chore(deps): update dependency virtualenv to v21.14.7

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
virtualenv (changelog)	==21.7.13 → ==21.14.7

---

Release Notes

pypa/virtualenv (virtualenv)

v21.14.7

Compare Source

What's Changed

• Upgrade embedded pip/setuptools/wheel and CI test tools by @​github-actions[bot] in #​3385
• 🧪 test(seed): verify periodic update scheduling by @​darrenhuai in #​3384
• feat(python): default to Python 3.15 by @​gaborbernat in #​3386
• 🔧 chore: enroll in Anthropic OSS Scanner by @​gaborbernat in #​3387
• 🧪 test(util): skip safe_delete permission tests as root by @​gaborbernat in #​3389
• 📝 docs(security): add an email reporting contact by @​gaborbernat in #​3388
• 🐛 fix(activation): escape the bash prompt for both PS1 passes by @​gaborbernat in #​3390
• 🧪 test(activation): undo both bash prompt passes on bash < 4.4 by @​gaborbernat in #​3392
• 🔧 build(release): bump pydantic for 3.15 wheels by @​gaborbernat in #​3391

Full Changelog: pypa/virtualenv@21.14.6...21.14.7

v21.14.6

Compare Source

What's Changed

• 👷 ci: pin ubuntu-26.04, clear warnings, bump deps by @​gaborbernat in #​3378
• fix(ci): defer upgrades blocked by release age by @​gaborbernat in #​3379
• ci: overlap release transfers and verification by @​gaborbernat in #​3382
• 🐛 fix(seed): guard every embed update log read, not just one by @​darrenhuai in #​3383

Full Changelog: pypa/virtualenv@21.14.5...21.14.6

v21.14.5

Compare Source

What's Changed

• 🎨 style(test): mark prompt fixture locals Final by @​gaborbernat in #​3374
• 🎨 style: give every Final annotation its type by @​gaborbernat in #​3375
• 🐛 fix(ci): dump stacks from a thread that holds the GIL by @​gaborbernat in #​3377
• Reset the embed update log when it cannot be read by @​pasmud in #​3376

Full Changelog: pypa/virtualenv@21.14.4...21.14.5

v21.14.4

Compare Source

What's Changed

• Upgrade embedded pip/setuptools/wheel and CI test tools by @​github-actions[bot] in #​3372
• 📝 docs(changelog): note the zsh prompt fix by @​gaborbernat in #​3373

Full Changelog: pypa/virtualenv@21.14.3...21.14.4

v21.14.3

Compare Source

What's Changed

• ✨ feat(security): add a private vulnerability report form by @​gaborbernat in #​3370
• 📝 docs(changelog): link the 21.14.0 wheel-order fix to #​3361 by @​gaborbernat in #​3371
• Apply the whole Requires-Python specifier set in Wheel.support_py by @​pasmud in #​3369
• Upgrade embedded pip/setuptools/wheel and CI test tools by @​github-actions[bot] in #​3368

Full Changelog: pypa/virtualenv@21.14.2...21.14.3

v21.14.2

Compare Source

What's Changed

• Upgrade embedded pip/setuptools/wheel and CI test tools by @​github-actions[bot] in #​3365
• 📝 docs(changelog): note the activation security fixes by @​gaborbernat in #​3367
• 🐛 fix(create): keep non-path pyvenv.cfg values as written by @​darrenhuai in #​3366

Full Changelog: pypa/virtualenv@21.14.1...21.14.2

v21.14.1

Compare Source

What's Changed

• fix(ci): allow attestation bundle downloads by @​gaborbernat in #​3364

Full Changelog: pypa/virtualenv@21.14.0...21.14.1

v21.14.0

Compare Source

What's Changed

• 🔧 build(docs): load Mermaid 12.0.0 by @​gaborbernat in #​3335
• 👷 ci(sbom): enforce the license policy on shipped SBOMs by @​gaborbernat in #​3339
• 👷 ci(release): build the changelog without the release token by @​gaborbernat in #​3336
• 🔧 build(meta): add Tidelift and thanks.dev project URLs by @​gaborbernat in #​3340
• 👷 ci(release): pin the build backend and SBOM tools by @​gaborbernat in #​3337
• 📝 docs(development): document code review standards by @​gaborbernat in #​3341
• 📝 docs(development): add a dependency policy by @​gaborbernat in #​3342
• 📝 docs(development): add a code scanning policy by @​gaborbernat in #​3343
• 📝 docs(development): add a secrets policy by @​gaborbernat in #​3344
• 📝 docs(development): refresh the roadmap by @​gaborbernat in #​3345
• 🧪 test(fuzz): expect PowerShell curly quotes doubled by @​gaborbernat in #​3346
• 🧪 test: run tooling tests in one environment by @​gaborbernat in #​3347
• 👷 ci(release): block egress outside allowlists by @​gaborbernat in #​3338
• 🧪 test(seed): fix vacuous pip invoke assertion by @​gaborbernat in #​3348
• 👷 ci(check): combine coverage across all test runs by @​gaborbernat in #​3352
• 👷 ci(graalpy): run tests in parallel shards by @​gaborbernat in #​3351
• 🧪 test: consolidate duplicate tests by @​gaborbernat in #​3350
• 🧪 test(activation): cover factor pairs, launch Python once per phase by @​gaborbernat in #​3349
• Upgrade embedded pip/setuptools/wheel and CI test tools by @​github-actions[bot] in #​3353
• ci: bound GraalPy runtime and capture pytest hangs by @​gaborbernat in #​3354
• Upgrade embedded pip/setuptools/wheel and CI test tools by @​github-actions[bot] in #​3355
• ci: retain macOS worker crash evidence by @​gaborbernat in #​3359
• fix(seed): compare wheel versions with PEP 440 by @​pasmud in #​3361
• Upgrade embedded pip/setuptools/wheel and CI test tools by @​github-actions[bot] in #​3360
• test(ci): finish stack dumps before thread teardown by @​gaborbernat in #​3362
• fix(release): use interpreter-bound tools by @​gaborbernat in #​3363

New Contributors

• @​pasmud made their first contribution in #​3361

Full Changelog: pypa/virtualenv@21.13.0...21.14.0

v21.13.0

Compare Source

What's Changed

• 👷 ci(codeql): scan local inputs and guard activation templates by @​gaborbernat in #​3317
• 👷 ci(codeql): add regression queries for 21.7 advisories by @​gaborbernat in #​3318
• 👷 ci(upgrade): pass base to create-pull-request by @​gaborbernat in #​3320
• 👷 ci(upgrade): dispatch CI on the upgrade pull request by @​gaborbernat in #​3322
• Upgrade embedded pip/setuptools/wheel and CI test tools by @​github-actions[bot] in #​3321
• docs: correct changelog fragment types by @​januththedev in #​3324
• 🐛 fix(activation): escape PowerShell curly single quotes by @​gaborbernat in #​3325
• 👷 ci(codeql): scan the tasks scripts by @​gaborbernat in #​3327
• 👷 ci(check): gate required checks behind one job by @​gaborbernat in #​3328
• 🐛 fix(activation): stop bash re-expanding the prompt in PS1 by @​gaborbernat in #​3326
• 🔧 build(docs): pin Mermaid and bump it weekly by @​gaborbernat in #​3333
• 🔧 build(meta): add Changelog and Funding project URLs by @​gaborbernat in #​3334
• 📝 docs(release): refresh release verification docs by @​gaborbernat in #​3330
• 👷 ci(upgrade): bump the GraalPy test version weekly by @​gaborbernat in #​3332
• 👷 ci(deps): review dependency licenses and advisories on pull requests by @​gaborbernat in #​3329

New Contributors

• @​januththedev made their first contribution in #​3324

Full Changelog: pypa/virtualenv@21.12.1...21.13.0

v21.12.1

Compare Source

What's Changed

• 🐛 fix(create): limit .venv redirect to projects by @​gaborbernat in #​3316

Full Changelog: pypa/virtualenv@21.12.0...21.12.1

v21.12.0

Compare Source

What's Changed

• ✨ feat(create): point a .venv redirect per PEP 832 by @​gaborbernat in #​3204

Full Changelog: pypa/virtualenv@21.11.1...21.12.0

v21.11.1

Compare Source

What's Changed

• 📝 docs(security): close threat items resolved by 21.11.0 by @​gaborbernat in #​3313
• 🐛 fix(build): ship test inputs in the sdist and check it by @​Gonghan-Princess in #​3315

New Contributors

• @​Gonghan-Princess made their first contribution in #​3315

Full Changelog: pypa/virtualenv@21.11.0...21.11.1

v21.11.0

Compare Source

What's Changed

• ci(pre-release): disable the uv cache by @​gaborbernat in #​3288
• ci: pass expressions to run scripts via env by @​gaborbernat in #​3292
• ci(release): audit egress in build and publish by @​gaborbernat in #​3289
• 📝 docs: define maintainer roles and access by @​gaborbernat in #​3290
• ci: resolve zizmor auditor findings by @​gaborbernat in #​3297
• ci(pre-commit): freeze hook revs to commit SHAs by @​gaborbernat in #​3298
• docs: link docs and pyvideo over https by @​gaborbernat in #​3300
• docs(development): add a one-year roadmap by @​gaborbernat in #​3304
• 🐛 fix(seed): fail closed when PyPI digest is unknown by @​gaborbernat in #​3302
• ✨ feat(release): publish SBOMs as release assets by @​gaborbernat in #​3299
• docs(security): describe the project under the CRA by @​gaborbernat in #​3295
• docs(template): name the trust boundary crossed by @​gaborbernat in #​3296
• ♻️ refactor(sbom): type the SPDX renderer by @​gaborbernat in #​3307
• ✨ feat(zipapp): publish an SBOM for the zipapp by @​gaborbernat in #​3310
• 👷 ci(check): pin test tool downloads and bump them weekly by @​gaborbernat in #​3293
• 📝 docs: explain what a release publishes and how to verify it by @​gaborbernat in #​3305
• 👷 ci(release): verify the zipapp served by bootstrap.pypa.io by @​gaborbernat in #​3309
• 👷 ci(release): mint app tokens instead of a PAT by @​gaborbernat in #​3301
• 📝 docs(security): add threat model and assurance case by @​gaborbernat in #​3294
• 🐛 fix(zipapp): bundle wheels pinned by a PEP 751 lock by @​gaborbernat in #​3306
• 📝 docs(security): sync threat model with merged fixes by @​gaborbernat in #​3312
• 🐛 fix(sbom): keep the build machine out of the SBOMs by @​gaborbernat in #​3311

Full Changelog: pypa/virtualenv@21.10.0...21.11.0

v21.10.0

Compare Source

What's Changed

• feat: allow filelock 4.x on Python 3.10+ by @​r3wretrhy in #​3286
• fix(batch): reject paths altered by quoting by @​gaborbernat in #​3280
• test(upgrade): verify generator convergence by @​gaborbernat in #​3282
• ci(release): verify published artifacts by @​gaborbernat in #​3284
• fix(upgrade): isolate generation credentials by @​gaborbernat in #​3283
• feat(sbom): identify vendored packages by @​gaborbernat in #​3281

Full Changelog: pypa/virtualenv@21.9.1...21.10.0

v21.9.1

Compare Source

What's Changed

• 🐛 fix(upgrade): format generated notices by @​gaborbernat in #​3272
• fix(release): preserve partial publications by @​gaborbernat in #​3279
• docs(security): reconcile incident response by @​gaborbernat in #​3274
• fix(ci): reject unrelated GraalPy failures by @​gaborbernat in #​3275
• fix(fuzz): instrument Python targets in CI by @​gaborbernat in #​3276
• fix(upgrade): check newly added wheel ages by @​gaborbernat in #​3277
• fix(sbom): preserve format and reproducibility by @​gaborbernat in #​3278

Full Changelog: pypa/virtualenv@21.9.0...21.9.1

v21.9.0

Compare Source

What's Changed

• ✨ feat(build): add SBOM timestamp and generator metadata by @​gaborbernat in #​3269
• ✨ feat(build): make the embedded SBOM exhaustive by @​gaborbernat in #​3270

Full Changelog: pypa/virtualenv@21.8.1...21.9.0

v21.8.1

Compare Source

What's Changed

• 🐛 fix(build): make the SBOM serial number deterministic and validate its structure in CI by @​gaborbernat in #​3268

Full Changelog: pypa/virtualenv@21.8.0...21.8.1

v21.7.16

Compare Source

What's Changed

• 📝 docs(security): add an incident response plan by @​gaborbernat in #​3262
• 📝 docs(security): document both reporting lanes and scope by @​gaborbernat in #​3261
• 🐛 fix(activation): escape csh prompt expansion characters by @​gaborbernat in #​3263

Full Changelog: pypa/virtualenv@21.7.15...21.7.16

v21.7.15

Compare Source

What's Changed

• 🐛 fix(activation): restore empty saved values on deactivate by @​gaborbernat in #​3259
• 🐛 fix(activation): make csh deactivate work without test by @​gaborbernat in #​3260

Full Changelog: pypa/virtualenv@21.7.14...21.7.15

v21.7.14

Compare Source

What's Changed

• 🐛 fix(activation): escape ! for csh history expansion by @​gaborbernat in #​3256

Full Changelog: pypa/virtualenv@21.7.13...21.7.14

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[gemini-code-assist]

Code Review

This pull request updates the virtualenv dependency in the devcontainer requirements file from version 21.7.13 to 21.14.7, updating the package hashes accordingly. There are no review comments, and I have no additional feedback to provide.