Skip to content

chore(deps): Bump virtualenv from 21.7.13 to 21.14.6 - #301

Merged
Debakel merged 1 commit into
mainfrom
dependabot/uv/virtualenv-21.14.6
Oct 10, 2026
Merged

Debakel merged 1 commit into
mainfrom
dependabot/uv/virtualenv-21.14.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 10, 2026

Copy link
Copy Markdown
Contributor

Bumps virtualenv from 21.7.13 to 21.14.6.

Release notes

Sourced from virtualenv's releases.

21.14.6

What's Changed

Full Changelog: pypa/virtualenv@21.14.5...21.14.6

21.14.5

What's Changed

Full Changelog: pypa/virtualenv@21.14.4...21.14.5

21.14.4

What's Changed

Full Changelog: pypa/virtualenv@21.14.3...21.14.4

21.14.3

What's Changed

Full Changelog: pypa/virtualenv@21.14.2...21.14.3

21.14.2

What's Changed

... (truncated)

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.14.6

  • Fall back to the bundled seed wheel with periodic update on (the default) when the embed update log holds JSON of the wrong shape, instead of downloading the wheel or, offline, failing to create the environment - by :user:darrenhuai. (:issue:3383)

v21.14.5 (2026-10-02)


Bugfixes - 21.14.5

  • Fall back to the bundled seed wheel and remove the embed update log when the log in the app data folder holds JSON of the wrong shape, instead of failing to create the environment - by :user:pasmud. (:issue:3376)

v21.14.4 (2026-10-02)


Bugfixes - 21.14.4

  • Fix activate running commands from a virtual environment name or --prompt that holds $(...), backticks or ${...} when zsh has PROMPT_SUBST set, and show a % in the name as typed under zsh (GHSA-5vjq-rrrf-7h2q <https://github.com/pypa/virtualenv/security/advisories/GHSA-5vjq-rrrf-7h2q>_); reported by :user:kemrec. (:issue:3373)

v21.14.3 (2026-10-01)


Bugfixes - 21.14.3

  • Honor ~= and every clause of a seed wheel's Requires-Python when picking a wheel for the target Python, and skip a wheel whose Requires-Python is not a valid specifier instead of failing - by :user:pasmud. (:issue:3369)

v21.14.2 (2026-10-01)


Bugfixes - 21.14.2

  • Fix pyvenv.cfg getting an absolute path in python-version, include-system-site-packages and the other keys that hold no path when the working directory has an entry named like the value, such as 3.14 for virtualenv 3.14 or true with --system-site-packages - by :user:darrenhuai. (:issue:3366)

... (truncated)

Commits
  • 9e69ac7 release 21.14.6
  • 464c34b 🐛 fix(seed): guard every embed update log read, not just one (#3383)
  • 3f56d7f ci: overlap release transfers and verification (#3382)
  • 7577efd chore(deps): bump the runtime-dependencies group with 10 updates (#3381)
  • f6d1723 [pre-commit.ci] pre-commit autoupdate (#3380)
  • 7c56749 fix(ci): defer upgrades blocked by release age (#3379)
  • 95d0252 👷 ci: pin ubuntu-26.04, clear warnings, bump deps (#3378)
  • 571bc20 release 21.14.5
  • 5b9b7de Reset the embed update log when it cannot be read (#3376)
  • 9fd48c8 🐛 fix(ci): dump stacks from a thread that holds the GIL (#3377)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [virtualenv](https://github.com/pypa/virtualenv) from 21.7.13 to 21.14.6.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.7.13...21.14.6)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 21.14.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 10, 2026
@Debakel
Debakel merged commit 7045863 into main Oct 10, 2026
3 checks passed
@Debakel
Debakel deleted the dependabot/uv/virtualenv-21.14.6 branch October 10, 2026 20:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant