documentation
----------------------

- Corrected the requirements.txt import example in the README, which was missing the ``-r`` flag.  `#6689 <https://github.com/pypa/pipenv/issues/6689>`_

Removals and Deprecations
-------------------------

- Removed ``pipenv.utils.fileutils.is_valid_url``. Import
  ``is_valid_url`` from ``pipenv.utils.internet`` instead. pipenv's
  stable API is the CLI; internal-only Python imports do not get
  a deprecation window. Also removed the
  ``pipenv.project.SourceNotFound`` re-export for the same reason —
  import it from ``pipenv.utils.sources``.
- Announce that the deprecated legacy ``pipenv check`` implementation will be
  removed in v2027.0.0. Use ``pipenv audit`` or
  ``pipenv check --scan`` during the transition.  `#6681 <https://github.com/pypa/pipenv/issues/6681>`_

Relates to dev process changes
------------------------------

- Make the release task resumable after a completed version bump, consume Towncrier
  fragments non-interactively, and avoid trailing whitespace in generated release
  notes.

2026.7.0 (2026-08-03)
=====================
pipenv 2026.7.0 (2026-08-03)
============================


Features & Improvements
-----------------------

- Added support for ``cool-down-period`` in the ``[pipenv]`` section of the Pipfile.
  Setting ``cool-down-period = "30d"`` instructs the resolver to only consider
  package versions uploaded at least the specified number of days ago, via pip's
  ``--uploaded-prior-to`` flag.

Behavior Changes
----------------

- Added a configurable timeout for the resolver subprocess invoked by
  ``pipenv install``, ``pipenv lock``, and ``pipenv sync``. A hung mirror or
  stuck pip download previously caused the resolver to block forever from
  the user's perspective; the wait is now bounded by
  ``PIPENV_RESOLVER_TIMEOUT_S`` (default ``1800`` seconds = 30 minutes,
  chosen generously so normal resolutions are unaffected). On timeout the
  subprocess is killed and a clear error is surfaced that names the
  environment variable so users with legitimately large resolutions can
  extend it.
- Resolver subprocess now produces structured error messages on
  dependency conflicts, surfacing the conflicting packages and the
  specific requirements that cause the conflict instead of a wall of
  unstructured pip output.  `#T_F.3 <https://github.com/pypa/pipenv/issues/T_F.3>`_
- Pipenv now enforces a wall-clock timeout on the resolver across both
  the subprocess and in-process branches. The deadline is resolved with
  the precedence ``[pipenv] resolver_timeout_seconds`` (Pipfile) >
  ``PIPENV_RESOLVER_TIMEOUT_S`` (env var) > default (1800 seconds), and
  is stamped onto ``RequestMetadata.deadline_seconds`` so the resolver
  subprocess sees the same value the parent uses for
  ``subprocess.wait(timeout=...)``. A hung resolver is now killed and a
  structured error surfaced naming the override, instead of hanging
  indefinitely. The in-process debug branch
  (``PIPENV_RESOLVER_PARENT_PYTHON=1``) enforces the same deadline via
  ``SIGALRM`` on Unix; Windows continues to rely on the subprocess
  path for enforcement.  `#T_F.6 <https://github.com/pypa/pipenv/issues/T_F.6>`_

Bug Fixes
---------

- Fixed a latent bug in ``pipenv.utils.dependencies.pep423_name`` whose
  scheme-token guard had an inverted predicate, making the branch that
  preserves URL/VCS specifiers (e.g. ``git+ssh://host/path/some_repo``)
  from underscore-mangling unreachable. The predicate is now correct;
  bare package names continue to be lowercased and have ``_`` rewritten
  to ``-`` as before. The sibling helper ``normalize_name`` in
  ``pipenv.utils.requirements`` has been removed and its four callers
  migrated to ``pep423_name``.
- Restored authentication to private indexes when ``[[source]]`` URLs use
  environment-variable placeholders. The GHSA-8xgg-v3jj-95m2 fix moved
  credentials off pip's argv onto a merged netrc, but
  ``write_credentials_netrc`` wrote our Pipfile-derived ``machine`` blocks
  BEFORE the appended user netrc — and ``netrc.authenticators()`` returns
  the LAST matching entry, so a stale system entry for the same host
  silently overrode the freshly-expanded creds. Our blocks now come AFTER
  the user's existing content. Additionally, the ``pylock.toml`` reader
  now runs ``expand_url_credentials`` over its sources so users with
  ``[pipenv] use_pylock = true`` see the same env-var expansion that
  ``Pipfile.lock`` reads have always had.  `#6670 <https://github.com/pypa/pipenv/issues/6670>`_
- Restored documented ``pipenv update`` (no args) semantics of ``lock + sync``.
  Since 2026.0.0, ``pipenv update`` only re-resolved Pipfile entries whose
  locked version no longer satisfied the Pipfile specifier, so relaxing a
  pin (e.g. ``urllib3 = "<2.7.0"`` → ``urllib3 = "*"``) would not pick up
  newer allowed releases — the lockfile silently stayed at the existing
  pin. ``pipenv update`` now routes through ``do_lock`` when no packages
  are given, re-resolving every Pipfile entry. The targeted
  ``pipenv update <pkg>`` path is unchanged.  `#6672 <https://github.com/pypa/pipenv/issues/6672>`_
- Restored authentication to a private index configured via
  ``PIPENV_PYPI_MIRROR`` with embedded credentials (e.g.
  ``https://user:pass@mirror.example.com``). The GHSA-8xgg-v3jj-95m2 fix moved
  credentials off pip's argv onto a temporary netrc, but the resolver's netrc
  was written from the un-mirrored Pipfile sources, so the mirror's credentials
  were dropped and resolution failed with ``401`` / ``ResolutionFailure``. The
  resolver netrc now applies the same ``PIPENV_PYPI_MIRROR`` substitution the
  resolver subprocess uses, so the mirror credentials reach pip again.  `#6677 <https://github.com/pypa/pipenv/issues/6677>`_
- Restored support for a major-only ``python_version`` such as ``python_version
  = "3"`` in the Pipfile ``[requires]`` section, which the documentation lists as
  valid. The version check added in 6535 compared the major and minor components
  whenever fewer than three were given, but ``"3"`` parses to ``3.0``, so every
  3.x interpreter but 3.0 was reported as a mismatch. That produced a spurious
  warning on install and a fatal ``DeployException`` under ``--deploy``. Only the
  components actually given are compared now, so ``"3"`` matches any 3.x while
  ``"3.13"`` and ``"3.13.1"`` keep their existing meaning.  `#6687 <https://github.com/pypa/pipenv/issues/6687>`_
- Allow ``cool-down-period`` locking to use package links from indexes that do
  not expose upload-time metadata, while retaining the filter for indexes that do.  `#6691 <https://github.com/pypa/pipenv/issues/6691>`_

Vendored Libraries
------------------

- Bump vendored ``plette`` to ``2.2.1``.
- Bump patched ``pip`` to ``26.1.2`` and refresh vendored libraries:
  ``pipdeptree`` to ``3.1.0``, ``packaging`` to ``26.2``,
  ``pythonfinder`` to ``3.0.4``, and ``tomlkit`` to ``0.15.0``.
  Also harden ``is_within_directory()`` in patched pip to use
  ``os.path.commonpath()`` instead of ``startswith``, fixing a
  containment check edge case for root directories and Windows
  drive mismatches.  `#6680 <https://github.com/pypa/pipenv/issues/6680>`_
- Bump vendored ``urllib3`` in patched pip to ``2.7.0`` (fixes GHSA-qccp-gfcp-xxvc,
  sensitive headers forwarded across origins in proxied low-level redirects).
  Raise minimum ``virtualenv`` requirement from ``>=20.24.2`` to ``>=20.26.6``
  (fixes GHSA-rqc4-2hc7-8c8v, command injection through activation scripts).
  The three other urllib3 CVEs reported in this issue (GHSA-2xpw-w6gg-jr37,
  GHSA-38jv-5279-wg99, GHSA-gm62-xv2j-4w53) were already resolved in 2.6.3.  `#6684 <https://github.com/pypa/pipenv/issues/6684>`_

Improved Documentation
----------------------

- Corrected the requirements.txt import example in the README, which was missing the ``-r`` flag.  `#6689 <https://github.com/pypa/pipenv/issues/6689>`_

Removals and Deprecations
-------------------------

- Removed ``pipenv.utils.fileutils.is_valid_url``. Import
  ``is_valid_url`` from ``pipenv.utils.internet`` instead. pipenv's
  stable API is the CLI; internal-only Python imports do not get
  a deprecation window. Also removed the
  ``pipenv.project.SourceNotFound`` re-export for the same reason —
  import it from ``pipenv.utils.sources``.
- Announce that the deprecated legacy ``pipenv check`` implementation will be
  removed in v2027.0.0. Use ``pipenv audit`` or
  ``pipenv check --scan`` during the transition.  `#6681 <https://github.com/pypa/pipenv/issues/6681>`_

2026.6.2 (2026-06-02)
=====================
pipenv 2026.6.2 (2026-06-02)
============================


Features & Improvements
-----------------------

- Added support for ``cool-down-period`` in the ``[pipenv]`` section of the Pipfile.
  Setting ``cool-down-period = "30d"`` instructs the resolver to only consider
  package versions uploaded at least the specified number of days ago, via pip's
  ``--uploaded-prior-to`` flag.

Bug Fixes
---------

- Restored authentication to private indexes when ``[[source]]`` URLs use
  environment-variable placeholders. The GHSA-8xgg-v3jj-95m2 fix moved
  credentials off pip's argv onto a merged netrc, but
  ``write_credentials_netrc`` wrote our Pipfile-derived ``machine`` blocks
  BEFORE the appended user netrc — and ``netrc.authenticators()`` returns
  the LAST matching entry, so a stale system entry for the same host
  silently overrode the freshly-expanded creds. Our blocks now come AFTER
  the user's existing content. Additionally, the ``pylock.toml`` reader
  now runs ``expand_url_credentials`` over its sources so users with
  ``[pipenv] use_pylock = true`` see the same env-var expansion that
  ``Pipfile.lock`` reads have always had.  `#6670 <https://github.com/pypa/pipenv/issues/6670>`_
- Restored documented ``pipenv update`` (no args) semantics of ``lock + sync``.
  Since 2026.0.0, ``pipenv update`` only re-resolved Pipfile entries whose
  locked version no longer satisfied the Pipfile specifier, so relaxing a
  pin (e.g. ``urllib3 = "<2.7.0"`` → ``urllib3 = "*"``) would not pick up
  newer allowed releases — the lockfile silently stayed at the existing
  pin. ``pipenv update`` now routes through ``do_lock`` when no packages
  are given, re-resolving every Pipfile entry. The targeted
  ``pipenv update <pkg>`` path is unchanged.  `#6672 <https://github.com/pypa/pipenv/issues/6672>`_

Vendored Libraries
------------------

- Bump vendored ``plette`` to ``2.2.1``.

2026.6.1 (2026-04-28)
=====================
pipenv 2026.6.1 (2026-04-28)
============================


Bug Fixes
---------

- Fix ``pipenv install`` corrupting existing inline-table or outline-table
  Pipfile entries (``six = {version = "*"}``, ``[packages.requests]``).  The
  locker was popping ``version``/``ref`` keys directly off the cached
  ``parsed_pipfile`` document, so subsequent writes emitted
  ``six = {}`` and dropped the version specifier from sibling packages.  `#6657 <https://github.com/pypa/pipenv/issues/6657>`_

2026.6.0 (2026-04-27)
=====================
pipenv 2026.6.0 (2026-04-27)
============================


Bug Fixes
---------

- Fix ``pipenv shell`` breaking terminal input echo on Linux.  The previous
  implementation toggled ``setecho(True/False)`` on the spawned child around
  its internal setup commands, which fought with the shell's own readline
  termios management — producing permanently-disabled echo (GH-6572) or
  double-echoed keystrokes (``1234`` → ``11223344``).  ``fork_compat`` no
  longer touches pty termios; instead it drains the synchronisation sentinel
  from the pexpect buffer twice (once for the echoed command, once for its
  output) so nothing leaks into ``interact()``.  `#6633 <https://github.com/pypa/pipenv/issues/6633>`_
- ``pipenv run <command> -h <arg>`` now passes ``-h`` through to the command
  instead of showing pipenv's help.  All arguments following ``run_command`` are
  captured verbatim via argparse ``REMAINDER``, so flags like ``-h`` that pipenv
  itself also defines no longer collide with the wrapped command.  `#6641 <https://github.com/pypa/pipenv/issues/6641>`_
- Fix ``ValueError: invalid literal for int() with base 10`` when the Pipfile's
  ``[requires]`` section uses a PEP 440 specifier (e.g. ``python_version = ">=3.9"``).
  Specifier values no longer produce a Python-version override; the running
  interpreter's actual version is used for marker evaluation instead.  `#6645 <https://github.com/pypa/pipenv/issues/6645>`_
- Install-time marker filtering now evaluates environment markers against the
  target virtualenv's Python version rather than against the Python version
  that pipenv itself is running under.  This prevents spurious ``Ignoring …:
  markers … don't match your environment`` warnings (and the corresponding
  missing installs) when ``pipenv sync --python X.Y`` is driven by a
  different system Python.  `#6647 <https://github.com/pypa/pipenv/issues/6647>`_
- ``pipenv run`` now expands ``$PIPENV_PROJECT_DIR`` and other Pipenv-managed
  environment variables inside Pipfile script arguments before direct command
  execution, so project-relative script paths resolve correctly.  `#6652 <https://github.com/pypa/pipenv/issues/6652>`_

Improved Documentation
----------------------

- Pipfile documentation now includes git+ssh examples.  `#6651 <https://github.com/pypa/pipenv/issues/6651>`_

2026.5.2 (2026-04-03)
=====================
pipenv 2026.5.2 (2026-04-03)
============================


No significant changes.


2026.5.1 (2026-04-01)
=====================
pipenv 2026.5.1 (2026-04-01)
============================


No significant changes.


2026.5.0 (2026-03-30)
=====================
pipenv 2026.5.0 (2026-03-30)
============================


Features & Improvements
-----------------------

- Add optional shell completion via ``argcomplete``. Install with
  ``pip install "pipenv[completion]"`` and activate once with
  ``eval "$(register-python-argcomplete pipenv)"``.

  Mistyped subcommand names now produce "Did you mean …?" suggestions using
  ``difflib``, replacing the ``click_didyoumean`` vendor library.  `#6619 <https://github.com/pypa/pipenv/issues/6619>`_

Bug Fixes
---------

- Fix ``pylock.toml`` re-generation duplicating ``dependency_groups`` markers
  for develop packages. Each run of ``pipenv pylock --generate`` (or any
  command that rewrites the lock file) prepended the ``dependency_groups``
  prefix even when it was already present, producing malformed markers like
  ``('dev' in dependency_groups) and (('dev' in dependency_groups) and ...)``.
  This caused ``pipenv install`` to crash with a ``KeyError: 'dependency_groups'``
  when evaluating environment markers.  `#6621 <https://github.com/pypa/pipenv/issues/6621>`_

Vendored Libraries
------------------

- Remove vendored ``colorama``. Rich's ``Console`` supersedes colorama's Windows
  ANSI escape code handling, and this was the last remaining usage in Pipenv.  `#6621 <https://github.com/pypa/pipenv/issues/6621>`_

Removals and Deprecations
-------------------------

- Remove the vendored ``click`` and ``click_didyoumean`` libraries. The CLI has
  been rewritten to use Python's standard-library ``argparse``, eliminating
  Pipenv's dependency on Click entirely.  `#6619 <https://github.com/pypa/pipenv/issues/6619>`_
- Remove the vendored ``importlib-metadata`` and ``zipp`` libraries. Python 3.9
  is end-of-life and Pipenv requires Python 3.10+, where ``importlib.metadata``
  is available in the standard library.  `#6622 <https://github.com/pypa/pipenv/issues/6622>`_

Relates to dev process changes
------------------------------

- Optimize CI pipeline: replace Black with ``ruff-format`` in pre-commit,
  remove redundant standalone Ruff job, and add a ``tests-smoke`` gate that
  runs Python 3.12 across all OSes before the full version matrix — cutting
  wasted compute on version-agnostic failures.
  Disable Windows Defender real-time scanning for Python toolcache,
  workspace, virtualenvs, and pip cache on Windows runners
  to reduce I/O overhead.

2026.4.0 (2026-03-28)
=====================
pipenv 2026.4.0 (2026-03-28)
============================


No significant changes.


2026.3.0 (2026-03-28)
=====================
pipenv 2026.3.0 (2026-03-28)
============================


Features & Improvements
-----------------------

- Support ``--system --python=/path/to/python`` to install packages to a specific
  Python interpreter's site-packages. Previously ``--system`` always used the
  default ``python3`` from PATH, ignoring the ``--python`` flag.  `#3593 <https://github.com/pypa/pipenv/issues/3593>`_
- Add ``--exclude-index`` flag to ``pipenv requirements`` command to allow users
  to exclude index URLs (``-i`` and ``--extra-index-url``) from the generated output.
  This is useful when the index is configured separately in the target environment.  `#4398 <https://github.com/pypa/pipenv/issues/4398>`_
- Add ``--system`` flag to ``pipenv update`` command, allowing system-level package
  updates without creating a virtualenv. This is useful in Docker environments and
  other contexts where packages are installed directly to the system Python.  `#5584 <https://github.com/pypa/pipenv/issues/5584>`_

Bug Fixes
---------

- ``pipenv shell`` now waits for the shell to finish its startup before sending the virtualenv activate script.  Previously, interactive prompts during shell startup (e.g. oh-my-zsh's update dialogue) could consume the activate command, leaving the virtualenv unactivated.  `#3615 <https://github.com/pypa/pipenv/issues/3615>`_
- ``pipenv --where`` now exits with a non-zero exit code (1) when no Pipfile is
  found, making it suitable for use in scripts and CI pipelines.  `#4085 <https://github.com/pypa/pipenv/issues/4085>`_
- Pass through ``PIP_IGNORE_INSTALLED`` and ``PIP_USER`` environment variables to
  pip subprocess when using ``--system``. This fixes ``pipenv install --deploy --system``
  not respecting these environment variables for Docker multi-stage builds.

  Add ``PIPENV_BREAK_SYSTEM_PACKAGES`` environment variable to pass
  ``--break-system-packages`` to pip when using ``--system`` on PEP 668
  externally-managed environments (e.g. Ubuntu 23.04+, Debian 12+).  `#4453 <https://github.com/pypa/pipenv/issues/4453>`_
- Fix ``--system`` flag causing confusing errors when a stale virtualenv exists from
  a previously deleted project, or when a virtualenv already exists. When ``--system``
  is used, pipenv now correctly skips virtualenv creation instead of aborting with
  "You are attempting to re-create a virtualenv that Pipenv did not create".  `#5052 <https://github.com/pypa/pipenv/issues/5052>`_
- Shorthand marker keys in Pipfile entries (e.g. ``sys_platform = "== 'linux'"``, ``platform_machine = "== 'arm64'"``) now behave identically to the equivalent ``markers`` syntax.  Previously, using the shorthand form caused pip to resolve and download sub-dependencies on all platforms, even though the top-level package was correctly marked as platform-specific in the lock file.  The shorthand keys are now translated to PEP 508 markers before building the pip requirement line, so the resolver skips resolution on non-matching platforms.  `#5884 <https://github.com/pypa/pipenv/issues/5884>`_
- Fix Windows py-launcher Python discovery for full version strings such as
  ``python_full_version = "3.11.9"`` in Pipfile and ``pipenv --python 3.11.9``
  on the CLI.

  Two bugs were addressed:

  1. ``find_python_from_py_launcher`` incorrectly required three whitespace-separated
     tokens on each ``py --list-paths`` output line, which caused every non-default
     Python installation (lines without the ``*`` marker) to be silently skipped.
     The parser now accepts both two-token (non-default) and three-token (default)
     lines, using the last token as the executable path in both cases.

  2. ``PyLauncherFinder`` stored only the ``major.minor`` version reported by
     ``py --list-paths`` (e.g. ``3.11``), so searches that required a specific
     patch level (``patch=9``) never matched.  The finder now queries each
     discovered executable for its real version string (e.g. ``3.11.9``) so that
     full-version lookups succeed.  `#5893 <https://github.com/pypa/pipenv/issues/5893>`_
- Security hardening: suppress ``pip.conf`` index configuration (``index-url`` and ``extra-index-url``) during ``pip install`` subprocess invocation.  Previously, ``pip.conf`` could silently inject extra package indexes at install time, bypassing pipenv's explicit-index-per-package security model and causing hash-mismatch errors (e.g. piwheels on Raspberry Pi).  Now pipenv sets ``PIP_CONFIG_FILE=/dev/null`` and explicitly passes only Pipfile ``[[source]]`` entries via ``PIP_INDEX_URL`` and ``PIP_EXTRA_INDEX_URL`` environment variables.  Users who need custom indexes (e.g. piwheels) should declare them as ``[[source]]`` entries in their Pipfile.  `#6066 <https://github.com/pypa/pipenv/issues/6066>`_

Improved Documentation
----------------------

- Added a dedicated "Installing on Windows" section to the installation docs with the recommended pipx method and PATH setup guidance.  `#4053 <https://github.com/pypa/pipenv/issues/4053>`_
- Added a "Upgrading the Python Version" workflow section to docs/workflows.md with step-by-step instructions for moving a project to a new Python interpreter.  `#4577 <https://github.com/pypa/pipenv/issues/4577>`_
- Documented that ``python_version`` in the ``[requires]`` section only accepts an exact version string and not range specifiers such as ``>= 3.6``.  `#4636 <https://github.com/pypa/pipenv/issues/4636>`_
- Enhanced the "Moving or Renaming Projects" section in docs/virtualenv.md with a recovery workflow for users who already moved their project without running ``pipenv --rm`` first, and added a tip about ``PIPENV_VENV_IN_PROJECT``.  `#5129 <https://github.com/pypa/pipenv/issues/5129>`_
- Added a "Multi-Platform Considerations" section to docs/locking.md explaining that ``Pipfile.lock`` is platform-specific and documenting workarounds for cross-platform teams.  `#5130 <https://github.com/pypa/pipenv/issues/5130>`_
- Added a "News Fragments" section to docs/dev/contributing.md explaining towncrier fragment types, including why ``trivial`` fragments are intentionally omitted from the generated CHANGELOG.  `#5324 <https://github.com/pypa/pipenv/issues/5324>`_
- Documented the behavior when a package pinned in ``[dev-packages]`` conflicts with the version resolved via ``[packages]`` dependencies, and clarified how to enforce a specific version in that scenario.  `#5528 <https://github.com/pypa/pipenv/issues/5528>`_
- Added a "Platform Markers and Locking" note to docs/specifiers.md explaining why packages with ``sys_platform`` markers may still cause resolution failures on non-matching platforms and documenting workarounds.  `#6028 <https://github.com/pypa/pipenv/issues/6028>`_

Relates to dev process changes
------------------------------

- Update project metadata: replace defunct ``distutils-sig@python.org`` email with ``matteius@gmail.com`` and remove redundant ``.isort.cfg`` (Ruff's isort handles import sorting).

2026.2.2 (2026-03-24)
=====================
pipenv 2026.2.2 (2026-03-24)
============================


Bug Fixes
---------

- ``pipenv upgrade`` now correctly removes transitive dependencies that are no longer needed after a package is upgraded (e.g. ``pytz`` is removed when upgrading Django from 3.2.x to 4.2+). A safety guard was also added to ``_clean_unused_dependencies`` to prevent incorrectly wiping all packages when a full resolution returns an empty result due to a subprocess failure.  `#6002 <https://github.com/pypa/pipenv/issues/6002>`_
- Run python -m virtualenv from empty directory to prevent PYTHONPATH pollution. Fixes #6568.  `#6569 <https://github.com/pypa/pipenv/issues/6569>`_

Improved Documentation
----------------------

- Fix broken changelog headers and update the auto-generated changelog template to avoid the issue in the future  `#6564 <https://github.com/pypa/pipenv/issues/6564>`_

2026.2.1 (2026-03-19)
=====================
pipenv 2026.2.1 (2026-03-19)
============================


No significant changes.


2026.2.0 (2026-03-18)
=====================
pipenv 2026.2.0 (2026-03-18)
============================


No significant changes.


2026.1.0 (2026-03-13)
=====================
pipenv 2026.1.0 (2026-03-13)
============================


No significant changes.


2026.0.3 (2025-12-16)
=====================
pipenv 2026.0.3 (2025-12-16)
============================


No significant changes.


2026.0.2 (2025-12-10)
=====================
pipenv 2026.0.2 (2025-12-10)
============================


No significant changes.


2026.0.1 (2025-12-10)
=====================
pipenv 2026.0.1 (2025-12-10)
============================


Bug Fixes
---------

- Fix reading of ``index-url`` from pip configuration files (``/etc/pip.conf``, ``~/.pip/pip.conf``, etc.) which was broken after vendoring pip 25.3 due to a change in pip's Configuration.items() return format.  `#6478 <https://github.com/pypa/pipenv/issues/6478>`_

2026.0.0 (2025-12-10)
=====================
pipenv 2026.0.0 (2025-12-10)
============================


Features & Improvements
-----------------------

- Add ``--system`` flag to ``pipenv run`` command. This allows running scripts
  defined in Pipfile's ``[scripts]`` section without creating a virtualenv,
  which is useful in Docker environments where packages are installed with
  ``pipenv install --system``.  `#2692 <https://github.com/pypa/pipenv/issues/2692>`_
- Allow ``pipenv install --system <package>`` to install specific packages to the
  system Python. Previously this was blocked with an error message. This enables
  Docker workflows where users want to interactively add packages to a project
  that uses system-level installation.  `#4086 <https://github.com/pypa/pipenv/issues/4086>`_
- Added support for PEP 751 pylock.toml files:

  - Reading: When both a Pipfile.lock and a pylock.toml file exist, Pipenv will prioritize the pylock.toml file.
  - Writing: Add ``use_pylock = true`` to the ``[pipenv]`` section of your Pipfile to generate pylock.toml files alongside Pipfile.lock.
  - Customization: Use ``pylock_name = "name"`` in the ``[pipenv]`` section to generate named pylock files (e.g., pylock.name.toml).  `#6391 <https://github.com/pypa/pipenv/issues/6391>`_
- Add support for ``--dev`` flag in ``pipenv uninstall`` command to remove packages from ``dev-packages`` section directly.  `#6392 <https://github.com/pypa/pipenv/issues/6392>`_
- Add ``PIPENV_PYENV_AUTO_INSTALL`` environment variable to automatically install missing Python versions via pyenv or asdf without prompting the user.  `#6408 <https://github.com/pypa/pipenv/issues/6408>`_

Bug Fixes
---------

- Fix ``--system`` and ``--python`` flags to work together correctly. Previously,
  using both flags would still create a virtualenv. Now when ``--system`` is used
  with ``--python``, pipenv validates that the specified Python version exists
  on the system and raises a clear error if not found.  `#4973 <https://github.com/pypa/pipenv/issues/4973>`_
- Make ``--quiet`` flag actually suppress output during ``pipenv install`` and ``pipenv sync``.
  Previously, messages like "Installing dependencies from Pipfile.lock" and "All dependencies are now up-to-date!" were shown even with ``--quiet``.  `#5037 <https://github.com/pypa/pipenv/issues/5037>`_
- Fix SSH ``git`` username being incorrectly redacted to ``****`` when importing
  from requirements.txt, which caused lockfile generation to fail.  `#5599 <https://github.com/pypa/pipenv/issues/5599>`_
- Fix malformed ``Pipfile.lock`` causing command to exit successfully with code 0.
  Now raises ``LockfileCorruptException`` which properly propagates as an error.  `#5622 <https://github.com/pypa/pipenv/issues/5622>`_
- Fix VCS dependencies (git, etc.) not being reinstalled when the ref/commit changes in the lockfile.
  Previously, ``pipenv update`` would update the lockfile with the new commit hash but the installed
  package in the virtualenv would remain unchanged, requiring ``pipenv --rm`` to force a reinstall.  `#5791 <https://github.com/pypa/pipenv/issues/5791>`_
- Fix ``pipenv-resolver`` CLI not working. The command now properly handles
  package arguments from the command line, sets a default category of "default",
  and correctly loads the pipenv module with all submodules.  `#5862 <https://github.com/pypa/pipenv/issues/5862>`_
- Fix ``--lock-only`` flag for ``pipenv upgrade`` command to properly skip adding package specifiers to Pipfile when set.  `#6131 <https://github.com/pypa/pipenv/issues/6131>`_
- Improve error handling in ``do_lock`` by properly catching and handling exceptions from ``venv_resolve_deps``.
  RuntimeError now exits cleanly, and other exceptions display a full traceback for debugging.  `#6166 <https://github.com/pypa/pipenv/issues/6166>`_
- Fixed ``pipenv install --index=xxx`` where ``xxx`` is not a valid URL or known index name now raises a clear error instead of creating a malformed source entry in the Pipfile.  `#6168 <https://github.com/pypa/pipenv/issues/6168>`_
- Fix ``PIPENV_ACTIVE`` environment variable not being unset when running ``deactivate`` in a pipenv shell, which caused "Shell for UNKNOWN_VIRTUAL_ENVIRONMENT already activated" errors on subsequent ``pipenv shell`` commands.  `#6220 <https://github.com/pypa/pipenv/issues/6220>`_
- Fix ``pipenv lock`` to properly apply default package version constraints when resolving dev-packages and other categories. When a package is constrained in the ``[packages]`` section (e.g., ``httpx = "==0.24.1"``), dev-packages that depend on it will now be constrained to compatible versions.  `#6347 <https://github.com/pypa/pipenv/issues/6347>`_
- Fix typo in ``get_constraints_from_deps`` where version string was incorrectly formatted using the entire dependency dict instead of the version string.  `#6354 <https://github.com/pypa/pipenv/issues/6354>`_
- Fix for PEP660 editable VCS dependencies not reinstalled correctly.  `#6362 <https://github.com/pypa/pipenv/issues/6362>`_
- Resolver errors now display clean, user-friendly messages instead of confusing stacktraces in non-verbose mode.  `#6388 <https://github.com/pypa/pipenv/issues/6388>`_
- Validate Python version when using ``--system`` flag.
  Previously, ``pipenv install --system --deploy`` would silently proceed even if the system Python version didn't match the ``python_version`` specified in Pipfile/Pipfile.lock.
  Now it properly raises a DeployException when the versions don't match.  `#6403 <https://github.com/pypa/pipenv/issues/6403>`_
- Fix editable package name being incorrectly parsed from test files in subdirectories.
  Previously, when installing an editable local package, pipenv would recursively search
  all subdirectories for ``setup.py`` files. This could cause a test file with a
  ``setup(name='foo')`` call to be incorrectly used as the package name. Now, ``setup.py``,
  ``setup.cfg``, and ``pyproject.toml`` are only checked in the root directory. Metadata
  files (``PKG-INFO``, ``METADATA``) are still searched in ``.egg-info`` and ``.dist-info``
  directories.

  Fixes #6409  `#6409 <https://github.com/pypa/pipenv/issues/6409>`_
- Fix ``pipenv check --quiet`` not working properly. The ``--quiet`` flag now
  correctly suppresses informational output and forces JSON output format for
  safety so that results can be parsed correctly.

  Fixes #6414  `#6414 <https://github.com/pypa/pipenv/issues/6414>`_
- Fix ``pipenv update --dev`` (and ``pipenv update --categories develop``) updating
  transitive dependencies in the ``develop`` section independently from the ``default``
  section. Now, any packages that appear in both ``default`` and ``develop`` will use
  the version from ``default``, ensuring consistent dependency versions between
  production and development environments.

  Fixes #6420  `#6420 <https://github.com/pypa/pipenv/issues/6420>`_
- Fix markers not being respected for file-based and VCS dependencies during resolution.
  Markers are now correctly included in the pip install line, allowing pipenv to skip
  resolution for dependencies whose markers don't match the current environment.  `#6431 <https://github.com/pypa/pipenv/issues/6431>`_
- Fix ``pipenv requirements --dev-only --from-pipfile`` to only include packages explicitly listed in ``dev-packages``, not packages from other categories that happen to also be transitive dependencies of dev packages.  `#6440 <https://github.com/pypa/pipenv/issues/6440>`_
- Fix ``pipenv update`` incorrectly marking all packages as modified when Pipfile contains version ranges (e.g., ``>=2.25.1``) instead of exact versions. The comparison now properly checks if the locked version satisfies the Pipfile specifier, rather than doing a string comparison. This significantly improves performance of ``pipenv update`` when no packages have actually been modified.  `#6454 <https://github.com/pypa/pipenv/issues/6454>`_
- Fix ``TypeError: cannot unpack non-iterable PermissionError object`` on Windows with Python 3.12+
  when removing read-only files (e.g., git pack files). The ``handle_remove_readonly`` error handler
  now properly handles both the deprecated ``onerror`` callback signature (tuple) and the new
  ``onexc`` callback signature (exception instance) introduced in Python 3.12.  `#6474 <https://github.com/pypa/pipenv/issues/6474>`_
- Fix benchmark CI job hanging by adding timeout and ``PIPENV_YES=1`` environment variable to prevent interactive prompts.  `#6477 <https://github.com/pypa/pipenv/issues/6477>`_
- Fix subprocess deadlock in resolver that could cause ``pipenv lock`` to hang indefinitely when the resolver subprocess writes large amounts of data to stdout. The fix reads stdout and stderr concurrently using threads, preventing pipe buffer deadlocks.  `#benchmark <https://github.com/pypa/pipenv/issues/benchmark>`_

Improved Documentation
----------------------

- Fix documentation that incorrectly referenced ``pipenv scan`` as a standalone command. The correct usage is ``pipenv check --scan``.  `#6396 <https://github.com/pypa/pipenv/issues/6396>`_

2025.1.3 (2025-12-09)
=====================
pipenv 2025.1.3 (2025-12-09)
============================


Bug Fixes
---------

- Fix TypeError when using pipenv with Python 3.9 target environments
  by adding ``from __future__ import annotations`` to files in
  ``pipenv/patched/pip`` that use Python 3.10+ type annotation syntax.  `#6448 <https://github.com/pypa/pipenv/issues/6448>`_

2025.1.1 (2025-12-05)
=====================
pipenv 2025.1.1 (2025-12-05)
============================


No significant changes.


2025.1.0 (2025-12-05)
=====================
pipenv 2025.1.0 (2025-12-05)
============================


Features & Improvements
-----------------------

- Vendor in pip 25.3 for dependency resolution.  `#6445 <https://github.com/pypa/pipenv/issues/6445>`_

2025.0.4 (2025-07-07)
=====================
Pipenv 2025.0.4 (2025-07-07)
============================


Bug Fixes
---------

- Significantly improved dependency resolution performance with ResolveLib 1.2.0 optimistic backjumping, intelligent caching system, and batch Pipfile operations. Added comprehensive benchmarking infrastructure to prevent performance regressions. Requirements imports are 60-80% faster for large files, complex resolutions are 10-30% faster, and repeated operations benefit from smart caching.  `#6419 <https://github.com/pypa/pipenv/issues/6419>`_
- Ensure the requested Python version is installed when it differs from the one used with Pipenv.  `#6425 <https://github.com/pypa/pipenv/issues/6425>`_
- Restored ignore compatibility finder patch to enable comprehensive cross-platform hash collection in lock files.  `#6426 <https://github.com/pypa/pipenv/issues/6426>`_

2025.0.3 (2025-05-29)
=====================
Pipenv 2025.0.3 (2025-05-29)
============================


Vendored Libraries
------------------

- Vendor in ``pip==25.1.1`` latest.  `#6400 <https://github.com/pypa/pipenv/issues/6400>`_

2025.0.2 (2025-05-02)
=====================
Pipenv 2025.0.2 (2025-05-02)
============================


Bug Fixes
---------

- Cleanup unused dependencies when upgrading packages.  `#6386 <https://github.com/pypa/pipenv/issues/6386>`_
- Fix for ``UnboundLocalError`` in ``ensure_python`` when ``SESSION_IS_INTERACTIVE=False``, using pyenv, and python version in Pipfile not available.  `#6389 <https://github.com/pypa/pipenv/issues/6389>`_


2025.0.1 (2025-04-24)
=====================
Pipenv 2025.0.1 (2025-04-24)
============================


Bug Fixes
---------

- Fix for broken import requirements in ``2025.0.0``  `#6385 <https://github.com/pypa/pipenv/issues/6385>`_



2025.0.0 (2025-04-24)
=====================
Pipenv 2025.0.0 (2025-04-24)
============================


Features & Improvements
-----------------------

- # Refactor pythonfinder for improved efficiency and PEP 514 support

  ## Summary
  This PR completely refactors the pythonfinder module to improve efficiency, reduce logical errors, and fix support for PEP 514 (Python registration in the Windows registry). The refactoring replaces the complex object hierarchy with a more modular, composition-based approach that is easier to maintain and extend.

  ## Motivation
  The original pythonfinder implementation had several issues:
  * Complex object wrapping with paths as objects, leading to excessive recursion
  * Tight coupling between classes making the code difficult to follow and maintain
  * Broken Windows registry support (PEP 514)
  * Performance issues due to redundant path scanning and inefficient caching

  ## Changes
  * **Architecture**: Replaced inheritance-heavy design with a composition-based approach using specialized finders
  * **Data Model**: Simplified the data model with a clean ``PythonInfo`` dataclass
  * **Windows Support**: Implemented proper PEP 514 support for Windows registry
  * **Performance**: Improved caching and reduced redundant operations
  * **Error Handling**: Added more specific exceptions and better error handling

  ## Features
  The refactored implementation continues to support all required features:
  * System and user PATH searches
  * pyenv installations
  * asdf installations
  * Windows registry (PEP 514) - now working correctly  `#6360 <https://github.com/pypa/pipenv/issues/6360>`_
- Almost finished with conversion off click echo/secho to rich console outputs.  `#6366 <https://github.com/pypa/pipenv/issues/6366>`_
- Make safety an optional dependency via extras

  - Removed vendored safety package from pipenv/patched
  - Added safety as an optional dependency via pipenv[safety]
  - Modified check.py to prompt for safety installation if not present
  - Safety installation will not modify user's Pipfile or lockfile  `#safety-extras <https://github.com/pypa/pipenv/issues/safety-extras>`_

Bug Fixes
---------

- Fix launching PowerShell on UNC paths  `#6322 <https://github.com/pypa/pipenv/issues/6322>`_
- Check if we need to upgrade a package in more than one category.  `#6361 <https://github.com/pypa/pipenv/issues/6361>`_
- Fix issue with default constraints not applying to other package categories.  `#6364 <https://github.com/pypa/pipenv/issues/6364>`_
- Fix for parsing and using the star specifier in install and update/upgrade commands.  `#6378 <https://github.com/pypa/pipenv/issues/6378>`_
- Fixed KeyError when installing packages with invalid Python version specifiers in their metadata.  `#6380 <https://github.com/pypa/pipenv/issues/6380>`_
- Fixed an issue with installing local packages that have spaces in their path names.  `#6381 <https://github.com/pypa/pipenv/issues/6381>`_
- # Improved virtualenv scripts path resolution

  ## Summary

  This PR refactors the logic for determining virtual environment script paths
  by leveraging ``sysconfig``'s built-in mechanisms. By removing
  platform-dependent logic, ``pipenv`` now offers enhanced compatibility with
  POSIX-like environments, including Cygwin and MinGW. The fix also mitigates
  execution inconsistencies in non-native Windows environments, improving
  portability across platforms.

  ## Motivation

  The original logic for determining the scripts path was unable to handle the
  deviations of MSYS2 MinGW CPython identifying as ``nt`` platform, yet using a
  POSIX ``{base}/bin`` path, instead of ``{base}/Scripts``.

  ## Changes

  Removed custom logic for determining virtualenv scripts path in favor of
  retrieving the basename of the path string returned by
  ``sysconfig.get_path('scripts')```.  `#6737 <https://github.com/pypa/pipenv/issues/6737>`_
- Update ``check`` command to support the new ``scan`` functionality
  ---------------------------------------------------------------

  The ``check`` command has been deprecated and will be unsupported beyond June 1, 2025.
  Instead of adding a separate ``scan`` command, we've updated the ``check`` command to include a ``--scan`` option.

  Key changes:
  - Added a ``--scan`` option to the ``check`` command to use the new scan functionality
  - Added a deprecation warning explaining that in future versions, ``check`` will run the scan command by default
  - Better temporary file handling using the ``tempfile`` module to ensure proper cleanup
  - More robust error handling

  Users are encouraged to start using the ``--scan`` option with the ``check`` command to prepare for the future change.
  This option requires users to obtain and configure an API key from https://pyup.io.  `#safety-command <https://github.com/pypa/pipenv/issues/safety-command>`_


2024.4.0 (2025-01-22)
=====================
Pipenv 2024.4.0 (2025-01-22)
============================


Bug Fixes
---------

- Running "pipenv shell" on MacOS in Powershell (pwsh) references incorrect Activate.ps1  `#6318 <https://github.com/pypa/pipenv/issues/6318>`_
- Fix repr(Shell)  `#6321 <https://github.com/pypa/pipenv/issues/6321>`_
- Fix incorrect path for 'pipenv shell'  `#6327 <https://github.com/pypa/pipenv/issues/6327>`_
- Fix license declaration for PyPI  `#6329 <https://github.com/pypa/pipenv/issues/6329>`_

Vendored Libraries
------------------

- Remove click.echo from exceptions.py  `#6216 <https://github.com/pypa/pipenv/issues/6216>`_

2024.4.0 (2024-11-05)
=====================
Pipenv 2024.4.0 (2024-11-05)
============================


Bug Fixes
---------

- Fix regression where ``--skip-lock --dev`` was incorrectly searching Lockfile categories ("default", "develop") instead of Pipfile categories ("packages", "dev-packages"), causing packages to not be found.  `#6304 <https://github.com/pypa/pipenv/issues/6304>`_
- Fix issue where pipenv install would unintentionally upgrade packages that had wildcard (*) specifiers in the Pipfile, even when locked versions existed and no upgrade was requested.  `#6306 <https://github.com/pypa/pipenv/issues/6306>`_
- Fix issue where modules could not be found  `#6307 <https://github.com/pypa/pipenv/issues/6307>`_

Vendored Libraries
------------------

- Vendor in ``pip==24.3.1``.  `#6292 <https://github.com/pypa/pipenv/issues/6292>`_
- Vendoring
  ---------
  * Update vendored dependencies:
    - importlib-metadata from 8.4.0 to 8.5.0
    - packaging from 24.0 to 24.1
    - tomli from 2.0.1 to 2.0.2
    - tomlkit from 0.12.4 to 0.13.2
    - zipp from 3.18.1 to 3.20.2  `#6293 <https://github.com/pypa/pipenv/issues/6293>`_

2024.3.1 (2024-10-30)
=====================

Bug Fixes
---------

- Fix the readthedocs.org build that has been failing and not updating our official docs at https://pipenv.pypa.io/en/latest/  `#6291 <https://github.com/pypa/pipenv/issues/6291>`_
- Fix regression of ``2024.3.0`` when using the ``--system`` flag without ``--deploy`` flag.  `#6295 <https://github.com/pypa/pipenv/issues/6295>`_
- - **Bugfix:** Fixed Regression with the ``pipenv update`` routine to allow for package upgrades without requiring an existing lockfile. This change improves the flexibility of the update process by determining which packages require updating and handling cases where the lockfile is absent or partially defined.
  - **Tests Added:** Comprehensive integration tests for the updated functionality, covering scenarios like updating packages without a lockfile, detecting modified entries, handling VCS changes, and verifying the correct application of extras during installation.  `#6299 <https://github.com/pypa/pipenv/issues/6299>`_

2024.3.0 (2024-10-29)
=====================

Bug Fixes
---------

- Fix dependency resolution edge cases and versioning constraints handling:
  * Allow JSON format options for ``--reverse`` dependency graph output matching pipdeptree
  * Improve installation and upgrade routines to better handle dependencies
  * Add ability to specify json output as pipdeptree does
  * Add more consistent handling of VCS dependencies and references
  * Fix synchronization of development and default dependencies during updates
  * Ensure proper propagation of version constraints during updates
  * Fix handling of ``~=`` and other version specifiers during updates

  Key Changes:
  * Improved reverse dependency analysis to catch conflicts earlier in resolution
  * Better handling of VCS package lock data, preserving refs and subdirectories
  * Fixed issue where VCS references could be lost in lock file when installed via commit hash
  * Better handling of pipfile categories during installation and updates
  * Corrected logic for development dependency resolution and constraint propagation
  * Improved validation and preservation of version specifiers during updates

  This improves stability when working with complex dependency trees and version constraints.  `#6281 <https://github.com/pypa/pipenv/issues/6281>`_
- Fixes issue with --skip-lock not providing pip the proper package specifier when version was a string (issue did not impact dict with version key).  `#6288 <https://github.com/pypa/pipenv/issues/6288>`_

2024.2.0 (2024-10-22)
=====================

Bug Fixes
---------

- Features & Bug Fixes
  -------------------
  - Refactored and simplified install routines, improving maintainability and reliability (#6276)
    - Split install logic into smaller, focused functions.
    - Eliminated Pipfile caching for now to prevent bugs and reduce complexity.
    - Fixed edge cases with package category selection.
    - Improved handling of VCS dependencies during updates, fixing when ref is a revision and not a branch.

  - Enhanced VCS URL handling with better environment variable support (#6276)
    - More reliable expansion of environment variables in Git URLs.
    - Better handling of authentication components in VCS URLs.
    - Improved error messaging for missing environment variables.
    - Fixed issue where Git reference could be dropped during relock.  `#6276 <https://github.com/pypa/pipenv/issues/6276>`_

Vendored Libraries
------------------

- Update pipdeptree to version 2.23.4  `#6275 <https://github.com/pypa/pipenv/issues/6275>`_

2024.1.0 (2024-09-29)
=====================

Features & Improvements
-----------------------

- Upgrade from ``pip==24.0`` to ``pip==24.1.2``.  `#6253 <https://github.com/pypa/pipenv/issues/6253>`_

Bug Fixes
---------

- Fixes regression in lock file generation that caused environment variable references (e.g., ${GIT_PASSWORD}) in VCS URLs to be stripped out. This restores the ability to use credential placeholders in version control system URLs.  `#6256 <https://github.com/pypa/pipenv/issues/6256>`_

2024.0.3 (2024-09-22)
=====================

Bug Fixes
---------

- Disable ``ResourceWarning`` warning for temporary files that are cleaned on program exit.  `#6151 <https://github.com/pypa/pipenv/issues/6151>`_
- Fixed package sorting when installing a package with extras.  `#6171 <https://github.com/pypa/pipenv/issues/6171>`_
- Fixed ``pipenv uninstall --all`` failing when the virtual environment no longer exists.  `#6185 <https://github.com/pypa/pipenv/issues/6185>`_
- Fix issue where installing a vcs dependency using pipenv CLI yielded the wrong Pipfile entry such that it could not lock.  `#6242 <https://github.com/pypa/pipenv/issues/6242>`_
- Fix report that pipenv requires ``packaging>=22`` on some systems by setting it as a dependency.  `#6243 <https://github.com/pypa/pipenv/issues/6243>`_

2024.0.2 (2024-09-13)
=====================

Features & Improvements
-----------------------

- Initial support for python3.13  `#6240 <https://github.com/pypa/pipenv/issues/6240>`_

Bug Fixes
---------

- Fix bump version in CI/CD pipeline  `#6177 <https://github.com/pypa/pipenv/issues/6177>`_
- Swap old_version and new_version in pipenv update --outdated output.  `#6179 <https://github.com/pypa/pipenv/issues/6179>`_
- Update shell detection to only check the end of the command used.  `#6197 <https://github.com/pypa/pipenv/issues/6197>`_
- Fix loading dot env twice #6198  `#6202 <https://github.com/pypa/pipenv/issues/6202>`_
- Solve issue with quiet lock not writing the lock file #6207.  `#6207 <https://github.com/pypa/pipenv/issues/6207>`_
- Fix regression introduced with the "smarter uninstall" PR.  Uninstall ``--all`` should not clear the Pipfile entries.  `#6209 <https://github.com/pypa/pipenv/issues/6209>`_
- Fixed regression where all local file installations were incorrectly treated as editable. Ensure that local file installations are explicitly marked as editable in both Pipfile and Pipfile.lock entries if editable installation is desired.  `#6222 <https://github.com/pypa/pipenv/issues/6222>`_
- Corrected behavior of ``pipenv install --skip-lock`` after behavioral install refactor introduced regression.  No Pipfile.lock is generated with this fix and installation of vcs no longer fails with revision missing error.  `#6225 <https://github.com/pypa/pipenv/issues/6225>`_
- Fix for Windows on ARM missing distlib binaries in pyproject.toml  `#6240 <https://github.com/pypa/pipenv/issues/6240>`_

Vendored Libraries
------------------

- Clean up usage of click styling from exceptions, shell and virtualenv  `#6178 <https://github.com/pypa/pipenv/issues/6178>`_
- Remove click.echo from pipenv/cli  `#6182 <https://github.com/pypa/pipenv/issues/6182>`_
- Remove click.echo from exceptions.py  `#6216 <https://github.com/pypa/pipenv/issues/6216>`_
- Update importlib-metadata to 8.4.0  `#6235 <https://github.com/pypa/pipenv/issues/6235>`_

2024.0.1 (2024-06-11)
=====================

No significant changes.


2024.0.0 (2024-06-06)
=====================

Features & Improvements
-----------------------

- Supply any ``--extra-pip-args`` also in the resolver steps.  `#6006 <https://github.com/pypa/pipenv/issues/6006>`_
- The ``uninstall`` command now does the inverse of ``upgrade`` which means it no longer invokes a full ``lock`` cycle which was problematic for projects with many dependencies.  `#6029 <https://github.com/pypa/pipenv/issues/6029>`_
- The ``pipenv requirements`` subcommand now supports the ``--from-pipfile`` flag. When this flag is used, the requirements file will only include the packages explicitly listed in the Pipfile, excluding any sub-packages.  `#6156 <https://github.com/pypa/pipenv/issues/6156>`_

Behavior Changes
----------------

- ``pipenv==2024.0.0`` denotes the first major release of our semver strategy.
  As much requested, the ``install`` no longer does a complete lock operation.  Instead ``install`` follows the same code path as pipenv update (which is upgrade + sync).
  This is what most new users expect the behavior to be; it is a behavioral change, a necessary one to make the tool more usable.
  Remember that complete lock resolution can be invoked with ``pipenv lock`` just as before.  `#6098 <https://github.com/pypa/pipenv/issues/6098>`_

Bug Fixes
---------

- Fix a bug that passes pipenv check command if Pipfile.lock not exist  `#6126 <https://github.com/pypa/pipenv/issues/6126>`_
- Fix a bug that vcs subdependencies were locked without their subdirectory fragment if they had one  `#6136 <https://github.com/pypa/pipenv/issues/6136>`_
- ``pipenv`` converts off ``pkg_resources`` API usages.  This necessitated also vendoring in:
  * latest ``pipdeptree==2.18.1`` which also converted off ``pkg_resources``
  * ``importlib-metadata==7.1.0`` to continue supporting python 3.8 and 3.9
  * ``packaging==24.0`` since the packaging we were utilizing in pip's _vendor was insufficient for this conversion.  `#6139 <https://github.com/pypa/pipenv/issues/6139>`_
- Pipenv only supports absolute python version. If the user specifies a Python version with inequality signs like >=3.12, <3.12 in the [requires] field, the code has been modified to explicitly express in an error log that absolute versioning must be used.  `#6164 <https://github.com/pypa/pipenv/issues/6164>`_

Vendored Libraries
------------------

- Vendor in ``pip==24.0``  `#6117 <https://github.com/pypa/pipenv/issues/6117>`_
- Spring 2024 Vendoring includes:
  * ``click-didyoumean==0.3.1``
  * ``expect==4.9.0``
  * ``pipdeptree==2.16.2``
  * ``python-dotenv==1.0.1``
  * ``ruamel.yaml==0.18.6``
  * ``shellingham==1.5.4``
  * ``tomlkit==0.12.4``  `#6118 <https://github.com/pypa/pipenv/issues/6118>`_


2023.12.1 (2024-02-04)
======================

Bug Fixes
---------

- Remove debug print statements that should not have made it into the last release.  `#6079 <https://github.com/pypa/pipenv/issues/6079>`_

2023.12.0 (2024-02-01)
======================
Pipenv 2023.12.0 (2024-02-01)
=============================


Bug Fixes
---------

- Removal of pydantic from pythonfinder and pipenv; reduced complexity of pythonfinder pathlib usage (avoid posix conversions).  `#6065 <https://github.com/pypa/pipenv/issues/6065>`_
- Adjusted logic which assumed any file, path or VCS install should be considered editable.  Instead relies on the user specified editable flag to mark requirement as editable install.  `#6069 <https://github.com/pypa/pipenv/issues/6069>`_
- Remove logic that treats ``CI`` variable to use ``do_run_nt`` shell logic, as the original reasons for that patch were no longer valid.  `#6072 <https://github.com/pypa/pipenv/issues/6072>`_

2023.11.17 (2024-01-21)
=======================
Pipenv 2023.11.17 (2024-01-21)
==============================


Bug Fixes
---------

- Add markers to Pipfile when parsing requirements.txt  `#6008 <https://github.com/pypa/pipenv/issues/6008>`_
- Fix KeyError when using a source without a name in Pipfile  `#6021 <https://github.com/pypa/pipenv/issues/6021>`_
- Fix a bug with locking projects that contains packages with non canonical names from private indexes  `#6056 <https://github.com/pypa/pipenv/issues/6056>`_

Vendored Libraries
------------------

- Update vendored tomlkit to ``0.12.3``  `#6024 <https://github.com/pypa/pipenv/issues/6024>`_
- Bump version of pipdeptree to 0.13.2  `#6055 <https://github.com/pypa/pipenv/issues/6055>`_

2023.11.15 (2023-11-15)
=======================
Pipenv 2023.11.15 (2023-11-15)
==============================


Bug Fixes
---------

- Fix regression with path installs on most recent release ``2023.11.14``  `#6017 <https://github.com/pypa/pipenv/issues/6017>`_


2023.11.14 (2023-11-14)
=======================

Behavior Changes
----------------

- pipenv now ignores existing venv dir when ``PIPENV_VENV_IN_PROJECT`` is false.  `#6009 <https://github.com/pypa/pipenv/issues/6009>`_

Bug Fixes
---------

- Assume the vcs and direct URL installs need to be reinstalled.  `#5936 <https://github.com/pypa/pipenv/issues/5936>`_
- Pass through pipfile index urls when creating https session so that keyring fully works  `#5994 <https://github.com/pypa/pipenv/issues/5994>`_
- Fix Using dependencies from a URL fails on Windows.  `#6011 <https://github.com/pypa/pipenv/issues/6011>`_


2023.10.24 (2023-10-24)
=======================

Features & Improvements
-----------------------

- Officially support python 3.12  `#5987 <https://github.com/pypa/pipenv/issues/5987>`_

Bug Fixes
---------

- Additional safety check in _fold_markers logic that affected some lock resolutions in prior release.  `#5988 <https://github.com/pypa/pipenv/issues/5988>`_

Vendored Libraries
------------------

- Update vendored versions of:
    * click==8.1.7
    * markupsafe==2.1.3
    * pydantic==1.10.13
    * pythonfinder==2.0.6
    * ruamel.yaml==0.17.39
    * shellingham==1.5.3
    * tomlkit==0.12.1  `#5986 <https://github.com/pypa/pipenv/issues/5986>`_
- Update vendored pip to ``23.3.1``  `#5991 <https://github.com/pypa/pipenv/issues/5991>`_


2023.10.20 (2023-10-20)
=======================

Features & Improvements
-----------------------

- Add quiet option to pipenv shell, hiding "Launching subshell in virtual environment..."  `#5966 <https://github.com/pypa/pipenv/issues/5966>`_
- Vendor in pip==23.3 which includes updates to certifi, urllib3, and  adds truststore among other improvements.  `#5979 <https://github.com/pypa/pipenv/issues/5979>`_

Behavior Changes
----------------

- Change ``--py`` to use ``print`` preventing insertion of newline characters  `#5969 <https://github.com/pypa/pipenv/issues/5969>`_

Vendored Libraries
------------------

- Drop pep517 - as it is no longer used.  `#5970 <https://github.com/pypa/pipenv/issues/5970>`_

Removals and Deprecations
-------------------------

- Drop support for Python 3.7  `#5879 <https://github.com/pypa/pipenv/issues/5879>`_


2023.10.3 (2023-10-03)
======================

Bug Fixes
---------

- Eveb better handling of vcs branch references that contain special characters.  `#5934 <https://github.com/pypa/pipenv/issues/5934>`_
- Bump certifi from 2023.5.7 to 2023.7.22 in /examples to address a security vulnerability  `#5941 <https://github.com/pypa/pipenv/issues/5941>`_


2023.9.8 (2023-09-08)
=====================

Bug Fixes
---------

- ignore_compatibility was supposed to default to False (except for hash collection)  `#5926 <https://github.com/pypa/pipenv/issues/5926>`_


2023.9.7 (2023-09-07)
=====================

Features & Improvements
-----------------------

- Updates build to use exclusively ``pyproject.toml``
  ---------------------------------------------------

  Modernizes the build process by consolidating all of ``setuptools`` metadata within ``pyproject.toml`` and removing deprecated ``setup.cfg`` and ``setup.py``.  `#5837 <https://github.com/pypa/pipenv/issues/5837>`_

Bug Fixes
---------

- Restore the ignore compatibility finder pip patch to resolve issues collecting hashes from google artifact registry (and possibly others).  `#5887 <https://github.com/pypa/pipenv/issues/5887>`_
- Handle case better where setup.py name is referencing a variable that is a string while encouraging folks to migrate their projects to pyproject.toml  `#5905 <https://github.com/pypa/pipenv/issues/5905>`_
- Better handling of local file install edge cases; handle local file extras.  `#5919 <https://github.com/pypa/pipenv/issues/5919>`_
- Include the Pipfile markers in the install phase when using ``--skip-lock``.  `#5920 <https://github.com/pypa/pipenv/issues/5920>`_
- Fallback to default vcs ref when no ref is supplied.
  More proactively determine package name from the pip line where possible, fallback to the existing file scanning logics when unable to determine name.  `#5921 <https://github.com/pypa/pipenv/issues/5921>`_


# 2023.9.1 (2023-09-01)

## Features & Improvements

- Top level Pipfile sys_platform markers should be transitive; adds top level platform_machine entries that are also transitive.   Marker entries continue to operate the same as before.  [#5892](https://github.com/pypa/pipenv/issues/5892)

## Bug Fixes

- Apply patch for install_search_all_sources = True functionality.  [#5895](https://github.com/pypa/pipenv/issues/5895)
- Relative paths improvements for editable installs.  [#5896](https://github.com/pypa/pipenv/issues/5896)
- Set log level in resolver to WARN when verbose is not passed.  [#5897](https://github.com/pypa/pipenv/issues/5897)
- Handle more variations in private index html to improve hash collection.  [#5898](https://github.com/pypa/pipenv/issues/5898)

# 2023.8.28 (2023-08-28)

## Bug Fixes

- Revert change that caused the credentials in source url issue.  [#5878](https://github.com/pypa/pipenv/issues/5878)
- Do not treat named requirements as file installs just becacuse a match path exists; better handling of editable keyword for local file installs.
  Handle additional edge cases in the setup.py ast parser logic for trying to determine local install package name.  [#5885](https://github.com/pypa/pipenv/issues/5885)

# 2023.8.26 (2023-08-26)

## Bug Fixes

- Additional property caching to avoid duplication of sources in the resolver.  [#5863](https://github.com/pypa/pipenv/issues/5863)
- Fix recent regressions with local/editable file installs.  [#5870](https://github.com/pypa/pipenv/issues/5870)
- Fixes the vcs subdirectory fragments regression; fixes sys_platform markers regression.  [#5871](https://github.com/pypa/pipenv/issues/5871)
- Fix regression that caused printing non-printable ascii characters  when help was called.  [#5872](https://github.com/pypa/pipenv/issues/5872)

# 2023.8.25 (2023-08-25)

## Bug Fixes

- Fix regression of hash collection when downloading package from private indexes when the hash is not found in the index href url fragment.  [#5866](https://github.com/pypa/pipenv/issues/5866)

# 2023.8.23 (2023-08-22)

## Bug Fixes

- More gracefully handle @ symbols in vcs URLs to address recent regression with vcs URLs.  [#5849](https://github.com/pypa/pipenv/issues/5849)

# 2023.8.22 (2023-08-22)

## Bug Fixes

- Fix regression with `ssh://` vcs URLs introduced in `2023.8.21` whereby ssh vcs URLs are expected to have at least one `@` symbol.  [#5846](https://github.com/pypa/pipenv/issues/5846)

# 2023.8.21 (2023-08-21)

## Bug Fixes

- Add back some relevant caching to increase performance after the major refactor released with `2023.8.19`  [#5841](https://github.com/pypa/pipenv/issues/5841)
- Fix some edge cases around vcs dependencies without a ref, and older Pipfile/lockfile formats.  [#5843](https://github.com/pypa/pipenv/issues/5843)

## Vendored Libraries

- Remove unused command line interface for vendored packages.  [#5840](https://github.com/pypa/pipenv/issues/5840)

# 2023.8.20 (2023-08-20)

## Bug Fixes

- Fix the expected output of the `version` command.  [#5838](https://github.com/pypa/pipenv/issues/5838)

# 2023.8.19 (2023-08-19)

## Features & Improvements

- The `--categories` option now works with requirements.txt file.  [#5722](https://github.com/pypa/pipenv/issues/5722)

## Bug Fixes

- Drop requirementslib for managing pip lines and InstallRequirements, bring remaining requirementslib functionality into pipenv.
  Fixes numerous reports about extras installs with vcs and file installs; format pip lines correctly to not generate deprecation warnings.  [#5793](https://github.com/pypa/pipenv/issues/5793)

## Vendored Libraries

- Update pip 23.2 -> 23.2.1  [#5822](https://github.com/pypa/pipenv/issues/5822)

## Improved Documentation

- Added documentation on how to move or rename a project directory  [#5129](https://github.com/pypa/pipenv/issues/5129)

## Removals and Deprecations

- The `--skip-lock` flag which was deprecated, has now been removed to unblock modernizing the pipenv resolver code.  [#5805](https://github.com/pypa/pipenv/issues/5805)

# 2023.7.23 (2023-07-23)

## Features & Improvements

- Upgrades `pip==23.2` which includes everything from the pip changelog.  Drops the "install_compatatability_finder" pip internals patch.  [#5808](https://github.com/pypa/pipenv/issues/5808)

## Bug Fixes

- Fix issue parsing some Pipfiles with separate packages.\<pkg> sections (tomlkit OutOfOrderTableProxy)  [#5794](https://github.com/pypa/pipenv/issues/5794)
- Fix all ruff linter warnings  [#5807](https://github.com/pypa/pipenv/issues/5807)
- Restore running Resolver in sub-process using the project python by default; maintains ability to run directly by setting `PIPENV_RESOLVER_PARENT_PYTHON` environment variable to 1 (useful for internal debugging).  [#5809](https://github.com/pypa/pipenv/issues/5809)
- Fix error when a Windows path begins with a '' with `pythonfinder==2.0.5`.  [#5812](https://github.com/pypa/pipenv/issues/5812)

## Vendored Libraries

- Remove usage of click.secho in some modules.  [#5804](https://github.com/pypa/pipenv/issues/5804)

2023.7.11 (2023-07-11)

## Bug Fixes

- Invoke the resolver in the same process as pipenv rather than utilizing subprocess.  [#5787](https://github.com/pypa/pipenv/issues/5787)
- Fix regression markers being included as None/null in requirements command.  [#5788](https://github.com/pypa/pipenv/issues/5788)

# 2023.7.9 (2023-07-09)

## Bug Fixes

- Drop the --keep-outdated flag and --selective-upgrade flags that have been deprecated in favor of update/upgrade commands.  [#5730](https://github.com/pypa/pipenv/issues/5730)
- Fix regressions in the `requirements` command related to standard index extras and handling of local file requirements.  [#5784](https://github.com/pypa/pipenv/issues/5784)

# 2023.7.4 (2023-07-04)

## Bug Fixes

- Fixes regression on Pipfile requirements syntax. Ensure default operator is provided to requirement lib to avoid crash.  [#5765](https://github.com/pypa/pipenv/issues/5765)
- Ensure hashes included in a generated requirements file are after any markers.  [#5777](https://github.com/pypa/pipenv/issues/5777)

# 2023.7.3 (2023-07-02)

## Bug Fixes

- Fix regression with `--system` flag usage.  [#5773](https://github.com/pypa/pipenv/issues/5773)

# 2023.7.1 (2023-07-01)

## Bug Fixes

- Patch `_get_requests_session` method to consider `PIP_CLIENT_CERT` value when present.  [#5746](https://github.com/pypa/pipenv/issues/5746)
- Fix regression in `requirements` command that was causing package installs after upgrade to `requirementslib==3.0.0`.  [#5755](https://github.com/pypa/pipenv/issues/5755)
- Fix `error: invalid command 'egg_info'` edge case with requirementslib 3.0.0.  It exposed pipenv resolver sometimes was using a different python than expected.  [#5760](https://github.com/pypa/pipenv/issues/5760)
- Fix issue in requirementslib 3.0.0 where dependencies defined in pyproject.toml were not being included in the lock file.  [#5766](https://github.com/pypa/pipenv/issues/5766)

## Removals and Deprecations

- Bump dparse to 0.6.3  [#5750](https://github.com/pypa/pipenv/issues/5750)

# 2023.6.26 (2023-06-26)

## Improved Documentation

- Add missing environment variable descriptions back to documentation  [#missing_env_var_desc](https://github.com/pypa/pipenv/issues/missing_env_var_desc)

# 2023.6.18 (2023-06-18)

## Bug Fixes

- Fixes resolver to only consider the default index for packages when a secondary index is not specified.  This brings the code into alignment with stated assumptions about index restricted packages behavior of `pipenv`.  [#5737](https://github.com/pypa/pipenv/issues/5737)

## Removals and Deprecations

- Deprecation of `--skip-lock` flag as it bypasses the security benefits of pipenv.  Plus it lacks proper deterministic support of installation from multiple package indexes.  [#5737](https://github.com/pypa/pipenv/issues/5737)

# 2023.6.12 (2023-06-11)

## Bug Fixes

- Remove the `sys.path` modifications and as a result fixes keyring support.  [#5719](https://github.com/pypa/pipenv/issues/5719)

# 2023.6.11 (2023-06-11)

## Vendored Libraries

- Upgrades to `pipdeptree==2.8.0` which fixes edge cases of the `pipenv graph` command.  [#5720](https://github.com/pypa/pipenv/issues/5720)

# 2023.6.2 (2023-06-02)

## Features & Improvements

- Resolver performance: package sources following PEP 503 will leverage package hashes from the URL fragment, without downloading the package.  [#5701](https://github.com/pypa/pipenv/issues/5701)

## Bug Fixes

- Improve regex for python versions to handle hidden paths; handle relative paths to python better as well.  [#4588](https://github.com/pypa/pipenv/issues/4588)
- Update `pythonfinder==2.0.4` with fix for "RecursionError: maximum recursion depth exceeded".  [#5709](https://github.com/pypa/pipenv/issues/5709)

## Vendored Libraries

- Drop old vendored toml library. Use stdlib tomllib or tomli instead.  [#5678](https://github.com/pypa/pipenv/issues/5678)
- Drop vendored library cerberus. This isn't actually used by pipenv.  [#5699](https://github.com/pypa/pipenv/issues/5699)

# 2023.5.19 (2023-05-19)

## Bug Fixes

- Consider `--index` argument in `update` and `upgrade` commands.  [#5692](https://github.com/pypa/pipenv/issues/5692)

## Vendored Libraries

- Upgrade `pythonfinder==2.0.0` which also brings in `pydantic==1.10.7`.  [#5677](https://github.com/pypa/pipenv/issues/5677)

# 2023.4.29 (2023-04-29)

## Vendored Libraries

- Vendor in `pip==23.1.2` latest.  [#5671](https://github.com/pypa/pipenv/issues/5671)
- Vendor in `requirementslib==2.3.0` which drops usage of `vistir`.  [#5672](https://github.com/pypa/pipenv/issues/5672)

# 2023.4.20 (2023-04-20)

## Features & Improvements

- Checks environment variable `PIP_TRUSTED_HOSTS` when evaluating an
  index specified at the command line when adding to `Pipfile`.

  For example, this command line

  ```
  PIP_TRUSTED_HOSTS=internal.mycompany.com pipenv install pypkg --index=https://internal.mycompany.com/pypi/simple
  ```

  will add the following to the `Pipfile`:

  ```
  [[source]]
  url = 'https://internal.mycompany.com/pypi/simple'
  verify_ssl = false
  name = 'Internalmycompany'

  [packages]
  pypkg = {version="*", index="Internalmycompany"}
  ```

  This allows users with private indexes to add them to `Pipfile`
  initially from command line with correct permissions using environment
  variable `PIP_TRUSTED_HOSTS`.  [#5572](https://github.com/pypa/pipenv/issues/5572)

- Vendor in the updates, upgrades and fixes provided by `pip==23.1`.  [#5655](https://github.com/pypa/pipenv/issues/5655)

- Replace flake8 and isort with [ruff](https://beta.ruff.rs).  [#ruff](https://github.com/pypa/pipenv/issues/ruff)

## Bug Fixes

- Fix regression with `--skip-lock` option with `install` command.  [#5653](https://github.com/pypa/pipenv/issues/5653)

## Vendored Libraries

- Vendor in latest `python-dotenv==1.0.0`  [#5656](https://github.com/pypa/pipenv/issues/5656)
- Vendor in latest available dependencies:  `attrs==23.1.0` `click-didyoumean==0.3.0` `click==8.1.3` `markupsafe==2.1.2` `pipdeptree==2.7.0` `shellingham==1.5.0.post1` `tomlkit==0.11.7`  [#5657](https://github.com/pypa/pipenv/issues/5657)
- Vendor in latest `requirementslib==2.2.5` which includes updates for pip 23.1  [#5659](https://github.com/pypa/pipenv/issues/5659)

## Improved Documentation

- Made documentation clear about tilde-equals operator for package versions.  [#5594](https://github.com/pypa/pipenv/issues/5594)

# 2023.3.20 (2023-03-19)

No significant changes.

# 2023.3.18 (2023-03-19)

## Bug Fixes

- Fix import error in virtualenv utility for creating new environments caused by `2023.3.18` release.  [#5636](https://github.com/pypa/pipenv/issues/5636)

# 2023.3.18 (2023-03-18)

## Features & Improvements

- Provide a more powerful solution than `--keep-outdated` and `--selective-upgrade` which are deprecated for removal.
  Introducing the `pipenv upgrade` command which takes the same package specifiers as `pipenv install` and
  updates the `Pipfile` and `Pipfile.lock` with a valid lock resolution that only effects the specified packages and their dependencies.
  Additionally, the `pipenv update` command has been updated to use the `pipenv upgrade` routine when packages are provided, which will install sync the new lock file as well.  [#5617](https://github.com/pypa/pipenv/issues/5617)

## Vendored Libraries

- Bump vistir to 0.8.0, requirementslib to 2.2.4.  [#5635](https://github.com/pypa/pipenv/issues/5635)

# 2023.2.18 (2023-02-18)

## Features & Improvements

- `pipenv` now reads the system `pip.conf` or `pip.ini` file in order to determine pre-defined indexes to use for package resolution and installation.  [#5297](https://github.com/pypa/pipenv/issues/5297)
- Behavior change for `pipenv check` now checks the default packages group of the lockfile.
  Specifying `--categories` to override which categories to check against.
  Pass `--use-installed` to get the prior behavior of checking the packages actually installed into the environment.  [#5600](https://github.com/pypa/pipenv/issues/5600)

## Bug Fixes

- Fix regression with detection of `CI` env variable being set to something other than a truthy value.  [#5554](https://github.com/pypa/pipenv/issues/5554)
- Fix `--categories` argument inconsistency between requirements command and install/sync by allowing comma separated values or spaces.  [#5570](https://github.com/pypa/pipenv/issues/5570)
- Use Nushell overlays when running `pipenv shell`.  [#5603](https://github.com/pypa/pipenv/issues/5603)

## Vendored Libraries

- Vendor in the `pip==23.0` release.  [#5586](https://github.com/pypa/pipenv/issues/5586)
- Vendor in `pip==23.0.1` minor pt release.  Updates `pythonfinder==1.3.2`.  [#5614](https://github.com/pypa/pipenv/issues/5614)

## Improved Documentation

- Make some improvements to the contributing guide.  [#5611](https://github.com/pypa/pipenv/issues/5611)

# 2023.2.4 (2023-02-04)

## Bug Fixes

- Fix overwriting of output in verbose mode  [#5530](https://github.com/pypa/pipenv/issues/5530)
- Fix for resolution error when direct url includes an extras.  [#5536](https://github.com/pypa/pipenv/issues/5536)

## Removals and Deprecations

- Remove pytest-pypi package since it's not used anymore  [#5556](https://github.com/pypa/pipenv/issues/5556)
- Remove deprecated --three flag from the CLI.  [#5576](https://github.com/pypa/pipenv/issues/5576)

# 2022.12.19 (2022-12-19)

## Bug Fixes

- Fix for `requirementslib` hanging during install of remote wheels files.  [#5546](https://github.com/pypa/pipenv/issues/5546)

# 2022.12.17 (2022-12-17)

## Bug Fixes

- virtualenv creation no longer uses `--creator=venv` by default; introduced two environment variables:
  `PIPENV_VIRTUALENV_CREATOR` -- May be specified to instruct virtualenv which `--creator=` to use.
  `PIPENV_VIRTUALENV_COPIES` -- When specified as truthy, instructs virtualenv to not use symlinks.  [#5477](https://github.com/pypa/pipenv/issues/5477)
- Fix regression where `path` is not propagated to the `Pipfile.lock`.  [#5479](https://github.com/pypa/pipenv/issues/5479)
- Solve issue where null markers were getting added to lock file when extras were provided.  [#5486](https://github.com/pypa/pipenv/issues/5486)
- Fix: `update --outdated` raises NonExistentKey with outdated dev packages  [#5540](https://github.com/pypa/pipenv/issues/5540)

## Vendored Libraries

- Vendor in `pip==22.3.1` which is currently the latest version of `pip`.  [#5520](https://github.com/pypa/pipenv/issues/5520)
- - Bump version of requirementslib to 2.2.1
  - Bump version of vistir to 0.7.5
  - Bump version of colorama to 0.4.6  [#5522](https://github.com/pypa/pipenv/issues/5522)
- Bump plette version to 0.4.4  [#5539](https://github.com/pypa/pipenv/issues/5539)

# 2022.11.30 (2022-11-30)

## Bug Fixes

- Fix regression: pipenv does not sync indexes to lockfile.  [#5508](https://github.com/pypa/pipenv/issues/5508)

# 2022.11.25 (2022-11-24)

## Bug Fixes

- Solving issue where `pipenv check` command has been broken in the published wheel distribution.  [#5493](https://github.com/pypa/pipenv/issues/5493)

# 2022.11.24 (2022-11-24)

## Bug Fixes

- Stop building universal wheels since Python 2 is no longer supported.  [#5496](https://github.com/pypa/pipenv/issues/5496)

# 2022.11.23 (2022-11-23)

## Features & Improvements

- Find nushell activate scripts.  [#5470](https://github.com/pypa/pipenv/issues/5470)

## Vendored Libraries

- - Drop unused code from cerberus
  - Drop unused module wheel  [#5467](https://github.com/pypa/pipenv/issues/5467)
- - Replace yaspin spinner with rich spinner.
  - Bump vistir version to 0.7.4  [#5468](https://github.com/pypa/pipenv/issues/5468)
- Bump version of requirementslib to 2.2.0
  Drop yaspin which is no longer used.
  Bump vistir to version 0.7.4
  Remove parse.
  Remove termcolor.
  Remove idna.  [#5481](https://github.com/pypa/pipenv/issues/5481)

# 2022.11.11 (2022-11-11)

## Bug Fixes

- Fix regression of lock generation that caused the keep-outdated behavior to be default.  [#5456](https://github.com/pypa/pipenv/issues/5456)

# 2022.11.5 (2022-11-05)

## Bug Fixes

- Rollback the change in version of `colorama` due to regressions in core functionality.  [#5459](https://github.com/pypa/pipenv/issues/5459)

# 2022.11.4 (2022-11-04)

## Features & Improvements

- Allow pipenv settings to be explicitly disabled more easily by assigning to the environment variable a falsy value.  [#5451](https://github.com/pypa/pipenv/issues/5451)

## Bug Fixes

- Provide an install iteration per index when `install_search_all_sources` is `false` (default behavior).
  This fixes regression where install phase was using unexpected index after updating `pip==22.3`  [#5444](https://github.com/pypa/pipenv/issues/5444)

## Vendored Libraries

- Drop tomli, which is not used anymore.
  Bump attrs version see #5449.
  Drop distlib, colorama and platformdirs - use the ones from pip.\_vendor.  [#5450](https://github.com/pypa/pipenv/issues/5450)

# 2022.10.25 (2022-10-25)

## Features & Improvements

- Add support to export requirements file for a specified set of categories.  [#5431](https://github.com/pypa/pipenv/issues/5431)

## Vendored Libraries

- Remove appdirs.py in favor of platformdirs.  [#5420](https://github.com/pypa/pipenv/issues/5420)

## Removals and Deprecations

- Remove usage of vistir.cmdparse in favor of pipenv.cmdparse  [#5419](https://github.com/pypa/pipenv/issues/5419)

# 2022.10.12 (2022-10-12)

## Improved Documentation

- Update pipenv docs for with example for callabale package functions in Pipfile scripts  [#5396](https://github.com/pypa/pipenv/issues/5396)

# 2022.10.11 (2022-10-11)

## Bug Fixes

- Revert decision to change the default isolation level because it caused problems with existing workflows; solution is to recommend users that have issues requiring pre-requisites to pass --extra-pip-args="--no-build-isolation" in their install or sync commands.  [#5399](https://github.com/pypa/pipenv/issues/5399)

# 2022.10.10 (2022-10-10)

## Features & Improvements

- Add ability for callable scripts in Pipfile under \[scripts\]. Callables can now be added like: `<pathed.module>:<func>` and can also take arguments. For example: `func = {call = "package.module:func('arg1', 'arg2')"}` then this can be activated in the shell with `pipenv run func`  [#5294](https://github.com/pypa/pipenv/issues/5294)

## Bug Fixes

- Fixes regression from `2022.10.9` where `Pipfile` with `pipenv` section began generating new hash,
  and also fix regression where lock phase did not update the hash value.  [#5394](https://github.com/pypa/pipenv/issues/5394)

# 2022.10.9 (2022-10-09)

## Behavior Changes

- New pipfiles show python_full_version under \[requires\] if specified. Previously creating a new pipenv project would only specify in the Pipfile the major and minor version, i.e. "python_version = 3.7". Now if you create a new project with a fully named python version it will record both in the Pipfile. So: "python_version = 3.7" and "python_full_version = 3.7.2"  [#5345](https://github.com/pypa/pipenv/issues/5345)

## Relates to dev process changes

- Silence majority of pytest.mark warnings by registering custom marks. Can view a list of custom marks by running `pipenv run pytest --markers`

# 2022.10.4 (2022-10-04)

## Bug Fixes

- Use `--creator=venv` when creating virtual environments to avoid issue with sysconfig `posix_prefix` on some systems.  [#5075](https://github.com/pypa/pipenv/issues/5075)
- Prefer to use the lockfile sources if available during the install phase.  [#5380](https://github.com/pypa/pipenv/issues/5380)

## Vendored Libraries

- Drop vendored six - we no longer depend on this library, as we migrated from pipfile to plette.  [#5187](https://github.com/pypa/pipenv/issues/5187)

# 2022.9.24 (2022-09-24)

## Bug Fixes

- Update `requirementslib==2.0.3` to always evaluate the requirement markers fresh (without lru_cache) to fix marker determinism issue.  [#4660](https://github.com/pypa/pipenv/issues/4660)

# 2022.9.21 (2022-09-21)

## Bug Fixes

- Fix regression to `install --skip-lock` with update to `plette`.  [#5368](https://github.com/pypa/pipenv/issues/5368)

# 2022.9.20 (2022-09-20)

## Behavior Changes

- Remove usage of pipfile module in favour of Plette.
  pipfile is not actively maintained anymore. Plette is actively maintained,
  and has stricter checking of the Pipefile and Pipefile.lock. As a result,
  Pipefile with unnamed package indices will fail to lock. If a Pipefile
  was hand crafeted, and the source is anonymous an error will be thrown.
  The solution is simple, add a name to your index, e.g, replace:

  ```
  [[source]]
  url = "https://pypi.acme.com/simple"
  verify_ssl = true
  ```

  With:

  ```
  [[source]]
  url = "https://pypi.acme.com/simple"
  verify_ssl = true
  name = acmes_private_index  `#5339 <https://github.com/pypa/pipenv/issues/5339>`_
  ```

## Bug Fixes

- Modernize `pipenv` path patch with `importlib.util` to eliminate import of `pkg_resources`  [#5349](https://github.com/pypa/pipenv/issues/5349)

## Vendored Libraries

- Remove iso8601 from vendored packages since it was not used.  [#5346](https://github.com/pypa/pipenv/issues/5346)

# 2022.9.8 (2022-09-08)

## Features & Improvements

- It is now possible to supply additional arguments to `pip` install by supplying `--extra-pip-args="<arg1> <arg2>"`
  See the updated documentation `Supplying additional arguments to pip` for more details.  [#5283](https://github.com/pypa/pipenv/issues/5283)

## Bug Fixes

- Make editable detection better because not everyone specifies editable entry in the Pipfile for local editable installs.  [#4784](https://github.com/pypa/pipenv/issues/4784)
- Add error handling for when the installed package setup.py does not contain valid markers.  [#5329](https://github.com/pypa/pipenv/issues/5329)
- Load the dot env earlier so that `PIPENV_CUSTOM_VENV_NAME` is more useful across projects.  [#5334](https://github.com/pypa/pipenv/issues/5334)

## Vendored Libraries

- Bump version of shellingham to support nushell.  [#5336](https://github.com/pypa/pipenv/issues/5336)
- Bump plette to version v0.3.0  [#5337](https://github.com/pypa/pipenv/issues/5337)
- Bump version of pipdeptree  [#5343](https://github.com/pypa/pipenv/issues/5343)

## Removals and Deprecations

- Add deprecation warning to the --three flag. Pipenv now uses python3 by default.  [#5328](https://github.com/pypa/pipenv/issues/5328)

## Relates to dev process changes

- Convert the test runner to use `pypiserver` as a standalone process for all tests that referencce internal `pypi` artifacts.
  General refactoring of some test cases to create more variety in packages selected--preferring lighter weight packages--in existing test cases.

# 2022.9.4 (2022-09-04)

## Bug Fixes

- Fix the issue from `2022.9.2` where tarball URL packages were being skipped on batch_install.  [#5306](https://github.com/pypa/pipenv/issues/5306)

# 2022.9.2 (2022-09-02)

## Bug Fixes

- Fix issue where unnamed constraints were provided but which are not allowed by `pip` resolver.  [#5273](https://github.com/pypa/pipenv/issues/5273)

# 2022.8.31 (2022-08-31)

## Features & Improvements

- Performance optimization to `batch_install` results in a faster and less CPU intensive `pipenv sync` or `pipenv install`  experience.  [#5301](https://github.com/pypa/pipenv/issues/5301)

## Bug Fixes

- `pipenv` now uses a  `NamedTemporaryFile` for rsolver constraints and drops internal env var `PIPENV_PACKAGES`.  [#4925](https://github.com/pypa/pipenv/issues/4925)

## Removals and Deprecations

- Remove no longer used method `which_pip`.  [#5314](https://github.com/pypa/pipenv/issues/5314)
- Drop progress bar file due to recent performance optimization to combine `batch_install` requirements in at most two invocations of `pip install`.
  To see progress of install pass `--verbose` flag and `pip` progress will be output in realtime.  [#5315](https://github.com/pypa/pipenv/issues/5315)

# 2022.8.30 (2022-08-30)

## Bug Fixes

- Fix an issue when using `pipenv install --system` on systems that having the `python` executable pointing to Python 2 and a Python 3 executable being `python3`.  [#5296](https://github.com/pypa/pipenv/issues/5296)
- Sorting `constraints` before resolving, which fixes `pipenv lock` generates nondeterminism environment markers.  [#5299](https://github.com/pypa/pipenv/issues/5299)
- Fix #5273, use our own method for checking if a package is a valid constraint.  [#5309](https://github.com/pypa/pipenv/issues/5309)

## Vendored Libraries

- Vendor in `requirementslib==2.0.1` which fixes issue with local install not marked editable, and vendor in `vistir==0.6.1` which drops python2 support.
  Drops `orderedmultidict` from vendoring.  [#5308](https://github.com/pypa/pipenv/issues/5308)

# 2022.8.24 (2022-08-24)

## Bug Fixes

- Remove eager and unnecessary importing of `setuptools` and `pkg_resources` to avoid conflict upgrading `setuptools`.
  Roll back `sysconfig` patch of `pip` because it was problematic for some `--system` commands.  [#5228](https://github.com/pypa/pipenv/issues/5228)

## Vendored Libraries

- Vendor in `requirementslib==2.0.0` and drop `pip-shims` entirely.  [#5228](https://github.com/pypa/pipenv/issues/5228)
- Vendor in `pythonfinder==1.3.1`  [#5292](https://github.com/pypa/pipenv/issues/5292)

# 2022.8.19 (2022-08-19)

## Bug Fixes

- Fix issue where resolver is provided with `install_requires` constraints from `setup.py` that depend on editable dependencies and could not resolve them.  [#5271](https://github.com/pypa/pipenv/issues/5271)
- Fix for `pipenv lock` fails for packages with extras as of `2022.8.13`.  [#5274](https://github.com/pypa/pipenv/issues/5274)
- Revert the exclusion of `BAD_PACKAGES` from `batch_install` in order for `pipenv` to install specific versions of `setuptools`.
  To prevent issue upgrading `setuptools` this patches `_USE_SYSCONFIG_DEFAULT` to use `sysconfig` for `3.7` and above whereas `pip` default behavior was `3.10` and above.  [#5275](https://github.com/pypa/pipenv/issues/5275)

# 2022.8.17 (2022-08-17)

## Bug Fixes

- Fix "The Python interpreter can't be found" error when running `pipenv install --system` with a python3 but no python.  [#5261](https://github.com/pypa/pipenv/issues/5261)
- Revise pip import patch to include only `pipenv` from site-packages and removed `--ignore-installed` argument from pip install in order to fix regressions with `--use-site-packages`.  [#5265](https://github.com/pypa/pipenv/issues/5265)

# 2022.8.15 (2022-08-15)

## Bug Fixes

- `pip_install` method was using a different way of finding the python executable than other `pipenv` commands, which caused an issue with skipping package installation if it was already installed in site-packages.  [#5254](https://github.com/pypa/pipenv/issues/5254)

# 2022.8.14 (2022-08-14)

## Bug Fixes

- Removed `packaging` library from `BAD_PACKAGES` constant to allow it to be installed, which fixes regression from `pipenv==2022.8.13`.  [#5247](https://github.com/pypa/pipenv/issues/5247)

# 2022.8.13 (2022-08-13)

## Bug Fixes

- If environment variable `CI` or `TF_BUILD` is set but does not evaluate to `False` it is now treated as `True`.  [#5128](https://github.com/pypa/pipenv/issues/5128)
- Fix auto-complete crashing on 'install' and 'uninstall' keywords  [#5214](https://github.com/pypa/pipenv/issues/5214)
- Address remaining `pipenv` commands that were still referencing the user or system installed `pip` to use the vendored `pip` internal to `pipenv`.  [#5229](https://github.com/pypa/pipenv/issues/5229)
- Use `packages` as constraints when locking `dev-packages` in Pipfile.
  Use `packages` as constraints when installing new `dev-packages`.  [#5234](https://github.com/pypa/pipenv/issues/5234)

## Vendored Libraries

- Vendor in minor `pip` update `22.2.2`  [#5230](https://github.com/pypa/pipenv/issues/5230)

## Improved Documentation

- Add documentation for environment variables the configure pipenv.  [#5235](https://github.com/pypa/pipenv/issues/5235)

## Removals and Deprecations

- The deprecated way of generating requirements `install -r` or `lock -r` has been removed in favor of the `pipenv requirements` command.  [#5200](https://github.com/pypa/pipenv/issues/5200)

# 2022.8.5 (2022-08-05)

## Features & Improvements

- support PIPENV_CUSTOM_VENV_NAME to be the venv name if specified, update relevant docs.  [#4974](https://github.com/pypa/pipenv/issues/4974)

## Bug Fixes

- Remove usages of `pip_shims` from the non vendored `pipenv` code, but retain initialization for `requirementslib` still has usages.  [#5204](https://github.com/pypa/pipenv/issues/5204)
- Fix case sensitivity of color name `red` in exception when getting hashes from pypi in `_get_hashes_from_pypi`.  [#5206](https://github.com/pypa/pipenv/issues/5206)
- Write output from `subprocess_run` directly to `stdout` instead of creating temporary file.
  Remove deprecated `distutils.sysconfig`, use `sysconfig`.  [#5210](https://github.com/pypa/pipenv/issues/5210)

## Vendored Libraries

- - Rename patched `notpip` to `pip` in order to be clear that its a patched version of pip.
  - Remove the part of \_post_pip_import.patch that overrode the standalone pip to be the user installed pip, now we fully rely on our vendored and patched `pip`, even for all types of installs.
  - Vendor in the next newest version of `pip==22.2`
  - Modify patch for `pipdeptree` to not use `pip-shims`  [#5188](https://github.com/pypa/pipenv/issues/5188)
  - Remove vendored `urllib3` in favor of using it from vendored version in `pip._vendor`  [#5215](https://github.com/pypa/pipenv/issues/5215)

## Removals and Deprecations

- Remove tests that have been for a while been marked skipped and are no longer relevant.  [#5165](https://github.com/pypa/pipenv/issues/5165)

# 2022.7.24 (2022-07-24)

## Bug Fixes

- Re-enabled three installs tests again on the Windows CI as recent refactor work has fixed them.  [#5064](https://github.com/pypa/pipenv/issues/5064)
- Support ANSI `NO_COLOR` environment variable and deprecate `PIPENV_COLORBLIND` variable, which will be removed after this release.  [#5158](https://github.com/pypa/pipenv/issues/5158)
- Fixed edge case where a non-editable file, url or vcs would overwrite the value `no_deps` for all other requirements in the loop causing a retry condition.  [#5164](https://github.com/pypa/pipenv/issues/5164)
- Vendor in latest `requirementslib` for fix to lock when using editable VCS module with specific `@` git reference.  [#5179](https://github.com/pypa/pipenv/issues/5179)

## Vendored Libraries

- Remove crayons and replace with click.secho and click.styles per <https://github.com/pypa/pipenv/issues/3741>  [#3741](https://github.com/pypa/pipenv/issues/3741)
- Vendor in latest version of `pip==22.1.2` which upgrades `pipenv` from `pip==22.0.4`.
  Vendor in latest version of `requirementslib==1.6.7` which includes a fix for tracebacks on encountering Annotated variables.
  Vendor in latest version of `pip-shims==0.7.3` such that imports could be rewritten to utilize `packaging` from vendor'd `pip`.
  Drop the `packaging` requirement from the `vendor` directory in `pipenv`.  [#5147](https://github.com/pypa/pipenv/issues/5147)
- Remove unused vendored dependency `normailze-charset`.  [#5161](https://github.com/pypa/pipenv/issues/5161)
- Remove obsolete package `funcsigs`.  [#5168](https://github.com/pypa/pipenv/issues/5168)
- Bump vendored dependency `pyparsing==3.0.9`.  [#5170](https://github.com/pypa/pipenv/issues/5170)

# 2022.7.4 (2022-07-04)

## Behavior Changes

- Adjust `pipenv requirements` to add markers and add an `--exclude-markers` option to allow the exclusion of markers.  [#5092](https://github.com/pypa/pipenv/issues/5092)

## Bug Fixes

- Stopped expanding environment variables when using `pipenv requirements`  [#5134](https://github.com/pypa/pipenv/issues/5134)

## Vendored Libraries

- Depend on `requests` and `certifi` from vendored `pip` and remove them as explicit vendor dependencies.  [#5000](https://github.com/pypa/pipenv/issues/5000)
- Vendor in the latest version of `requirementslib==1.6.5` which includes bug fixes for beta python versions, projects with an at sign (@) in the path, and a `setuptools` deprecation warning.  [#5132](https://github.com/pypa/pipenv/issues/5132)

## Relates to dev process changes

- Switch from using type comments to type annotations.

# 2022.5.3.dev0 (2022-06-07)

## Bug Fixes

- Adjust pipenv to work with the newly added `venv` install scheme in Python.
  First check if `venv` is among the available install schemes, and use it if it is. Otherwise fall back to the `nt` or `posix_prefix` install schemes as before. This should produce no change for environments where the install schemes were not redefined.  [#5096](https://github.com/pypa/pipenv/issues/5096)

# 2022.5.2 (2022-05-02)

## Bug Fixes

- Fixes issue of `pipenv lock -r` command printing to stdout instead of stderr.  [#5091](https://github.com/pypa/pipenv/issues/5091)

# 2022.4.30 (2022-04-30)

## Bug Fixes

- Fixes issue of `requirements` command problem by modifying to print `-e` and path of the editable package.  [#5070](https://github.com/pypa/pipenv/issues/5070)
- Revert specifier of `setuptools` requirement in `setup.py` back to what it was in order to fix `FileNotFoundError: [Errno 2]` issue report.  [#5075](https://github.com/pypa/pipenv/issues/5075)
- Fixes issue of requirements command where git requirements cause the command to fail, solved by using existing convert_deps_to_pip function.  [#5076](https://github.com/pypa/pipenv/issues/5076)

## Vendored Libraries

- Vendor in `requirementslib==1.6.4` to Fix `SetuptoolsDeprecationWarning` `setuptools.config.read_configuration` became deprecated.  [#5081](https://github.com/pypa/pipenv/issues/5081)

## Removals and Deprecations

- Remove more usage of misc functions of vistir. Many of this function are available in the STL or in another dependency of pipenv.  [#5078](https://github.com/pypa/pipenv/issues/5078)

# 2022.4.21 (2022-04-21)

## Removals and Deprecations

- Updated setup.py to remove support for python 3.6 from built `pipenv` packages' Metadata.  [#5065](https://github.com/pypa/pipenv/issues/5065)

# 2022.4.20 (2022-04-20)

## Features & Improvements

- Added new Pipenv option `install_search_all_sources` that allows installation of packages from an
  existing `Pipfile.lock` to search all defined indexes for the constrained package version and hash signatures.  [#5041](https://github.com/pypa/pipenv/issues/5041)

## Bug Fixes

- allow the user to disable the `no_input` flag, so the use of e.g Google Artifact Registry is possible.  [#4706](https://github.com/pypa/pipenv/issues/4706)
- Fixes case where packages could fail to install and the exit code was successful.  [#5031](https://github.com/pypa/pipenv/issues/5031)

## Vendored Libraries

- Updated vendor version of `pip` from `21.2.2` to `22.0.4` which fixes a number of bugs including
  several reports of pipenv locking for an infinite amount of time when using certain package constraints.
  This also drops support for python 3.6 as it is EOL and support was removed in pip 22.x  [#4995](https://github.com/pypa/pipenv/issues/4995)

## Removals and Deprecations

- Removed the vendor dependency `more-itertools` as it was originally added for `zipp`, which since stopped using it.  [#5044](https://github.com/pypa/pipenv/issues/5044)
- Removed all usages of `pipenv.vendor.vistir.compat.fs_str`, since this function was used for PY2-PY3 compatibility and is no longer needed.  [#5062](https://github.com/pypa/pipenv/issues/5062)

## Relates to dev process changes

- Added pytest-cov and basic configuration to the project for generating html testing coverage reports.
- Make all CI jobs run only after the lint stage. Also added a makefile target for vendoring the packages.

# 2022.4.8 (2022-04-08)

## Features & Improvements

- Implements a `pipenv requirements` command which generates a requirements.txt compatible output without locking.  [#4959](https://github.com/pypa/pipenv/issues/4959)
- Internal to pipenv, the utils.py was split into a utils module with unused code removed.  [#4992](https://github.com/pypa/pipenv/issues/4992)

## Bug Fixes

- Pipenv will now ignore `.venv` in the project when `PIPENV_VENV_IN_PROJECT` variable is False.
  Unset variable maintains the existing behavior of preferring to use the project's `.venv` should it exist.  [#2763](https://github.com/pypa/pipenv/issues/2763)
- Fix an edge case of hash collection in index restricted packages whereby the hashes for some packages would
  be missing from the `Pipfile.lock` following package index restrictions added in `pipenv==2022.3.23`.  [#5023](https://github.com/pypa/pipenv/issues/5023)

## Improved Documentation

- Pipenv CLI documentation generation has been fixed.  It had broke when `click` was vendored into the project in
  `2021.11.9` because by default `sphinx-click` could no longer determine the CLI inherited from click.  [#4778](https://github.com/pypa/pipenv/issues/4778)
- Improve documentation around extra indexes and index restricted packages.  [#5022](https://github.com/pypa/pipenv/issues/5022)

## Removals and Deprecations

- Removes the optional `install` argument `--extra-index-url` as it was not compatible with index restricted packages.
  Using the `--index` argument is the correct way to specify a package should be pulled from the non-default index.  [#5022](https://github.com/pypa/pipenv/issues/5022)

## Relates to dev process changes

- Added code linting using pre-commit-hooks, black, flake8, isort, pygrep-hooks, news-fragments and check-manifest.
  Very similar to pip's configuration; adds a towncrier new's type `process` for change to Development processes.

# 2022.3.28 (2022-03-27)

## Bug Fixes

- Environment variables were not being loaded when the `--quiet` flag was set  [#5010](https://github.com/pypa/pipenv/issues/5010)
- It would appear that `requirementslib` was not fully specifying the subdirectory to `build_pep517` and
  and when a new version of `setuptools` was released, the test `test_lock_nested_vcs_direct_url`
  broke indicating the Pipfile.lock no longer contained the extra dependencies that should have been resolved.
  This regression affected `pipenv>=2021.11.9` but has been fixed by a patch to `requirementslib`.  [#5019](https://github.com/pypa/pipenv/issues/5019)

## Vendored Libraries

- Vendor in pip==21.2.4 (from 21.2.2) in order to bring in requested bug fix for python3.6.  Note: support for 3.6 will be dropped in a subsequent release.  [#5008](https://github.com/pypa/pipenv/issues/5008)

# 2022.3.24 (2022-03-23)

## Features & Improvements

- It is now possible to silence the `Loading .env environment variables` message on `pipenv run`
  with the `--quiet` flag or the `PIPENV_QUIET` environment variable.  [#4027](https://github.com/pypa/pipenv/issues/4027)

## Bug Fixes

- Fixes issue with new index safety restriction, whereby an unnamed extra sources index
  caused and error to be thrown during install.  [#5002](https://github.com/pypa/pipenv/issues/5002)
- The text `Loading .env environment variables...` has been switched back to stderr as to not
  break requirements.txt generation.  Also it only prints now when a `.env` file is actually present.  [#5003](https://github.com/pypa/pipenv/issues/5003)

# 2022.3.23 (2022-03-22)

## Features & Improvements

- Use environment variable `PIPENV_SKIP_LOCK` to control the behaviour of lock skipping.  [#4797](https://github.com/pypa/pipenv/issues/4797)
- New CLI command `verify`, checks the Pipfile.lock is up-to-date  [#4893](https://github.com/pypa/pipenv/issues/4893)

## Behavior Changes

- Pattern expansion for arguments was disabled on Windows.  [#4935](https://github.com/pypa/pipenv/issues/4935)

## Bug Fixes

- Python versions on Windows can now be installed automatically through pyenv-win  [#4525](https://github.com/pypa/pipenv/issues/4525)
- Patched our vendored Pip to fix: Pipenv Lock (Or Install) Does Not Respect Index Specified For A Package.  [#4637](https://github.com/pypa/pipenv/issues/4637)
- If `PIP_TARGET` is set to environment variables,  Refer specified directory for calculate delta, instead default directory  [#4775](https://github.com/pypa/pipenv/issues/4775)
- Remove remaining mention of python2 and --two flag from codebase.  [#4938](https://github.com/pypa/pipenv/issues/4938)
- Use `CI` environment value, over mere existence of name  [#4944](https://github.com/pypa/pipenv/issues/4944)
- Environment variables from dot env files are now properly expanded when included in scripts.  [#4975](https://github.com/pypa/pipenv/issues/4975)

## Vendored Libraries

- Updated vendor version of `pythonfinder` from `1.2.9` to `1.2.10` which fixes a bug with WSL
  (Windows Subsystem for Linux) when a path can not be read and Permission Denied error is encountered.  [#4976](https://github.com/pypa/pipenv/issues/4976)

## Removals and Deprecations

- Removes long broken argument `--code` from `install` and `--unused` from `check`.
  Check command no longer takes in arguments to ignore.
  Removed the vendored dependencies:  `pipreqs` and `yarg`  [#4998](https://github.com/pypa/pipenv/issues/4998)

# 2022.1.8 (2022-01-08)

## Bug Fixes

- Remove the extra parentheses around the venv prompt.  [#4877](https://github.com/pypa/pipenv/issues/4877)
- Fix a bug of installation fails when extra index url is given.  [#4881](https://github.com/pypa/pipenv/issues/4881)
- Fix regression where lockfiles would only include the hashes for releases for the platform generating the lockfile  [#4885](https://github.com/pypa/pipenv/issues/4885)
- Fix the index parsing to reject illegal requirements.txt.  [#4899](https://github.com/pypa/pipenv/issues/4899)

# 2021.11.23 (2021-11-23)

## Bug Fixes

- Update `charset-normalizer` from `2.0.3` to `2.0.7`, this fixes an import error on Python 3.6.  [#4865](https://github.com/pypa/pipenv/issues/4865)
- Fix a bug of deleting a virtualenv that is not managed by Pipenv.  [#4867](https://github.com/pypa/pipenv/issues/4867)
- Fix a bug that source is not added to `Pipfile` when index url is given with `pipenv install`.  [#4873](https://github.com/pypa/pipenv/issues/4873)

# 2021.11.15 (2021-11-15)

## Bug Fixes

- Return an empty dict when `PIPENV_DONT_LOAD_ENV` is set.  [#4851](https://github.com/pypa/pipenv/issues/4851)
- Don't use `sys.executable` when inside an activated venv.  [#4852](https://github.com/pypa/pipenv/issues/4852)

## Vendored Libraries

- Drop the vendored `jinja2` dependency as it is not needed any more.  [#4858](https://github.com/pypa/pipenv/issues/4858)
- Update `click` from `8.0.1` to `8.0.3`, to fix a problem with bash completion.  [#4860](https://github.com/pypa/pipenv/issues/4860)
- Drop unused vendor `chardet`.  [#4862](https://github.com/pypa/pipenv/issues/4862)

## Improved Documentation

- Fix the documentation to reflect the fact that special characters must be percent-encoded in the URL.  [#4856](https://github.com/pypa/pipenv/issues/4856)

# 2021.11.9 (2021-11-09)

## Features & Improvements

- Replace `click-completion` with `click`'s own completion implementation.  [#4786](https://github.com/pypa/pipenv/issues/4786)

## Bug Fixes

- Fix a bug that `pipenv run` doesn't set environment variables correctly.  [#4831](https://github.com/pypa/pipenv/issues/4831)
- Fix a bug that certifi can't be loaded within `notpip`'s vendor library. This makes several objects of `pip` fail to be imported.  [#4833](https://github.com/pypa/pipenv/issues/4833)
- Fix a bug that `3.10.0` can be found be python finder.  [#4837](https://github.com/pypa/pipenv/issues/4837)

## Vendored Libraries

- Update `pythonfinder` from `1.2.8` to `1.2.9`.  [#4837](https://github.com/pypa/pipenv/issues/4837)

# 2021.11.5.post0 (2021-11-05)

## Bug Fixes

- Fix a regression that `pipenv shell` fails to start a subshell.  [#4828](https://github.com/pypa/pipenv/issues/4828)
- Fix a regression that `pip_shims` object isn't imported correctly.  [#4829](https://github.com/pypa/pipenv/issues/4829)

# 2021.11.5 (2021-11-05)

## Features & Improvements

- Avoid sharing states but create project objects on demand. So that most integration test cases are able to switch to a in-process execution method.  [#4757](https://github.com/pypa/pipenv/issues/4757)
- Shell-quote `pip` commands when logging.  [#4760](https://github.com/pypa/pipenv/issues/4760)

## Bug Fixes

- Ignore empty .venv in rood dir and create project name base virtual environment  [#4790](https://github.com/pypa/pipenv/issues/4790)

## Vendored Libraries

- Update vendored dependencies
  \- `attrs` from `20.3.0` to `21.2.0`
  \- `cerberus` from `1.3.2` to `1.3.4`
  \- `certifi` from `2020.11.8` to `2021.5.30`
  \- `chardet` from `3.0.4` to `4.0.0`
  \- `click` from `7.1.2` to `8.0.1`
  \- `distlib` from `0.3.1` to `0.3.2`
  \- `idna` from `2.10` to `3.2`
  \- `importlib-metadata` from `2.0.0` to `4.6.1`
  \- `importlib-resources` from `3.3.0` to `5.2.0`
  \- `jinja2` from `2.11.2` to `3.0.1`
  \- `markupsafe` from `1.1.1` to `2.0.1`
  \- `more-itertools` from `5.0.0` to `8.8.0`
  \- `packaging` from `20.8` to `21.0`
  \- `pep517` from `0.9.1` to `0.11.0`
  \- `pipdeptree` from `1.0.0` to `2.0.0`
  \- `ptyprocess` from `0.6.0` to `0.7.0`
  \- `python-dateutil` from `2.8.1` to `2.8.2`
  \- `python-dotenv` from `0.15.0` to `0.19.0`
  \- `pythonfinder` from `1.2.5` to `1.2.8`
  \- `requests` from `2.25.0` to `2.26.0`
  \- `shellingham` from `1.3.2` to `1.4.0`
  \- `six` from `1.15.0` to `1.16.0`
  \- `tomlkit` from `0.7.0` to `0.7.2`
  \- `urllib3` from `1.26.1` to `1.26.6`
  \- `zipp` from `1.2.0` to `3.5.0`

  Add new vendored dependencies
  \- `charset-normalizer 2.0.3`
  \- `termcolor 1.1.0`
  \- `tomli 1.1.0`
  \- `wheel 0.36.2`  [#4747](https://github.com/pypa/pipenv/issues/4747)

- Drop the dependencies for Python 2.7 compatibility purpose.  [#4751](https://github.com/pypa/pipenv/issues/4751)

- Switch the dependency resolver from `pip-tools` to `pip`.

  Update vendor libraries:
  \- Update `requirementslib` from `1.5.16` to `1.6.1`
  \- Update `pip-shims` from `0.5.6` to `0.6.0`
  \- New vendor `platformdirs 2.4.0`  [#4759](https://github.com/pypa/pipenv/issues/4759)

## Improved Documentation

- remove prefixes on install commands for easy copy/pasting  [#4792](https://github.com/pypa/pipenv/issues/4792)
- Officially drop support for Python 2.7 and Python 3.5.  [#4261](https://github.com/pypa/pipenv/issues/4261)

# 2021.5.29 (2021-05-29)

## Bug Fixes

- Fix a bug where passing --skip-lock when PIPFILE has no \[SOURCE\] section throws the error: "tomlkit.exceptions.NonExistentKey: 'Key "source" does not exist.'"  [#4141](https://github.com/pypa/pipenv/issues/4141)
- Fix bug where environment wouldn't activate in paths containing & and \$ symbols  [#4538](https://github.com/pypa/pipenv/issues/4538)
- Fix a bug that `importlib-metadata` from the project's dependencies conflicts with that from `pipenv`'s.  [#4549](https://github.com/pypa/pipenv/issues/4549)
- Fix a bug where `pep508checker.py` did not expect double-digit Python minor versions (e.g. "3.10").  [#4602](https://github.com/pypa/pipenv/issues/4602)
- Fix bug where environment wouldn't activate in paths containing () and \[\] symbols  [#4615](https://github.com/pypa/pipenv/issues/4615)
- Fix bug preventing use of pipenv lock --pre  [#4642](https://github.com/pypa/pipenv/issues/4642)

## Vendored Libraries

- Update `packaging` from `20.4` to `20.8`.  [#4591](https://github.com/pypa/pipenv/issues/4591)

# 2020.11.15 (2020-11-15)

## Features & Improvements

- Support expanding environment variables in requirement URLs.  [#3516](https://github.com/pypa/pipenv/issues/3516)
- Show warning message when a dependency is skipped in locking due to the mismatch of its markers.  [#4346](https://github.com/pypa/pipenv/issues/4346)

## Bug Fixes

- Fix a bug that executable scripts with leading backslash can't be executed via `pipenv run`.  [#4368](https://github.com/pypa/pipenv/issues/4368)
- Fix a bug that VCS dependencies always satisfy even if the ref has changed.  [#4387](https://github.com/pypa/pipenv/issues/4387)
- Restrict the acceptable hash type to SHA256 only.  [#4517](https://github.com/pypa/pipenv/issues/4517)
- Fix the output of `pipenv scripts` under Windows platform.  [#4523](https://github.com/pypa/pipenv/issues/4523)
- Fix a bug that the resolver takes wrong section to validate constraints.  [#4527](https://github.com/pypa/pipenv/issues/4527)

## Vendored Libraries

- Update vendored dependencies:
  : - `colorama` from `0.4.3` to `0.4.4`
    - `python-dotenv` from `0.10.3` to `0.15.0`
    - `first` from `2.0.1` to `2.0.2`
    - `iso8601` from `0.1.12` to `0.1.13`
    - `parse` from `1.15.0` to `1.18.0`
    - `pipdeptree` from `0.13.2` to `1.0.0`
    - `requests` from `2.23.0` to `2.25.0`
    - `idna` from `2.9` to `2.10`
    - `urllib3` from `1.25.9` to `1.26.1`
    - `certifi` from `2020.4.5.1` to `2020.11.8`
    - `requirementslib` from `1.5.15` to `1.5.16`
    - `attrs` from `19.3.0` to `20.3.0`
    - `distlib` from `0.3.0` to `0.3.1`
    - `packaging` from `20.3` to `20.4`
    - `six` from `1.14.0` to `1.15.0`
    - `semver` from `2.9.0` to `2.13.0`
    - `toml` from `0.10.1` to `0.10.2`
    - `cached-property` from `1.5.1` to `1.5.2`
    - `yaspin` from `0.14.3` to `1.2.0`
    - `resolvelib` from `0.3.0` to `0.5.2`
    - `pep517` from `0.8.2` to `0.9.1`
    - `zipp` from `0.6.0` to `1.2.0`
    - `importlib-metadata` from `1.6.0` to `2.0.0`
    - `importlib-resources` from `1.5.0` to `3.3.0`  [#4533](https://github.com/pypa/pipenv/issues/4533)

## Improved Documentation

- Fix suggested pyenv setup to avoid using shimmed interpreter  [#4534](https://github.com/pypa/pipenv/issues/4534)

# 2020.11.4 (2020-11-04)

## Features & Improvements

- Add a new command `pipenv scripts` to display shortcuts from Pipfile.  [#3686](https://github.com/pypa/pipenv/issues/3686)
- Retrieve package file hash from URL to accelerate the locking process.  [#3827](https://github.com/pypa/pipenv/issues/3827)
- Add the missing `--system` option to `pipenv sync`.  [#4441](https://github.com/pypa/pipenv/issues/4441)
- Add a new option pair `--header/--no-header` to `pipenv lock` command,
  which adds a header to the generated requirements.txt  [#4443](https://github.com/pypa/pipenv/issues/4443)

## Bug Fixes

- Fix a bug that percent encoded characters will be unquoted incorrectly in the file URL.  [#4089](https://github.com/pypa/pipenv/issues/4089)
- Fix a bug where setting PIPENV_PYTHON to file path breaks environment name  [#4225](https://github.com/pypa/pipenv/issues/4225)
- Fix a bug that paths are not normalized before comparison.  [#4330](https://github.com/pypa/pipenv/issues/4330)
- Handle Python major and minor versions correctly in Pipfile creation.  [#4379](https://github.com/pypa/pipenv/issues/4379)
- Fix a bug that non-wheel file requirements can be resolved successfully.  [#4386](https://github.com/pypa/pipenv/issues/4386)
- Fix a bug that `pexept.exceptions.TIMEOUT` is not caught correctly because of the wrong import path.  [#4424](https://github.com/pypa/pipenv/issues/4424)
- Fix a bug that compound TOML table is not parsed correctly.  [#4433](https://github.com/pypa/pipenv/issues/4433)
- Fix a bug that invalid Python paths from Windows registry break `pipenv install`.  [#4436](https://github.com/pypa/pipenv/issues/4436)
- Fix a bug that function calls in `setup.py` can't be parsed rightly.  [#4446](https://github.com/pypa/pipenv/issues/4446)
- Fix a bug that dist-info inside `venv` directory will be mistaken as the editable package's metadata.  [#4480](https://github.com/pypa/pipenv/issues/4480)
- Make the order of hashes in resolution result stable.  [#4513](https://github.com/pypa/pipenv/issues/4513)

## Vendored Libraries

- Update `tomlkit` from `0.5.11` to `0.7.0`.  [#4433](https://github.com/pypa/pipenv/issues/4433)
- Update `requirementslib` from `1.5.13` to `1.5.14`.  [#4480](https://github.com/pypa/pipenv/issues/4480)

## Improved Documentation

- Discourage homebrew installation in installation guides.  [#4013](https://github.com/pypa/pipenv/issues/4013)

# 2020.8.13 (2020-08-13)

## Bug Fixes

- Fixed behaviour of `pipenv uninstall --all-dev`.
  From now on it does not uninstall regular packages.  [#3722](https://github.com/pypa/pipenv/issues/3722)
- Fix a bug that incorrect Python path will be used when `--system` flag is on.  [#4315](https://github.com/pypa/pipenv/issues/4315)
- Fix falsely flagging a Homebrew installed Python as a virtual environment  [#4316](https://github.com/pypa/pipenv/issues/4316)
- Fix a bug that `pipenv uninstall` throws an exception that does not exist.  [#4321](https://github.com/pypa/pipenv/issues/4321)
- Fix a bug that Pipenv can't locate the correct file of special directives in `setup.cfg` of an editable package.  [#4335](https://github.com/pypa/pipenv/issues/4335)
- Fix a bug that `setup.py` can't be parsed correctly when the assignment is type-annotated.  [#4342](https://github.com/pypa/pipenv/issues/4342)
- Fix a bug that `pipenv graph` throws an exception that PipenvCmdError(cmd_string, c.out, c.err, return_code).  [#4388](https://github.com/pypa/pipenv/issues/4388)
- Do not copy the whole directory tree of local file package.  [#4403](https://github.com/pypa/pipenv/issues/4403)
- Correctly detect whether Pipenv in run under an activated virtualenv.  [#4412](https://github.com/pypa/pipenv/issues/4412)

## Vendored Libraries

- Update `requirementslib` to `1.5.12`.  [#4385](https://github.com/pypa/pipenv/issues/4385)
- - Update `requirements` to `1.5.13`.
  - Update `pip-shims` to `0.5.3`.  [#4421](https://github.com/pypa/pipenv/issues/4421)

# 2020.6.2 (2020-06-02)

## Features & Improvements

- Pipenv will now detect existing `venv` and `virtualenv` based virtual environments more robustly.  [#4276](https://github.com/pypa/pipenv/issues/4276)

## Bug Fixes

- `+` signs in URL authentication fragments will no longer be incorrectly replaced with space ( \`\` \`\` ) characters.  [#4271](https://github.com/pypa/pipenv/issues/4271)
- Fixed a regression which caused Pipenv to fail when running under `/`.  [#4273](https://github.com/pypa/pipenv/issues/4273)
- `setup.py` files with `version` variables read from `os.environ` are now able to be parsed successfully.  [#4274](https://github.com/pypa/pipenv/issues/4274)
- Fixed a bug which caused Pipenv to fail to install packages in a virtual environment if those packages were already present in the system global environment.  [#4276](https://github.com/pypa/pipenv/issues/4276)
- Fix a bug that caused non-specific versions to be pinned in `Pipfile.lock`.  [#4278](https://github.com/pypa/pipenv/issues/4278)
- Corrected a missing exception import and invalid function call invocations in `pipenv.cli.command`.  [#4286](https://github.com/pypa/pipenv/issues/4286)
- Fixed an issue with resolving packages with names defined by function calls in `setup.py`.  [#4292](https://github.com/pypa/pipenv/issues/4292)
- Fixed a regression with installing the current directory, or `.`, inside a `venv` based virtual environment.  [#4295](https://github.com/pypa/pipenv/issues/4295)
- Fixed a bug with the discovery of python paths on Windows which could prevent installation of environments during `pipenv install`.  [#4296](https://github.com/pypa/pipenv/issues/4296)
- Fixed an issue in the `requirementslib` AST parser which prevented parsing of `setup.py` files for dependency metadata.  [#4298](https://github.com/pypa/pipenv/issues/4298)
- Fix a bug where Pipenv doesn't realize the session is interactive  [#4305](https://github.com/pypa/pipenv/issues/4305)

## Vendored Libraries

- Updated requirementslib to version `1.5.11`.  [#4292](https://github.com/pypa/pipenv/issues/4292)
- Updated vendored dependencies:
  : - **pythonfinder**: `1.2.2` => `1.2.4`
    - **requirementslib**: `1.5.9` => `1.5.10`  [#4302](https://github.com/pypa/pipenv/issues/4302)

# 2020.5.28 (2020-05-28)

## Features & Improvements

- `pipenv install` and `pipenv sync` will no longer attempt to install satisfied dependencies during installation.  [#3057](https://github.com/pypa/pipenv/issues/3057),
  [#3506](https://github.com/pypa/pipenv/issues/3506)

- Added support for resolution of direct-url dependencies in `setup.py` files to respect `PEP-508` style URL dependencies.  [#3148](https://github.com/pypa/pipenv/issues/3148)

- Added full support for resolution of all dependency types including direct URLs, zip archives, tarballs, etc.

  - Improved error handling and formatting.
  - Introduced improved cross platform stream wrappers for better `stdout` and `stderr` consistency.  [#3298](https://github.com/pypa/pipenv/issues/3298)

- For consistency with other commands and the `--dev` option
  description, `pipenv lock --requirements --dev` now emits
  both default and development dependencies.
  The new `--dev-only` option requests the previous
  behaviour (e.g. to generate a `dev-requirements.txt` file).  [#3316](https://github.com/pypa/pipenv/issues/3316)

- Pipenv will now successfully recursively lock VCS sub-dependencies.  [#3328](https://github.com/pypa/pipenv/issues/3328)

- Added support for `--verbose` output to `pipenv run`.  [#3348](https://github.com/pypa/pipenv/issues/3348)

- Pipenv will now discover and resolve the intrinsic dependencies of **all** VCS dependencies, whether they are editable or not, to prevent resolution conflicts.  [#3368](https://github.com/pypa/pipenv/issues/3368)

- Added a new environment variable, `PIPENV_RESOLVE_VCS`, to toggle dependency resolution off for non-editable VCS, file, and URL based dependencies.  [#3577](https://github.com/pypa/pipenv/issues/3577)

- Added the ability for Windows users to enable emojis by setting `PIPENV_HIDE_EMOJIS=0`.  [#3595](https://github.com/pypa/pipenv/issues/3595)

- Allow overriding PIPENV_INSTALL_TIMEOUT environment variable (in seconds).  [#3652](https://github.com/pypa/pipenv/issues/3652)

- Allow overriding PIP_EXISTS_ACTION environment variable (value is passed to pip install).
  Possible values here: <https://pip.pypa.io/en/stable/reference/pip/#exists-action-option>
  Useful when you need to `PIP_EXISTS_ACTION=i` (ignore existing packages) - great for CI environments, where you need really fast setup.  [#3738](https://github.com/pypa/pipenv/issues/3738)

- Pipenv will no longer forcibly override `PIP_NO_DEPS` on all vcs and file dependencies as resolution happens on these in a pre-lock step.  [#3763](https://github.com/pypa/pipenv/issues/3763)

- Improved verbose logging output during `pipenv lock` will now stream output to the console while maintaining a spinner.  [#3810](https://github.com/pypa/pipenv/issues/3810)

- Added support for automatic python installs via `asdf` and associated `PIPENV_DONT_USE_ASDF` environment variable.  [#4018](https://github.com/pypa/pipenv/issues/4018)

- Pyenv/asdf can now be used whether or not they are available on PATH. Setting PYENV_ROOT/ASDF_DIR in a Pipenv's .env allows Pipenv to install an interpreter without any shell customizations, so long as pyenv/asdf is installed.  [#4245](https://github.com/pypa/pipenv/issues/4245)

- Added `--key` command line parameter for including personal PyUp.io API tokens when running `pipenv check`.  [#4257](https://github.com/pypa/pipenv/issues/4257)

## Behavior Changes

- Make conservative checks of known exceptions when subprocess returns output, so user won't see the whole traceback - just the error.  [#2553](https://github.com/pypa/pipenv/issues/2553)
- Do not touch Pipfile early and rely on it so that one can do `pipenv sync` without a Pipfile.  [#3386](https://github.com/pypa/pipenv/issues/3386)
- Re-enable `--help` option for `pipenv run` command.  [#3844](https://github.com/pypa/pipenv/issues/3844)
- Make sure `pipenv lock -r --pypi-mirror {MIRROR_URL}` will respect the pypi-mirror in requirements output.  [#4199](https://github.com/pypa/pipenv/issues/4199)

## Bug Fixes

- Raise `PipenvUsageError` when \[\[source\]\] does not contain url field.  [#2373](https://github.com/pypa/pipenv/issues/2373)

- Fixed a bug which caused editable package resolution to sometimes fail with an unhelpful setuptools-related error message.  [#2722](https://github.com/pypa/pipenv/issues/2722)

- Fixed an issue which caused errors due to reliance on the system utilities `which` and `where` which may not always exist on some systems.
  \- Fixed a bug which caused periodic failures in python discovery when executables named `python` were not present on the target `$PATH`.  [#2783](https://github.com/pypa/pipenv/issues/2783)

- Dependency resolution now writes hashes for local and remote files to the lockfile.  [#3053](https://github.com/pypa/pipenv/issues/3053)

- Fixed a bug which prevented `pipenv graph` from correctly showing all dependencies when running from within `pipenv shell`.  [#3071](https://github.com/pypa/pipenv/issues/3071)

- Fixed resolution of direct-url dependencies in `setup.py` files to respect `PEP-508` style URL dependencies.  [#3148](https://github.com/pypa/pipenv/issues/3148)

- Fixed a bug which caused failures in warning reporting when running pipenv inside a virtualenv under some circumstances.

  - Fixed a bug with package discovery when running `pipenv clean`.  [#3298](https://github.com/pypa/pipenv/issues/3298)

- Quote command arguments with carets (`^`) on Windows to work around unintended shell escapes.  [#3307](https://github.com/pypa/pipenv/issues/3307)

- Handle alternate names for UTF-8 encoding.  [#3313](https://github.com/pypa/pipenv/issues/3313)

- Abort pipenv before adding the non-exist package to Pipfile.  [#3318](https://github.com/pypa/pipenv/issues/3318)

- Don't normalize the package name user passes in.  [#3324](https://github.com/pypa/pipenv/issues/3324)

- Fix a bug where custom virtualenv can not be activated with pipenv shell  [#3339](https://github.com/pypa/pipenv/issues/3339)

- Fix a bug that `--site-packages` flag is not recognized.  [#3351](https://github.com/pypa/pipenv/issues/3351)

- Fix a bug where pipenv --clear is not working  [#3353](https://github.com/pypa/pipenv/issues/3353)

- Fix unhashable type error during `$ pipenv install --selective-upgrade`  [#3384](https://github.com/pypa/pipenv/issues/3384)

- Dependencies with direct `PEP508` compliant VCS URLs specified in their `install_requires` will now be successfully locked during the resolution process.  [#3396](https://github.com/pypa/pipenv/issues/3396)

- Fixed a keyerror which could occur when locking VCS dependencies in some cases.  [#3404](https://github.com/pypa/pipenv/issues/3404)

- Fixed a bug that `ValidationError` is thrown when some fields are missing in source section.  [#3427](https://github.com/pypa/pipenv/issues/3427)

- Updated the index names in lock file when source name in Pipfile is changed.  [#3449](https://github.com/pypa/pipenv/issues/3449)

- Fixed an issue which caused `pipenv install --help` to show duplicate entries for `--pre`.  [#3479](https://github.com/pypa/pipenv/issues/3479)

- Fix bug causing `[SSL: CERTIFICATE_VERIFY_FAILED]` when Pipfile `[[source]]` has verify_ssl=false and url with custom port.  [#3502](https://github.com/pypa/pipenv/issues/3502)

- Fix `sync --sequential` ignoring `pip install` errors and logs.  [#3537](https://github.com/pypa/pipenv/issues/3537)

- Fix the issue that lock file can't be created when `PIPENV_PIPFILE` is not under working directory.  [#3584](https://github.com/pypa/pipenv/issues/3584)

- Pipenv will no longer inadvertently set `editable=True` on all vcs dependencies.  [#3647](https://github.com/pypa/pipenv/issues/3647)

- The `--keep-outdated` argument to `pipenv install` and `pipenv lock` will now drop specifier constraints when encountering editable dependencies.
  \- In addition, `--keep-outdated` will retain specifiers that would otherwise be dropped from any entries that have not been updated.  [#3656](https://github.com/pypa/pipenv/issues/3656)

- Fixed a bug which sometimes caused pipenv to fail to respect the `--site-packages` flag when passed with `pipenv install`.  [#3718](https://github.com/pypa/pipenv/issues/3718)

- Normalize the package names to lowercase when comparing used and in-Pipfile packages.  [#3745](https://github.com/pypa/pipenv/issues/3745)

- `pipenv update --outdated` will now correctly handle comparisons between pre/post-releases and normal releases.  [#3766](https://github.com/pypa/pipenv/issues/3766)

- Fixed a `KeyError` which could occur when pinning outdated VCS dependencies via `pipenv lock --keep-outdated`.  [#3768](https://github.com/pypa/pipenv/issues/3768)

- Resolved an issue which caused resolution to fail when encountering poorly formatted `python_version` markers in `setup.py` and `setup.cfg` files.  [#3786](https://github.com/pypa/pipenv/issues/3786)

- Fix a bug that installation errors are displayed as a list.  [#3794](https://github.com/pypa/pipenv/issues/3794)

- Update `pythonfinder` to fix a problem that `python.exe` will be mistakenly chosen for
  virtualenv creation under WSL.  [#3807](https://github.com/pypa/pipenv/issues/3807)

- Fixed several bugs which could prevent editable VCS dependencies from being installed into target environments, even when reporting successful installation.  [#3809](https://github.com/pypa/pipenv/issues/3809)

- `pipenv check --system` should find the correct Python interpreter when `python` does not exist on the system.  [#3819](https://github.com/pypa/pipenv/issues/3819)

- Resolve the symlinks when the path is absolute.  [#3842](https://github.com/pypa/pipenv/issues/3842)

- Pass `--pre` and `--clear` options to `pipenv update --outdated`.  [#3879](https://github.com/pypa/pipenv/issues/3879)

- Fixed a bug which prevented resolution of direct URL dependencies which have PEP508 style direct url VCS sub-dependencies with subdirectories.  [#3976](https://github.com/pypa/pipenv/issues/3976)

- Honor PIPENV_SPINNER environment variable  [#4045](https://github.com/pypa/pipenv/issues/4045)

- Fixed an issue with `pipenv check` failing due to an invalid API key from `pyup.io`.  [#4188](https://github.com/pypa/pipenv/issues/4188)

- Fixed a bug which caused versions from VCS dependencies to be included in `Pipfile.lock` inadvertently.  [#4217](https://github.com/pypa/pipenv/issues/4217)

- Fixed a bug which caused pipenv to search non-existent virtual environments for `pip` when installing using `--system`.  [#4220](https://github.com/pypa/pipenv/issues/4220)

- `Requires-Python` values specifying constraint versions of python starting from `1.x` will now be parsed successfully.  [#4226](https://github.com/pypa/pipenv/issues/4226)

- Fix a bug of `pipenv update --outdated` that can't print output correctly.  [#4229](https://github.com/pypa/pipenv/issues/4229)

- Fixed a bug which caused pipenv to prefer source distributions over wheels from `PyPI` during the dependency resolution phase.
  Fixed an issue which prevented proper build isolation using `pep517` based builders during dependency resolution.  [#4231](https://github.com/pypa/pipenv/issues/4231)

- Don't fallback to system Python when no matching Python version is found.  [#4232](https://github.com/pypa/pipenv/issues/4232)

## Vendored Libraries

- Updated vendored dependencies:

  > - **attrs**: `18.2.0` => `19.1.0`
  > - **certifi**: `2018.10.15` => `2019.3.9`
  > - **cached_property**: `1.4.3` => `1.5.1`
  > - **cerberus**: `1.2.0` => `1.3.1`
  > - **click-completion**: `0.5.0` => `0.5.1`
  > - **colorama**: `0.3.9` => `0.4.1`
  > - **distlib**: `0.2.8` => `0.2.9`
  > - **idna**: `2.7` => `2.8`
  > - **jinja2**: `2.10.0` => `2.10.1`
  > - **markupsafe**: `1.0` => `1.1.1`
  > - **orderedmultidict**: `(new)` => `1.0`
  > - **packaging**: `18.0` => `19.0`
  > - **parse**: `1.9.0` => `1.12.0`
  > - **pathlib2**: `2.3.2` => `2.3.3`
  > - **pep517**: `(new)` => `0.5.0`
  > - **pexpect**: `4.6.0` => `4.7.0`
  > - **pipdeptree**: `0.13.0` => `0.13.2`
  > - **pyparsing**: `2.2.2` => `2.3.1`
  > - **python-dotenv**: `0.9.1` => `0.10.2`
  > - **pythonfinder**: `1.1.10` => `1.2.1`
  > - **pytoml**: `(new)` => `0.1.20`
  > - **requests**: `2.20.1` => `2.21.0`
  > - **requirementslib**: `1.3.3` => `1.5.0`
  > - **scandir**: `1.9.0` => `1.10.0`
  > - **shellingham**: `1.2.7` => `1.3.1`
  > - **six**: `1.11.0` => `1.12.0`
  > - **tomlkit**: `0.5.2` => `0.5.3`
  > - **urllib3**: `1.24` => `1.25.2`
  > - **vistir**: `0.3.0` => `0.4.1`
  > - **yaspin**: `0.14.0` => `0.14.3`

  - Removed vendored dependency **cursor**.  [#3298](https://github.com/pypa/pipenv/issues/3298)

- Updated `pip_shims` to support `--outdated` with new pip versions.  [#3766](https://github.com/pypa/pipenv/issues/3766)

- Update vendored dependencies and invocations

  - Update vendored and patched dependencies
  - Update patches on `piptools`, `pip`, `pip-shims`, `tomlkit`
  - Fix invocations of dependencies
  - Fix custom `InstallCommand` instantiation
  - Update `PackageFinder` usage
  - Fix `Bool` stringify attempts from `tomlkit`

  Updated vendored dependencies:
  : - **attrs**: `` `18.2.0 `` => `` `19.1.0 ``
    - **certifi**: `` `2018.10.15 `` => `` `2019.3.9 ``
    - **cached_property**: `` `1.4.3 `` => `` `1.5.1 ``
    - **cerberus**: `` `1.2.0 `` => `` `1.3.1 ``
    - **click**: `` `7.0.0 `` => `` `7.1.1 ``
    - **click-completion**: `` `0.5.0 `` => `` `0.5.1 ``
    - **colorama**: `` `0.3.9 `` => `` `0.4.3 ``
    - **contextlib2**: `` `(new) `` => `` `0.6.0.post1 ``
    - **distlib**: `` `0.2.8 `` => `` `0.2.9 ``
    - **funcsigs**: `` `(new) `` => `` `1.0.2 ``
    - **importlib_metadata** `` `1.3.0 `` => `` `1.5.1 ``
    - **importlib-resources**:  `` `(new) `` => `` `1.4.0 ``
    - **idna**: `` `2.7 `` => `` `2.9 ``
    - **jinja2**: `` `2.10.0 `` => `` `2.11.1 ``
    - **markupsafe**: `` `1.0 `` => `` `1.1.1 ``
    - **more-itertools**: `` `(new) `` => `` `5.0.0 ``
    - **orderedmultidict**: `` `(new) `` => `` `1.0 ``
    - **packaging**: `` `18.0 `` => `` `19.0 ``
    - **parse**: `` `1.9.0 `` => `` `1.15.0 ``
    - **pathlib2**: `` `2.3.2 `` => `` `2.3.3 ``
    - **pep517**: `` `(new) `` => `` `0.5.0 ``
    - **pexpect**: `` `4.6.0 `` => `` `4.8.0 ``
    - **pip-shims**: `` `0.2.0 `` => `` `0.5.1 ``
    - **pipdeptree**: `` `0.13.0 `` => `` `0.13.2 ``
    - **pyparsing**: `` `2.2.2 `` => `` `2.4.6 ``
    - **python-dotenv**: `` `0.9.1 `` => `` `0.10.2 ``
    - **pythonfinder**: `` `1.1.10 `` => `` `1.2.2 ``
    - **pytoml**: `` `(new) `` => `` `0.1.20 ``
    - **requests**: `` `2.20.1 `` => `` `2.23.0 ``
    - **requirementslib**: `` `1.3.3 `` => `` `1.5.4 ``
    - **scandir**: `` `1.9.0 `` => `` `1.10.0 ``
    - **shellingham**: `` `1.2.7 `` => `` `1.3.2 ``
    - **six**: `` `1.11.0 `` => `` `1.14.0 ``
    - **tomlkit**: `` `0.5.2 `` => `` `0.5.11 ``
    - **urllib3**: `` `1.24 `` => `` `1.25.8 ``
    - **vistir**: `` `0.3.0 `` => `` `0.5.0 ``
    - **yaspin**: `` `0.14.0 `` => `` `0.14.3 ``
    - **zipp**: `` `0.6.0 ``

  - Removed vendored dependency **cursor**.  [#4169](https://github.com/pypa/pipenv/issues/4169)

- Add and update vendored dependencies to accommodate `safety` vendoring:
  \- **safety** `(none)` => `1.8.7`
  \- **dparse** `(none)` => `0.5.0`
  \- **pyyaml** `(none)` => `5.3.1`
  \- **urllib3** `1.25.8` => `1.25.9`
  \- **certifi** `2019.11.28` => `2020.4.5.1`
  \- **pyparsing** `2.4.6` => `2.4.7`
  \- **resolvelib** `0.2.2` => `0.3.0`
  \- **importlib-metadata** `1.5.1` => `1.6.0`
  \- **pip-shims** `0.5.1` => `0.5.2`
  \- **requirementslib** `1.5.5` => `1.5.6`  [#4188](https://github.com/pypa/pipenv/issues/4188)

- Updated vendored `pip` => `20.0.2` and `pip-tools` => `5.0.0`.  [#4215](https://github.com/pypa/pipenv/issues/4215)

- Updated vendored dependencies to latest versions for security and bug fixes:

  - **requirementslib** `1.5.8` => `1.5.9`
  - **vistir** `0.5.0` => `0.5.1`
  - **jinja2** `2.11.1` => `2.11.2`
  - **click** `7.1.1` => `7.1.2`
  - **dateutil** `(none)` => `2.8.1`
  - **backports.functools_lru_cache** `1.5.0` => `1.6.1`
  - **enum34** `1.1.6` => `1.1.10`
  - **toml** `0.10.0` => `0.10.1`
  - **importlib_resources** `1.4.0` => `1.5.0`  [#4226](https://github.com/pypa/pipenv/issues/4226)

- Changed attrs import path in vendored dependencies to always import from `pipenv.vendor`.  [#4267](https://github.com/pypa/pipenv/issues/4267)

## Improved Documentation

- Added documentation about variable expansion in `Pipfile` entries.  [#2317](https://github.com/pypa/pipenv/issues/2317)
- Consolidate all contributing docs in the rst file  [#3120](https://github.com/pypa/pipenv/issues/3120)
- Update the out-dated manual page.  [#3246](https://github.com/pypa/pipenv/issues/3246)
- Move CLI docs to its own page.  [#3346](https://github.com/pypa/pipenv/issues/3346)
- Replace (non-existent) video on docs index.rst with equivalent gif.  [#3499](https://github.com/pypa/pipenv/issues/3499)
- Clarify wording in Basic Usage example on using double quotes to escape shell redirection  [#3522](https://github.com/pypa/pipenv/issues/3522)
- Ensure docs show navigation on small-screen devices  [#3527](https://github.com/pypa/pipenv/issues/3527)
- Added a link to the TOML Spec under General Recommendations & Version Control to clarify how Pipfiles should be written.  [#3629](https://github.com/pypa/pipenv/issues/3629)
- Updated the documentation with the new `pytest` entrypoint.  [#3759](https://github.com/pypa/pipenv/issues/3759)
- Fix link to GIF in README.md demonstrating Pipenv's usage, and add descriptive alt text.  [#3911](https://github.com/pypa/pipenv/issues/3911)
- Added a line describing potential issues in fancy extension.  [#3912](https://github.com/pypa/pipenv/issues/3912)
- Documental description of how Pipfile works and association with Pipenv.  [#3913](https://github.com/pypa/pipenv/issues/3913)
- Clarify the proper value of `python_version` and `python_full_version`.  [#3914](https://github.com/pypa/pipenv/issues/3914)
- Write description for --deploy extension and few extensions differences.  [#3915](https://github.com/pypa/pipenv/issues/3915)
- More documentation for `.env` files  [#4100](https://github.com/pypa/pipenv/issues/4100)
- Updated documentation to point to working links.  [#4137](https://github.com/pypa/pipenv/issues/4137)
- Replace docs.pipenv.org with pipenv.pypa.io  [#4167](https://github.com/pypa/pipenv/issues/4167)
- Added functionality to check spelling in documentation and cleaned up existing typographical issues.  [#4209](https://github.com/pypa/pipenv/issues/4209)

# 2018.11.26 (2018-11-26)

## Bug Fixes

- Environment variables are expanded correctly before running scripts on POSIX.  [#3178](https://github.com/pypa/pipenv/issues/3178)
- Pipenv will no longer disable user-mode installation when the `--system` flag is passed in.  [#3222](https://github.com/pypa/pipenv/issues/3222)
- Fixed an issue with attempting to render unicode output in non-unicode locales.  [#3223](https://github.com/pypa/pipenv/issues/3223)
- Fixed a bug which could cause failures to occur when parsing python entries from global pyenv version files.  [#3224](https://github.com/pypa/pipenv/issues/3224)
- Fixed an issue which prevented the parsing of named extras sections from certain `setup.py` files.  [#3230](https://github.com/pypa/pipenv/issues/3230)
- Correctly detect the virtualenv location inside an activated virtualenv.  [#3231](https://github.com/pypa/pipenv/issues/3231)
- Fixed a bug which caused spinner frames to be written to standard output during locking operations which could cause redirection pipes to fail.  [#3239](https://github.com/pypa/pipenv/issues/3239)
- Fixed a bug that editable packages can't be uninstalled correctly.  [#3240](https://github.com/pypa/pipenv/issues/3240)
- Corrected an issue with installation timeouts which caused dependency resolution to fail for longer duration resolution steps.  [#3244](https://github.com/pypa/pipenv/issues/3244)
- Adding normal pep 508 compatible markers is now fully functional when using VCS dependencies.  [#3249](https://github.com/pypa/pipenv/issues/3249)
- Updated `requirementslib` and `pythonfinder` for multiple bug fixes.  [#3254](https://github.com/pypa/pipenv/issues/3254)
- Pipenv will now ignore hashes when installing with `--skip-lock`.  [#3255](https://github.com/pypa/pipenv/issues/3255)
- Fixed an issue where pipenv could crash when multiple pipenv processes attempted to create the same directory.  [#3257](https://github.com/pypa/pipenv/issues/3257)
- Fixed an issue which sometimes prevented successful creation of a project Pipfile.  [#3260](https://github.com/pypa/pipenv/issues/3260)
- `pipenv install` will now unset the `PYTHONHOME` environment variable when not combined with `--system`.  [#3261](https://github.com/pypa/pipenv/issues/3261)
- Pipenv will ensure that warnings do not interfere with the resolution process by suppressing warnings' usage of standard output and writing to standard error instead.  [#3273](https://github.com/pypa/pipenv/issues/3273)
- Fixed an issue which prevented variables from the environment, such as `PIPENV_DEV` or `PIPENV_SYSTEM`, from being parsed and implemented correctly.  [#3278](https://github.com/pypa/pipenv/issues/3278)
- Clear pythonfinder cache after Python install.  [#3287](https://github.com/pypa/pipenv/issues/3287)
- Fixed a race condition in hash resolution for dependencies for certain dependencies with missing cache entries or fresh Pipenv installs.  [#3289](https://github.com/pypa/pipenv/issues/3289)
- Pipenv will now respect top-level pins over VCS dependency locks.  [#3296](https://github.com/pypa/pipenv/issues/3296)

## Vendored Libraries

- Update vendored dependencies to resolve resolution output parsing and python finding:
  : - `pythonfinder 1.1.9 -> 1.1.10`
    - `requirementslib 1.3.1 -> 1.3.3`
    - `vistir 0.2.3 -> 0.2.5`  [#3280](https://github.com/pypa/pipenv/issues/3280)

# 2018.11.14 (2018-11-14)

## Features & Improvements

- Improved exceptions and error handling on failures.  [#1977](https://github.com/pypa/pipenv/issues/1977)
- Added persistent settings for all CLI flags via `PIPENV_{FLAG_NAME}` environment variables by enabling `auto_envvar_prefix=PIPENV` in click (implements PEEP-0002).  [#2200](https://github.com/pypa/pipenv/issues/2200)
- Added improved messaging about available but skipped updates due to dependency conflicts when running `pipenv update --outdated`.  [#2411](https://github.com/pypa/pipenv/issues/2411)
- Added environment variable `PIPENV_PYUP_API_KEY` to add ability
  to override the bundled PyUP.io API key.  [#2825](https://github.com/pypa/pipenv/issues/2825)
- Added additional output to `pipenv update --outdated` to indicate that the operation succeeded and all packages were already up to date.  [#2828](https://github.com/pypa/pipenv/issues/2828)
- Updated `crayons` patch to enable colors on native powershell but swap native blue for magenta.  [#3020](https://github.com/pypa/pipenv/issues/3020)
- Added support for `--bare` to `pipenv clean`, and fixed `pipenv sync --bare` to actually reduce output.  [#3041](https://github.com/pypa/pipenv/issues/3041)
- Added windows-compatible spinner via upgraded `vistir` dependency.  [#3089](https://github.com/pypa/pipenv/issues/3089)
- - Added support for python installations managed by `asdf`.  [#3096](https://github.com/pypa/pipenv/issues/3096)
- Improved runtime performance of no-op commands such as `pipenv --venv` by around 2/3.  [#3158](https://github.com/pypa/pipenv/issues/3158)
- Do not show error but success for running `pipenv uninstall --all` in a fresh virtual environment.  [#3170](https://github.com/pypa/pipenv/issues/3170)
- Improved asynchronous installation and error handling via queued subprocess parallelization.  [#3217](https://github.com/pypa/pipenv/issues/3217)

## Bug Fixes

- Remote non-PyPI artifacts and local wheels and artifacts will now include their own hashes rather than including hashes from `PyPI`.  [#2394](https://github.com/pypa/pipenv/issues/2394)
- Non-ascii characters will now be handled correctly when parsed by pipenv's `ToML` parsers.  [#2737](https://github.com/pypa/pipenv/issues/2737)
- Updated `pipenv uninstall` to respect the `--skip-lock` argument.  [#2848](https://github.com/pypa/pipenv/issues/2848)
- Fixed a bug which caused uninstallation to sometimes fail to successfully remove packages from `Pipfiles` with comments on preceding or following lines.  [#2885](https://github.com/pypa/pipenv/issues/2885),
  [#3099](https://github.com/pypa/pipenv/issues/3099)
- Pipenv will no longer fail when encountering python versions on Windows that have been uninstalled.  [#2983](https://github.com/pypa/pipenv/issues/2983)
- Fixed unnecessary extras are added when translating markers  [#3026](https://github.com/pypa/pipenv/issues/3026)
- Fixed a virtualenv creation issue which could cause new virtualenvs to inadvertently attempt to read and write to global site packages.  [#3047](https://github.com/pypa/pipenv/issues/3047)
- Fixed an issue with virtualenv path derivation which could cause errors, particularly for users on WSL bash.  [#3055](https://github.com/pypa/pipenv/issues/3055)
- Fixed a bug which caused `Unexpected EOF` errors to be thrown when `pip` was waiting for input from users who had put login credentials in environment variables.  [#3088](https://github.com/pypa/pipenv/issues/3088)
- Fixed a bug in `requirementslib` which prevented successful installation from mercurial repositories.  [#3090](https://github.com/pypa/pipenv/issues/3090)
- Fixed random resource warnings when using pyenv or any other subprocess calls.  [#3094](https://github.com/pypa/pipenv/issues/3094)
- - Fixed a bug which sometimes prevented cloning and parsing `mercurial` requirements.  [#3096](https://github.com/pypa/pipenv/issues/3096)
- Fixed an issue in `delegator.py` related to subprocess calls when using `PopenSpawn` to stream output, which sometimes threw unexpected `EOF` errors.  [#3102](https://github.com/pypa/pipenv/issues/3102),
  [#3114](https://github.com/pypa/pipenv/issues/3114),
  [#3117](https://github.com/pypa/pipenv/issues/3117)
- Fix the path casing issue that makes `pipenv clean` fail on Windows  [#3104](https://github.com/pypa/pipenv/issues/3104)
- Pipenv will avoid leaving build artifacts in the current working directory.  [#3106](https://github.com/pypa/pipenv/issues/3106)
- Fixed issues with broken subprocess calls leaking resource handles and causing random and sporadic failures.  [#3109](https://github.com/pypa/pipenv/issues/3109)
- Fixed an issue which caused `pipenv clean` to sometimes clean packages from the base `site-packages` folder or fail entirely.  [#3113](https://github.com/pypa/pipenv/issues/3113)
- Updated `pythonfinder` to correct an issue with unnesting of nested paths when searching for python versions.  [#3121](https://github.com/pypa/pipenv/issues/3121)
- Added additional logic for ignoring and replacing non-ascii characters when formatting console output on non-UTF-8 systems.  [#3131](https://github.com/pypa/pipenv/issues/3131)
- Fix virtual environment discovery when `PIPENV_VENV_IN_PROJECT` is set, but the in-project `.venv` is a file.  [#3134](https://github.com/pypa/pipenv/issues/3134)
- Hashes for remote and local non-PyPI artifacts will now be included in `Pipfile.lock` during resolution.  [#3145](https://github.com/pypa/pipenv/issues/3145)
- Fix project path hashing logic in purpose to prevent collisions of virtual environments.  [#3151](https://github.com/pypa/pipenv/issues/3151)
- Fix package installation when the virtual environment path contains parentheses.  [#3158](https://github.com/pypa/pipenv/issues/3158)
- Azure Pipelines YAML files are updated to use the latest syntax and product name.  [#3164](https://github.com/pypa/pipenv/issues/3164)
- Fixed new spinner success message to write only one success message during resolution.  [#3183](https://github.com/pypa/pipenv/issues/3183)
- Pipenv will now correctly respect the `--pre` option when used with `pipenv install`.  [#3185](https://github.com/pypa/pipenv/issues/3185)
- Fix a bug where exception is raised when run pipenv graph in a project without created virtualenv  [#3201](https://github.com/pypa/pipenv/issues/3201)
- When sources are missing names, names will now be derived from the supplied URL.  [#3216](https://github.com/pypa/pipenv/issues/3216)

## Vendored Libraries

- Updated `pythonfinder` to correct an issue with unnesting of nested paths when searching for python versions.  [#3061](https://github.com/pypa/pipenv/issues/3061),
  [#3121](https://github.com/pypa/pipenv/issues/3121)
- Updated vendored dependencies:
  : - `certifi 2018.08.24 => 2018.10.15`
    - `urllib3 1.23 => 1.24`
    - `requests 2.19.1 => 2.20.0`
    - ``` shellingham ``1.2.6 => 1.2.7 ```
    - `tomlkit 0.4.4. => 0.4.6`
    - `vistir 0.1.6 => 0.1.8`
    - `pythonfinder 0.1.2 => 0.1.3`
    - `requirementslib 1.1.9 => 1.1.10`
    - `backports.functools_lru_cache 1.5.0 (new)`
    - `cursor 1.2.0 (new)`  [#3089](https://github.com/pypa/pipenv/issues/3089)
- Updated vendored dependencies:
  : - `requests 2.19.1 => 2.20.1`
    - `tomlkit 0.4.46 => 0.5.2`
    - `vistir 0.1.6 => 0.2.4`
    - `pythonfinder 1.1.2 => 1.1.8`
    - `requirementslib 1.1.10 => 1.3.0`  [#3096](https://github.com/pypa/pipenv/issues/3096)
- Switch to `tomlkit` for parsing and writing. Drop `prettytoml` and `contoml` from vendors.  [#3191](https://github.com/pypa/pipenv/issues/3191)
- Updated `requirementslib` to aid in resolution of local and remote archives.  [#3196](https://github.com/pypa/pipenv/issues/3196)

## Improved Documentation

- Expanded development and testing documentation for contributors to get started.  [#3074](https://github.com/pypa/pipenv/issues/3074)

# 2018.10.13 (2018-10-13)

## Bug Fixes

- Fixed a bug in `pipenv clean` which caused global packages to sometimes be inadvertently targeted for cleanup.  [#2849](https://github.com/pypa/pipenv/issues/2849)
- Fix broken backport imports for vendored vistir.  [#2950](https://github.com/pypa/pipenv/issues/2950),
  [#2955](https://github.com/pypa/pipenv/issues/2955),
  [#2961](https://github.com/pypa/pipenv/issues/2961)
- Fixed a bug with importing local vendored dependencies when running `pipenv graph`.  [#2952](https://github.com/pypa/pipenv/issues/2952)
- Fixed a bug which caused executable discovery to fail when running inside a virtualenv.  [#2957](https://github.com/pypa/pipenv/issues/2957)
- Fix parsing of outline tables.  [#2971](https://github.com/pypa/pipenv/issues/2971)
- Fixed a bug which caused `verify_ssl` to fail to drop through to `pip install` correctly as `trusted-host`.  [#2979](https://github.com/pypa/pipenv/issues/2979)
- Fixed a bug which caused canonicalized package names to fail to resolve against PyPI.  [#2989](https://github.com/pypa/pipenv/issues/2989)
- Enhanced CI detection to detect Azure Devops builds.  [#2993](https://github.com/pypa/pipenv/issues/2993)
- Fixed a bug which prevented installing pinned versions which used redirection symbols from the command line.  [#2998](https://github.com/pypa/pipenv/issues/2998)
- Fixed a bug which prevented installing the local directory in non-editable mode.  [#3005](https://github.com/pypa/pipenv/issues/3005)

## Vendored Libraries

- Updated `requirementslib` to version `1.1.9`.  [#2989](https://github.com/pypa/pipenv/issues/2989)
- Upgraded `pythonfinder => 1.1.1` and `vistir => 0.1.7`.  [#3007](https://github.com/pypa/pipenv/issues/3007)

# 2018.10.9 (2018-10-09)

## Features & Improvements

- Added environment variables `PIPENV_VERBOSE` and `PIPENV_QUIET` to control
  output verbosity without needing to pass options.  [#2527](https://github.com/pypa/pipenv/issues/2527)

- Updated test-PyPI add-on to better support json-API access (forward compatibility).
  Improved testing process for new contributors.  [#2568](https://github.com/pypa/pipenv/issues/2568)

- Greatly enhanced python discovery functionality:

  - Added pep514 (windows launcher/finder) support for python discovery.
  - Introduced architecture discovery for python installations which support different architectures.  [#2582](https://github.com/pypa/pipenv/issues/2582)

- Added support for `pipenv shell` on msys and cygwin/mingw/git bash for Windows.  [#2641](https://github.com/pypa/pipenv/issues/2641)

- Enhanced resolution of editable and VCS dependencies.  [#2643](https://github.com/pypa/pipenv/issues/2643)

- Deduplicate and refactor CLI to use stateful arguments and object passing.  See [this issue](https://github.com/pallets/click/issues/108) for reference.  [#2814](https://github.com/pypa/pipenv/issues/2814)

## Behavior Changes

- Virtual environment activation for `run` is revised to improve interpolation
  with other Python discovery tools.  [#2503](https://github.com/pypa/pipenv/issues/2503)
- Improve terminal coloring to display better in Powershell.  [#2511](https://github.com/pypa/pipenv/issues/2511)
- Invoke `virtualenv` directly for virtual environment creation, instead of depending on `pew`.  [#2518](https://github.com/pypa/pipenv/issues/2518)
- `pipenv --help` will now include short help descriptions.  [#2542](https://github.com/pypa/pipenv/issues/2542)
- Add `COMSPEC` to fallback option (along with `SHELL` and `PYENV_SHELL`)
  if shell detection fails, improving robustness on Windows.  [#2651](https://github.com/pypa/pipenv/issues/2651)
- Fallback to shell mode if `run` fails with Windows error 193 to handle non-executable commands. This should improve usability on Windows, where some users run non-executable files without specifying a command, relying on Windows file association to choose the current command.  [#2718](https://github.com/pypa/pipenv/issues/2718)

## Bug Fixes

- Fixed a bug which prevented installation of editable requirements using `ssh://` style URLs  [#1393](https://github.com/pypa/pipenv/issues/1393)
- VCS Refs for locked local editable dependencies will now update appropriately to the latest hash when running `pipenv update`.  [#1690](https://github.com/pypa/pipenv/issues/1690)
- `.tar.gz` and `.zip` artifacts will now have dependencies installed even when they are missing from the Lockfile.  [#2173](https://github.com/pypa/pipenv/issues/2173)
- The command line parser will now handle multiple `-e/--editable` dependencies properly via click's option parser to help mitigate future parsing issues.  [#2279](https://github.com/pypa/pipenv/issues/2279)
- Fixed the ability of pipenv to parse `dependency_links` from `setup.py` when `PIP_PROCESS_DEPENDENCY_LINKS` is enabled.  [#2434](https://github.com/pypa/pipenv/issues/2434)
- Fixed a bug which could cause `-i/--index` arguments to sometimes be incorrectly picked up in packages.  This is now handled in the command line parser.  [#2494](https://github.com/pypa/pipenv/issues/2494)
- Fixed non-deterministic resolution issues related to changes to the internal package finder in `pip 10`.  [#2499](https://github.com/pypa/pipenv/issues/2499),
  [#2529](https://github.com/pypa/pipenv/issues/2529),
  [#2589](https://github.com/pypa/pipenv/issues/2589),
  [#2666](https://github.com/pypa/pipenv/issues/2666),
  [#2767](https://github.com/pypa/pipenv/issues/2767),
  [#2785](https://github.com/pypa/pipenv/issues/2785),
  [#2795](https://github.com/pypa/pipenv/issues/2795),
  [#2801](https://github.com/pypa/pipenv/issues/2801),
  [#2824](https://github.com/pypa/pipenv/issues/2824),
  [#2862](https://github.com/pypa/pipenv/issues/2862),
  [#2879](https://github.com/pypa/pipenv/issues/2879),
  [#2894](https://github.com/pypa/pipenv/issues/2894),
  [#2933](https://github.com/pypa/pipenv/issues/2933)
- Fix subshell invocation on Windows for Python 2.  [#2515](https://github.com/pypa/pipenv/issues/2515)
- Fixed a bug which sometimes caused pipenv to throw a `TypeError` or to run into encoding issues when writing a Lockfile on python 2.  [#2561](https://github.com/pypa/pipenv/issues/2561)
- Improve quoting logic for `pipenv run` so it works better with Windows
  built-in commands.  [#2563](https://github.com/pypa/pipenv/issues/2563)
- Fixed a bug related to parsing VCS requirements with both extras and subdirectory fragments.
  Corrected an issue in the `requirementslib` parser which led to some markers being discarded rather than evaluated.  [#2564](https://github.com/pypa/pipenv/issues/2564)
- Fixed multiple issues with finding the correct system python locations.  [#2582](https://github.com/pypa/pipenv/issues/2582)
- Catch JSON decoding error to prevent exception when the lock file is of
  invalid format.  [#2607](https://github.com/pypa/pipenv/issues/2607)
- Fixed a rare bug which could sometimes cause errors when installing packages with custom sources.  [#2610](https://github.com/pypa/pipenv/issues/2610)
- Update requirementslib to fix a bug which could raise an `UnboundLocalError` when parsing malformed VCS URIs.  [#2617](https://github.com/pypa/pipenv/issues/2617)
- Fixed an issue which prevented passing multiple `--ignore` parameters to `pipenv check`.  [#2632](https://github.com/pypa/pipenv/issues/2632)
- Fixed a bug which caused attempted hashing of `ssh://` style URIs which could cause failures during installation of private ssh repositories.
  \- Corrected path conversion issues which caused certain editable VCS paths to be converted to `ssh://` URIs improperly.  [#2639](https://github.com/pypa/pipenv/issues/2639)
- Fixed a bug which caused paths to be formatted incorrectly when using `pipenv shell` in bash for windows.  [#2641](https://github.com/pypa/pipenv/issues/2641)
- Dependency links to private repositories defined via `ssh://` schemes will now install correctly and skip hashing as long as `PIP_PROCESS_DEPENDENCY_LINKS=1`.  [#2643](https://github.com/pypa/pipenv/issues/2643)
- Fixed a bug which sometimes caused pipenv to parse the `trusted_host` argument to pip incorrectly when parsing source URLs which specify `verify_ssl = false`.  [#2656](https://github.com/pypa/pipenv/issues/2656)
- Prevent crashing when a virtual environment in `WORKON_HOME` is faulty.  [#2676](https://github.com/pypa/pipenv/issues/2676)
- Fixed virtualenv creation failure when a .venv file is present in the project root.  [#2680](https://github.com/pypa/pipenv/issues/2680)
- Fixed a bug which could cause the `-e/--editable` argument on a dependency to be accidentally parsed as a dependency itself.  [#2714](https://github.com/pypa/pipenv/issues/2714)
- Correctly pass `verbose` and `debug` flags to the resolver subprocess so it generates appropriate output. This also resolves a bug introduced by the fix to #2527.  [#2732](https://github.com/pypa/pipenv/issues/2732)
- All markers are now included in `pipenv lock --requirements` output.  [#2748](https://github.com/pypa/pipenv/issues/2748)
- Fixed a bug in marker resolution which could cause duplicate and non-deterministic markers.  [#2760](https://github.com/pypa/pipenv/issues/2760)
- Fixed a bug in the dependency resolver which caused regular issues when handling `setup.py` based dependency resolution.  [#2766](https://github.com/pypa/pipenv/issues/2766)
- Updated vendored dependencies:
  : - `pip-tools` (updated and patched to latest w/ `pip 18.0` compatibility)
    - `pip 10.0.1 => 18.0`
    - `click 6.7 => 7.0`
    - `toml 0.9.4 => 0.10.0`
    - `pyparsing 2.2.0 => 2.2.2`
    - `delegator 0.1.0 => 0.1.1`
    - `attrs 18.1.0 => 18.2.0`
    - `distlib 0.2.7 => 0.2.8`
    - `packaging 17.1.0 => 18.0`
    - `passa 0.2.0 => 0.3.1`
    - `pip_shims 0.1.2 => 0.3.1`
    - `plette 0.1.1 => 0.2.2`
    - `pythonfinder 1.0.2 => 1.1.0`
    - `pytoml 0.1.18 => 0.1.19`
    - `requirementslib 1.1.16 => 1.1.17`
    - `shellingham 1.2.4 => 1.2.6`
    - `tomlkit 0.4.2 => 0.4.4`
    - `vistir 0.1.4 => 0.1.6`
  [#2802](https://github.com/pypa/pipenv/issues/2802),
  [#2867](https://github.com/pypa/pipenv/issues/2867),
  [#2880](https://github.com/pypa/pipenv/issues/2880)
- Fixed a bug where `pipenv` crashes when the `WORKON_HOME` directory does not exist.  [#2877](https://github.com/pypa/pipenv/issues/2877)
- Fixed pip is not loaded from pipenv's patched one but the system one  [#2912](https://github.com/pypa/pipenv/issues/2912)
- Fixed various bugs related to `pip 18.1` release which prevented locking, installation, and syncing, and dumping to a `requirements.txt` file.  [#2924](https://github.com/pypa/pipenv/issues/2924)

## Vendored Libraries

- Pew is no longer vendored. Entry point `pewtwo`, packages `pipenv.pew` and
  `pipenv.patched.pew` are removed.  [#2521](https://github.com/pypa/pipenv/issues/2521)
- Update `pythonfinder` to major release `1.0.0` for integration.  [#2582](https://github.com/pypa/pipenv/issues/2582)
- Update requirementslib to fix a bug which could raise an `UnboundLocalError` when parsing malformed VCS URIs.  [#2617](https://github.com/pypa/pipenv/issues/2617)
- - Vendored new libraries `vistir` and `pip-shims`, `tomlkit`, `modutil`, and `plette`.
  - Update vendored libraries:
    \- `scandir` to `1.9.0`
    \- `click-completion` to `0.4.1`
    \- `semver` to `2.8.1`
    \- `shellingham` to `1.2.4`
    \- `pytoml` to `0.1.18`
    \- `certifi` to `2018.8.24`
    \- `ptyprocess` to `0.6.0`
    \- `requirementslib` to `1.1.5`
    \- `pythonfinder` to `1.0.2`
    \- `pipdeptree` to `0.13.0`
    \- `python-dotenv` to `0.9.1`  [#2639](https://github.com/pypa/pipenv/issues/2639)
- Updated vendored dependencies:
  : - `pip-tools` (updated and patched to latest w/ `pip 18.0` compatibility)
    - `pip 10.0.1 => 18.0`
    - `click 6.7 => 7.0`
    - `toml 0.9.4 => 0.10.0`
    - `pyparsing 2.2.0 => 2.2.2`
    - `delegator 0.1.0 => 0.1.1`
    - `attrs 18.1.0 => 18.2.0`
    - `distlib 0.2.7 => 0.2.8`
    - `packaging 17.1.0 => 18.0`
    - `passa 0.2.0 => 0.3.1`
    - `pip_shims 0.1.2 => 0.3.1`
    - `plette 0.1.1 => 0.2.2`
    - `pythonfinder 1.0.2 => 1.1.0`
    - `pytoml 0.1.18 => 0.1.19`
    - `requirementslib 1.1.16 => 1.1.17`
    - `shellingham 1.2.4 => 1.2.6`
    - `tomlkit 0.4.2 => 0.4.4`
    - `vistir 0.1.4 => 0.1.6`
  [#2902](https://github.com/pypa/pipenv/issues/2902),
  [#2935](https://github.com/pypa/pipenv/issues/2935)

## Improved Documentation

- Simplified the test configuration process.  [#2568](https://github.com/pypa/pipenv/issues/2568)
- Updated documentation to use working fortune cookie add-on.  [#2644](https://github.com/pypa/pipenv/issues/2644)
- Added additional information about troubleshooting `pipenv shell` by using the the `$PIPENV_SHELL` environment variable.  [#2671](https://github.com/pypa/pipenv/issues/2671)
- Added a link to `PEP-440` version specifiers in the documentation for additional detail.  [#2674](https://github.com/pypa/pipenv/issues/2674)
- Added simple example to README.md for installing from git.  [#2685](https://github.com/pypa/pipenv/issues/2685)
- Stopped recommending `--system` for Docker contexts.  [#2762](https://github.com/pypa/pipenv/issues/2762)
- Fixed the example url for doing "pipenv install -e
  some-repository-url#egg=something", it was missing the "egg=" in the fragment
  identifier.  [#2792](https://github.com/pypa/pipenv/issues/2792)
- Fixed link to the "be cordial" essay in the contribution documentation.  [#2793](https://github.com/pypa/pipenv/issues/2793)
- Clarify `pipenv install` documentation  [#2844](https://github.com/pypa/pipenv/issues/2844)
- Replace reference to uservoice with PEEP-000  [#2909](https://github.com/pypa/pipenv/issues/2909)

# 2018.7.1 (2018-07-01)

## Features & Improvements

- All calls to `pipenv shell` are now implemented from the ground up using [shellingham](https://github.com/sarugaku/shellingham), a custom library which was purpose built to handle edge cases and shell detection.  [#2371](https://github.com/pypa/pipenv/issues/2371)
- Added support for python 3.7 via a few small compatibility / bug fixes.  [#2427](https://github.com/pypa/pipenv/issues/2427),
  [#2434](https://github.com/pypa/pipenv/issues/2434),
  [#2436](https://github.com/pypa/pipenv/issues/2436)
- Added new flag `pipenv --support` to replace the diagnostic command `python -m pipenv.help`.  [#2477](https://github.com/pypa/pipenv/issues/2477),
  [#2478](https://github.com/pypa/pipenv/issues/2478)
- Improved import times and CLI run times with minor tweaks.  [#2485](https://github.com/pypa/pipenv/issues/2485)

## Bug Fixes

- Fixed an ongoing bug which sometimes resolved incompatible versions into the project Lockfile.  [#1901](https://github.com/pypa/pipenv/issues/1901)
- Fixed a bug which caused errors when creating virtualenvs which contained leading dash characters.  [#2415](https://github.com/pypa/pipenv/issues/2415)
- Fixed a logic error which caused `--deploy --system` to overwrite editable vcs packages in the Pipfile before installing, which caused any installation to fail by default.  [#2417](https://github.com/pypa/pipenv/issues/2417)
- Updated requirementslib to fix an issue with properly quoting markers in VCS requirements.  [#2419](https://github.com/pypa/pipenv/issues/2419)
- Installed new vendored jinja2 templates for `click-completion` which were causing template errors for users with completion enabled.  [#2422](https://github.com/pypa/pipenv/issues/2422)
- Added support for python 3.7 via a few small compatibility / bug fixes.  [#2427](https://github.com/pypa/pipenv/issues/2427)
- Fixed an issue reading package names from `setup.py` files in projects which imported utilities such as `versioneer`.  [#2433](https://github.com/pypa/pipenv/issues/2433)
- Pipenv will now ensure that its internal package names registry files are written with unicode strings.  [#2450](https://github.com/pypa/pipenv/issues/2450)
- Fixed a bug causing requirements input as relative paths to be output as absolute paths or URIs.
  Fixed a bug affecting normalization of `git+git@host` URLs.  [#2453](https://github.com/pypa/pipenv/issues/2453)
- Pipenv will now always use `pathlib2` for `Path` based filesystem interactions by default on `python<3.5`.  [#2454](https://github.com/pypa/pipenv/issues/2454)
- Fixed a bug which prevented passing proxy PyPI indexes set with `--pypi-mirror` from being passed to pip during virtualenv creation, which could cause the creation to freeze in some cases.  [#2462](https://github.com/pypa/pipenv/issues/2462)
- Using the `python -m pipenv.help` command will now use proper encoding for the host filesystem to avoid encoding issues.  [#2466](https://github.com/pypa/pipenv/issues/2466)
- The new `jinja2` templates for `click_completion` will now be included in pipenv source distributions.  [#2479](https://github.com/pypa/pipenv/issues/2479)
- Resolved a long-standing issue with re-using previously generated `InstallRequirement` objects for resolution which could cause `PKG-INFO` file information to be deleted, raising a `TypeError`.  [#2480](https://github.com/pypa/pipenv/issues/2480)
- Resolved an issue parsing usernames from private PyPI URIs in `Pipfiles` by updating `requirementslib`.  [#2484](https://github.com/pypa/pipenv/issues/2484)

## Vendored Libraries

- All calls to `pipenv shell` are now implemented from the ground up using [shellingham](https://github.com/sarugaku/shellingham), a custom library which was purpose built to handle edge cases and shell detection.  [#2371](https://github.com/pypa/pipenv/issues/2371)
- Updated requirementslib to fix an issue with properly quoting markers in VCS requirements.  [#2419](https://github.com/pypa/pipenv/issues/2419)
- Installed new vendored jinja2 templates for `click-completion` which were causing template errors for users with completion enabled.  [#2422](https://github.com/pypa/pipenv/issues/2422)
- Add patch to `prettytoml` to support Python 3.7.  [#2426](https://github.com/pypa/pipenv/issues/2426)
- Patched `prettytoml.AbstractTable._enumerate_items` to handle `StopIteration` errors in preparation of release of python 3.7.  [#2427](https://github.com/pypa/pipenv/issues/2427)
- Fixed an issue reading package names from `setup.py` files in projects which imported utilities such as `versioneer`.  [#2433](https://github.com/pypa/pipenv/issues/2433)
- Updated `requirementslib` to version `1.0.9`  [#2453](https://github.com/pypa/pipenv/issues/2453)
- Unraveled a lot of old, unnecessary patches to `pip-tools` which were causing non-deterministic resolution errors.  [#2480](https://github.com/pypa/pipenv/issues/2480)
- Resolved an issue parsing usernames from private PyPI URIs in `Pipfiles` by updating `requirementslib`.  [#2484](https://github.com/pypa/pipenv/issues/2484)

## Improved Documentation

- Added instructions for installing using Fedora's official repositories.  [#2404](https://github.com/pypa/pipenv/issues/2404)

# 2018.6.25 (2018-06-25)

## Features & Improvements

- Pipenv-created virtualenvs will now be associated with a `.project` folder
  (features can be implemented on top of this later or users may choose to use
  `pipenv-pipes` to take full advantage of this.)  [#1861](https://github.com/pypa/pipenv/issues/1861)
- Virtualenv names will now appear in prompts for most Windows users.  [#2167](https://github.com/pypa/pipenv/issues/2167)
- Added support for cmder shell paths with spaces.  [#2168](https://github.com/pypa/pipenv/issues/2168)
- Added nested JSON output to the `pipenv graph` command.  [#2199](https://github.com/pypa/pipenv/issues/2199)
- Dropped vendored pip 9 and vendored, patched, and migrated to pip 10. Updated
  patched piptools version.  [#2255](https://github.com/pypa/pipenv/issues/2255)
- PyPI mirror URLs can now be set to override instances of PyPI URLs by passing
  the `--pypi-mirror` argument from the command line or setting the
  `PIPENV_PYPI_MIRROR` environment variable.  [#2281](https://github.com/pypa/pipenv/issues/2281)
- Virtualenv activation lines will now avoid being written to some shell
  history files.  [#2287](https://github.com/pypa/pipenv/issues/2287)
- Pipenv will now only search for `requirements.txt` files when creating new
  projects, and during that time only if the user doesn't specify packages to
  pass in.  [#2309](https://github.com/pypa/pipenv/issues/2309)
- Added support for mounted drives via UNC paths.  [#2331](https://github.com/pypa/pipenv/issues/2331)
- Added support for Windows Subsystem for Linux bash shell detection.  [#2363](https://github.com/pypa/pipenv/issues/2363)
- Pipenv will now generate hashes much more quickly by resolving them in a
  single pass during locking.  [#2384](https://github.com/pypa/pipenv/issues/2384)
- `pipenv run` will now avoid spawning additional `COMSPEC` instances to
  run commands in when possible.  [#2385](https://github.com/pypa/pipenv/issues/2385)
- Massive internal improvements to requirements parsing codebase, resolver, and
  error messaging.  [#2388](https://github.com/pypa/pipenv/issues/2388)
- `pipenv check` now may take multiple of the additional argument
  `--ignore` which takes a parameter `cve_id` for the purpose of ignoring
  specific CVEs.  [#2408](https://github.com/pypa/pipenv/issues/2408)

## Behavior Changes

- Pipenv will now parse & capitalize `platform_python_implementation` markers
  .. warning:: This could cause an issue if you have an out of date `Pipfile`
  which lower-cases the comparison value (e.g. `cpython` instead of
  `CPython`).  [#2123](https://github.com/pypa/pipenv/issues/2123)
- Pipenv will now only search for `requirements.txt` files when creating new
  projects, and during that time only if the user doesn't specify packages to
  pass in.  [#2309](https://github.com/pypa/pipenv/issues/2309)

## Bug Fixes

- Massive internal improvements to requirements parsing codebase, resolver, and
  error messaging.  [#1962](https://github.com/pypa/pipenv/issues/1962),
  [#2186](https://github.com/pypa/pipenv/issues/2186),
  [#2263](https://github.com/pypa/pipenv/issues/2263),
  [#2312](https://github.com/pypa/pipenv/issues/2312)
- Pipenv will now parse & capitalize `platform_python_implementation`
  markers.  [#2123](https://github.com/pypa/pipenv/issues/2123)
- Fixed a bug with parsing and grouping old-style `setup.py` extras during
  resolution  [#2142](https://github.com/pypa/pipenv/issues/2142)
- Fixed a bug causing pipenv graph to throw unhelpful exceptions when running
  against empty or non-existent environments.  [#2161](https://github.com/pypa/pipenv/issues/2161)
- Fixed a bug which caused `--system` to incorrectly abort when users were in
  a virtualenv.  [#2181](https://github.com/pypa/pipenv/issues/2181)
- Removed vendored `cacert.pem` which could cause issues for some users with
  custom certificate settings.  [#2193](https://github.com/pypa/pipenv/issues/2193)
- Fixed a regression which led to direct invocations of `virtualenv`, rather
  than calling it by module.  [#2198](https://github.com/pypa/pipenv/issues/2198)
- Locking will now pin the correct VCS ref during `pipenv update` runs.
  Running `pipenv update` with a new vcs ref specified in the `Pipfile`
  will now properly obtain, resolve, and install the specified dependency at
  the specified ref.  [#2209](https://github.com/pypa/pipenv/issues/2209)
- `pipenv clean` will now correctly ignore comments from `pip freeze` when
  cleaning the environment.  [#2262](https://github.com/pypa/pipenv/issues/2262)
- Resolution bugs causing packages for incompatible python versions to be
  locked have been fixed.  [#2267](https://github.com/pypa/pipenv/issues/2267)
- Fixed a bug causing pipenv graph to fail to display sometimes.  [#2268](https://github.com/pypa/pipenv/issues/2268)
- Updated `requirementslib` to fix a bug in Pipfile parsing affecting
  relative path conversions.  [#2269](https://github.com/pypa/pipenv/issues/2269)
- Windows executable discovery now leverages `os.pathext`.  [#2298](https://github.com/pypa/pipenv/issues/2298)
- Fixed a bug which caused `--deploy --system` to inadvertently create a
  virtualenv before failing.  [#2301](https://github.com/pypa/pipenv/issues/2301)
- Fixed an issue which led to a failure to unquote special characters in file
  and wheel paths.  [#2302](https://github.com/pypa/pipenv/issues/2302)
- VCS dependencies are now manually obtained only if they do not match the
  requested ref.  [#2304](https://github.com/pypa/pipenv/issues/2304)
- Added error handling functionality to properly cope with single-digit
  `Requires-Python` metadata with no specifiers.  [#2377](https://github.com/pypa/pipenv/issues/2377)
- `pipenv update` will now always run the resolver and lock before ensuring
  dependencies are in sync with project Lockfile.  [#2379](https://github.com/pypa/pipenv/issues/2379)
- Resolved a bug in our patched resolvers which could cause nondeterministic
  resolution failures in certain conditions. Running `pipenv install` with no
  arguments in a project with only a `Pipfile` will now correctly lock first
  for dependency resolution before installing.  [#2384](https://github.com/pypa/pipenv/issues/2384)
- Patched `python-dotenv` to ensure that environment variables always get
  encoded to the filesystem encoding.  [#2386](https://github.com/pypa/pipenv/issues/2386)

## Improved Documentation

- Update documentation wording to clarify Pipenv's overall role in the packaging ecosystem.  [#2194](https://github.com/pypa/pipenv/issues/2194)
- Added contribution documentation and guidelines.  [#2205](https://github.com/pypa/pipenv/issues/2205)
- Added instructions for supervisord compatibility.  [#2215](https://github.com/pypa/pipenv/issues/2215)
- Fixed broken links to development philosophy and contribution documentation.  [#2248](https://github.com/pypa/pipenv/issues/2248)

## Vendored Libraries

- Removed vendored `cacert.pem` which could cause issues for some users with
  custom certificate settings.  [#2193](https://github.com/pypa/pipenv/issues/2193)

- Dropped vendored pip 9 and vendored, patched, and migrated to pip 10. Updated
  patched piptools version.  [#2255](https://github.com/pypa/pipenv/issues/2255)

- Updated `requirementslib` to fix a bug in Pipfile parsing affecting
  relative path conversions.  [#2269](https://github.com/pypa/pipenv/issues/2269)

- Added custom shell detection library `shellingham`, a port of our changes
  to `pew`.  [#2363](https://github.com/pypa/pipenv/issues/2363)

- Patched `python-dotenv` to ensure that environment variables always get
  encoded to the filesystem encoding.  [#2386](https://github.com/pypa/pipenv/issues/2386)

- Updated vendored libraries. The following vendored libraries were updated:

  - distlib from version `0.2.6` to `0.2.7`.
  - jinja2 from version `2.9.5` to `2.10`.
  - pathlib2 from version `2.1.0` to `2.3.2`.
  - parse from version `2.8.0` to `2.8.4`.
  - pexpect from version `2.5.2` to `2.6.0`.
  - requests from version `2.18.4` to `2.19.1`.
  - idna from version `2.6` to `2.7`.
  - certifi from version `2018.1.16` to `2018.4.16`.
  - packaging from version `16.8` to `17.1`.
  - six from version `1.10.0` to `1.11.0`.
  - requirementslib from version `0.2.0` to `1.0.1`.

  In addition, scandir was vendored and patched to avoid importing host system binaries when falling back to pathlib2.  [#2368](https://github.com/pypa/pipenv/issues/2368)
