Skip to content

chore(deps):(deps): bump virtualenv from 21.14.1 to 21.14.13 - #6387

Merged
daggerstuff merged 1 commit into
stagingfrom
dependabot/uv/virtualenv-21.14.13
Oct 26, 2026
Merged

daggerstuff merged 1 commit into
stagingfrom
dependabot/uv/virtualenv-21.14.13

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps virtualenv from 21.14.1 to 21.14.13.

Release notes

Sourced from virtualenv's releases.

21.14.13

Bugfixes - 21.14.13

  • Stop bash running commands from --prompt or an environment name containing $(...), backticks or a backslash after shopt -s promptvars, set -o posix, or in a child shell that inherits an exported PS1 (GHSA-cx6f-vjhg-g3cc); reported by rozzkml. zsh now draws the prompt from psvar[9], which is never parsed as shell syntax.

    Write the .venv redirect and the wheel RECORD with exclusive create, so a link planted after the existence check cannot redirect the write. On POSIX, a read-only .venv redirect that points at a virtualenv is replaced. (#3466)

PyPI release

Full Changelog: pypa/virtualenv@21.14.12...21.14.13

21.14.12

Bugfixes - 21.14.12

  • Upgrade embedded wheels:

    • setuptools to 84.2.1 from 84.0.0
    • pip to 26.2.2 from 26.2.1 (#3452)

Improved Documentation - 21.14.12

  • Require a pull request news fragment and a matching changelog section before publishing. (#3445)

PyPI release

Full Changelog: pypa/virtualenv@21.14.11...21.14.12

21.14.11

Bugfixes - 21.14.11

  • Search all directories supplied by repeated --extra-search-dir options instead of keeping only the last group. (#3440)
  • On Windows, the app data is now migrated into the nested cache directory instead of the migration failing with a warning on every run. (#3441)

PyPI release

... (truncated)

Changelog

Sourced from virtualenv's changelog.

Commits
  • 6accbd5 release 21.14.13
  • 3598e20 🐛 fix(bash): escape the prompt for every PS1 state (#3466)
  • f6512a5 release 21.14.12
  • b535726 [pre-commit.ci] pre-commit autoupdate (#3455)
  • 7e32366 Fix broken pip and code review links in the docs (#3460)
  • 632e56f Upgrade embedded pip/setuptools/wheel and CI test tools (#3452)
  • a8bd1a9 chore(deps): bump certifi from 2026.7.22 to 2026.10.19 in /tasks (#3462)
  • c82323b chore(deps): bump uv from 0.13.0 to 0.13.4 in /tasks (#3461)
  • 863ae6c chore(deps): bump the runtime-dependencies group with 3 updates (#3456)
  • 79537b3 👷 ci: pin App token action v3.3.0 (#3449)
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from daggerstuff as a code owner October 24, 2026 01:37
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 24, 2026
@vercel

vercel Bot commented Oct 24, 2026 •

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
pixelated Ignored Ignored Preview Oct 26, 2026 6:41am UTC

Request Review

@dependabot dependabot Bot added the python Pull requests that update python code label Oct 24, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 24, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: uv. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@daggerstuff

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/uv/virtualenv-21.14.13 branch from 50a642c to 60258b4 Compare October 26, 2026 06:29
@github-actions

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

Bumps [virtualenv](https://github.com/pypa/virtualenv) from 21.14.1 to 21.14.13.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.14.1...21.14.13)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 21.14.13
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/virtualenv-21.14.13 branch from 60258b4 to 0347eba Compare October 26, 2026 06:40
@github-actions

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@daggerstuff
daggerstuff merged commit 24a3a42 into staging Oct 26, 2026
30 of 32 checks passed
@daggerstuff
daggerstuff deleted the dependabot/uv/virtualenv-21.14.13 branch October 26, 2026 06:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant