[Experimental] Move pinned pip in setupVirtualenv to 26.2.2

.github/trigger_files/beam_PostCommit_Python_Dependency.json

@@ -1,4 +1,4 @@
 {
     "comment": "Modify this file in a trivial way to cause this test suite to run",
-    "modification": 10
+    "modification": 9
   }

.github/trigger_files/beam_PreCommit_Yaml_Xlang_Direct.json

@@ -1,4 +1,4 @@
 {
     "comment": "Modify this file in a trivial way to cause this test suite to run",
-    "revision": 3
+    "revision": 4
 }

buildSrc/src/main/groovy/org/apache/beam/gradle/BeamModulePlugin.groovy

@@ -3176,12 +3176,9 @@ class BeamModulePlugin implements Plugin<Project> {
           }
           project.exec {
             executable 'sh'
-            // TODO: https://github.com/apache/beam/issues/29022
-            // pip 23.3 is failing due to Hash mismatch between expected SHA of the packaged and actual SHA.
-            // until it is resolved on pip's side, don't use pip's cache.
-            // pip 25.1 casues :sdks:python:installGcpTest stuck. Pin to 25.0.1 for now.
+            // Pin pip after emSign root CA vulnerability fix.
             args '-c', ". ${project.ext.envdir}/bin/activate && " +
-                "python -m pip install --pre --retries 10 --upgrade pip==25.0.1 --no-cache-dir && " +
+                "python -m pip install --pre --retries 10 --upgrade pip==26.2.2 --no-cache-dir && " +
                 "python -m pip install --pre --retries 10 --upgrade tox --no-cache-dir && " +
                 "python -m pip install --pre --retries 10 --upgrade setuptools build --no-cache-dir"
           }

sdks/python/setup.py

@@ -98,7 +98,7 @@ def get_version():
 PACKAGE_EMAIL = 'dev@beam.apache.org'
 PACKAGE_KEYWORDS = 'apache beam'
 
-RECOMMENDED_MIN_PIP_VERSION = '19.3.0'
+RECOMMENDED_MIN_PIP_VERSION = '26.2.2'
 try:
   _PIP_VERSION = distribution('pip').version
   if parse(_PIP_VERSION) < parse(RECOMMENDED_MIN_PIP_VERSION):

sdks/python/tox.ini

@@ -109,7 +109,6 @@ commands =
 [testenv:py311-ml]
 # Don't set TMPDIR to avoid "AF_UNIX path too long" errors in certain tests.
 deps =
-  pip==25.0.1
   accelerate>=1.6.0
   onnx<1.19.0
 setenv =
@@ -492,7 +491,7 @@ setenv =
     # Keep in line with the transformers extra in setup.py.
     # tensorflow-hub is needed by the TensorFlow handler tests; it imports
     # pkg_resources, which was removed in setuptools 82.
-    COMMON_DEPS = 'tensorflow>=2.16,<2.22' tf-keras tensorflow-hub 'setuptools<82' sentence-transformers pip==25.0.1
+    COMMON_DEPS = 'tensorflow>=2.16,<2.22' tf-keras tensorflow-hub 'setuptools<82' sentence-transformers
     # Lower bound of the supported range.
     441: DEPS = 'transformers>=4.41.0,<4.42.0' 'torch>=2.3.0,<2.4.0'
     # Last transformers release line with TensorFlow support.