Describe the bug
The install_stage_dependencies.sh script pins virtualenv==20.4.2 (line 22) and pip==21.0.1 (line 19), but newer AWS CodeBuild images ship with pipenv 2026.0.3 which requires virtualenv>=20.24.2.
This causes a dependency conflict warning during the build stage:
[Container] 2026/02/17 11:04:14.493902 Running command bash install_stage_dependencies.sh $STAGE_NAME
Installing Build Stage Dependencies.
WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager, possibly rendering your system unusable. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv. Use the --root-user-action option if you know what you are doing and want to suppress this warning.
[notice] A new release of pip is available: 21.0.1 -> 26.0.1
[notice] To update, run: pip install --upgrade pip
ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts.
pipenv 2026.0.3 requires virtualenv>=20.24.2, but you have virtualenv 20.4.2 which is incompatible.
To Reproduce
Deploy CfCT v2.8.3 with the default/latest CodeBuild image.
Expected behavior
No dependency conflicts. Suggested fix: version bump for virtualenv and pip in source/codebuild_scripts/install_stage_dependencies.sh.
Please complete the following information about the solution:
Screenshots
Additional context
The build completes successfully despite the warning. This is a compatibility issue between the hardcoded dependency versions in install_stage_dependencies.sh and the evolving CodeBuild base image.
Describe the bug
The
install_stage_dependencies.shscript pinsvirtualenv==20.4.2(line 22) andpip==21.0.1(line 19), but newer AWS CodeBuild images ship withpipenv 2026.0.3which requiresvirtualenv>=20.24.2.This causes a dependency conflict warning during the build stage:
[Container] 2026/02/17 11:04:14.493902 Running command bash install_stage_dependencies.sh $STAGE_NAME
Installing Build Stage Dependencies.
WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager, possibly rendering your system unusable. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv. Use the --root-user-action option if you know what you are doing and want to suppress this warning.
[notice] A new release of pip is available: 21.0.1 -> 26.0.1
[notice] To update, run: pip install --upgrade pip
ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts.
pipenv 2026.0.3 requires virtualenv>=20.24.2, but you have virtualenv 20.4.2 which is incompatible.
To Reproduce
Deploy CfCT v2.8.3 with the default/latest CodeBuild image.
Expected behavior
No dependency conflicts. Suggested fix: version bump for
virtualenvandpipinsource/codebuild_scripts/install_stage_dependencies.sh.Please complete the following information about the solution:
Screenshots
Additional context
The build completes successfully despite the warning. This is a compatibility issue between the hardcoded dependency versions in
install_stage_dependencies.shand the evolving CodeBuild base image.