Skip to content

chore(deps): bump virtualenv from 21.13.0 to 21.14.3 - #264

Merged
amrit110 merged 1 commit into
mainfrom
dependabot/uv/virtualenv-21.14.3
Oct 6, 2026
Merged

amrit110 merged 1 commit into
mainfrom
dependabot/uv/virtualenv-21.14.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor

Bumps virtualenv from 21.13.0 to 21.14.3.

Release notes

Sourced from virtualenv's releases.

21.14.3

What's Changed

Full Changelog: pypa/virtualenv@21.14.2...21.14.3

21.14.2

What's Changed

Full Changelog: pypa/virtualenv@21.14.1...21.14.2

21.14.1

What's Changed

Full Changelog: pypa/virtualenv@21.14.0...21.14.1

21.14.0

What's Changed

... (truncated)

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.14.3

  • Honor ~= and every clause of a seed wheel's Requires-Python when picking a wheel for the target Python, and skip a wheel whose Requires-Python is not a valid specifier instead of failing - by :user:pasmud. (:issue:3369)

v21.14.2 (2026-10-01)


Bugfixes - 21.14.2

  • Fix pyvenv.cfg getting an absolute path in python-version, include-system-site-packages and the other keys that hold no path when the working directory has an entry named like the value, such as 3.14 for virtualenv 3.14 or true with --system-site-packages - by :user:darrenhuai. (:issue:3366)
  • Fix activation scripts running code from a virtual environment path whose parent directory carries a placeholder name such as __VIRTUAL_NAME__ (GHSA-8rjx-v5ww-45pp <https://github.com/pypa/virtualenv/security/advisories/GHSA-8rjx-v5ww-45pp>), and activate.fish running commands from a path or --prompt that holds a backslash before a single quote (GHSA-c947-3pg5-gm8q <https://github.com/pypa/virtualenv/security/advisories/GHSA-c947-3pg5-gm8q>); both reported by :user:Kwstubbs of GitHub Security Lab. (:issue:3367)

v21.14.1 (2026-09-29)


No significant changes.


v21.14.0 (2026-09-29)


Features - 21.14.0

  • Record the SPDX license id in the wheel and zipapp SBOMs for bundled packages that declare their license by name or classifier, such as distlib and python-discovery, so license scanners can match them. (:issue:3339)
  • Add the Tidelift and thanks.dev funding links to the PyPI project URLs, next to GitHub Sponsors - by :user:gaborbernat. (:issue:3340)

Bugfixes - 21.14.0

  • Build the release sdist, wheel and zipapp with the build backend and SBOM tools that tasks/release-requirements.txt pins by version and SHA-256, so a rebuild of the tag uses the same versions. (:issue:3337)
  • Use PEP 440 version ordering when selecting seed wheels, so pinned pre-releases, post-releases and local versions resolve to the requested wheel. (:issue:3361)

... (truncated)

Commits
  • fe14686 release 21.14.3
  • 85db059 Upgrade embedded pip/setuptools/wheel and CI test tools (#3368)
  • 40d94e3 Apply the whole Requires-Python specifier set in Wheel.support_py (#3369)
  • 03643d5 📝 docs(changelog): link the 21.14.0 wheel-order fix to #3361 (#3371)
  • 3bd51f5 ✨ feat(security): add a private vulnerability report form (#3370)
  • a6bdda0 release 21.14.2
  • 9916be9 🐛 fix(create): keep non-path pyvenv.cfg values as written (#3366)
  • 415224a 📝 docs(changelog): note the activation security fixes (#3367)
  • 602b266 Merge commit from fork
  • 3bddeaf Merge commit from fork
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [virtualenv](https://github.com/pypa/virtualenv) from 21.13.0 to 21.14.3.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.13.0...21.14.3)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 21.14.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 5, 2026
@amrit110
amrit110 merged commit 5973a6a into main Oct 6, 2026
3 checks passed
@amrit110
amrit110 deleted the dependabot/uv/virtualenv-21.14.3 branch October 6, 2026 00:47
@amrit110

amrit110 commented Oct 6, 2026

Copy link
Copy Markdown
Member

Automated fix applied and PR merged

The agentic fix loop successfully fixed this PR and merged it.

✓ Successfully fixed merge_only failures - Modified 0 files - Executed 97 agent actions - (64 info, 16 tool_call, 1 error, 13 tool_result, 3 reasoning)

View PR history on dashboard

AI Engineering Maintenance Bot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant