fix(deps): update dependency virtualenv to v21 [security]

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
virtualenv (changelog)	==20.39.1 → ==21.7.13

---

virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection

BIT-virtualenv-2026-102938 / CVE-2026-102938 / GHSA-9h9j-4vrj-gf7g / PYSEC-2026-4012

More information

Details

Summary

pyvenv.cfg is a line-based format with no escape syntax. PyEnvCfg.write() wrote values verbatim, while PyEnvCfg._read_values() parses the file with str.splitlines(). A value containing a line boundary therefore became additional configuration lines, and because reading is last-wins, the injected keys replaced any key written earlier in the file.

Impact

The prompt value is the reachable input: it is set by --prompt, by the VIRTUALENV_PROMPT environment variable, or from the config file, and write() emits prompt before home. A crafted prompt can therefore set home in the generated pyvenv.cfg:

$ virtualenv --prompt $'x"\nhome = /attacker/path\nprompt = "z' venv
$ grep '^home' venv/pyvenv.cfg
home = /attacker/path

home is what tooling reads to locate the base interpreter, so a consumer that trusts it can be pointed elsewhere. implementation, version_info, version, executable, command and virtualenv are also written before prompt and can be replaced the same way.

This requires the prompt to come from somewhere other than the person running the command, for example a CI job templating a branch name into it, tooling deriving an environment name from user-supplied data, or an inherited VIRTUALENV_PROMPT. Where the operator supplies the prompt directly they already control the command line, and the effect is corruption rather than privilege gain: the value is truncated at the boundary and read back with a dangling quote.

Details

The boundary set is the one str.splitlines() recognizes, which is wider than \n: \r, \v, \f, the file, group and record separators, U+0085, U+2028 and U+2029 were all written through unchanged and all split the line when read back.

Patches

PyEnvCfg.write() now collapses those boundaries to spaces as it serializes each line, so it cannot emit a structurally invalid file regardless of what a caller places in content.

Workarounds

Do not pass externally influenced data as the virtualenv prompt. Strip line boundaries from any value before using it as --prompt or VIRTUALENV_PROMPT.

Severity

• CVSS Score: 5.8 / 10 (Medium)
• Vector String: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

References

• https://github.com/pypa/virtualenv/security/advisories/GHSA-9h9j-4vrj-gf7g
• https://nvd.nist.gov/vuln/detail/CVE-2026-102938
• https://github.com/pypa/virtualenv/pull/3247
• https://github.com/pypa/virtualenv/commit/a30f995461043acb6cacbf3a890951563ccf7140
• https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4012.yaml
• https://github.com/pypa/virtualenv
• https://github.com/pypa/virtualenv/releases/tag/21.7.11
• https://pypi.org/project/virtualenv

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection

BIT-virtualenv-2026-102938 / CVE-2026-102938 / GHSA-9h9j-4vrj-gf7g / PYSEC-2026-4012

More information

Details

pyvenv.cfg is a line-based format with no escape syntax. PyEnvCfg.write()
wrote values verbatim, while PyEnvCfg._read_values() parses the file with
str.splitlines(). A value containing a line boundary therefore became
additional configuration lines, and because reading is last-wins, the injected
keys replaced any key written earlier in the file.

The prompt value is the reachable input: it is set by --prompt, by the
VIRTUALENV_PROMPT environment variable, or from the config file, and
write() emits prompt before home. A crafted prompt can therefore set
home in the generated pyvenv.cfg. home is what tooling reads to locate
the base interpreter, so a consumer that trusts it can be pointed elsewhere.
implementation, version_info, version, executable, command and
virtualenv are also written before prompt and can be replaced the same
way.

This requires the prompt to come from somewhere other than the person running
the command, for example a CI job templating a branch name into it, tooling
deriving an environment name from user-supplied data, or an inherited
VIRTUALENV_PROMPT.

The boundary set is the one str.splitlines() recognizes, which is wider than
\n: \r, \v, \f, the file, group and record separators, U+0085,
U+2028 and U+2029 were all written through unchanged and all split the
line when read back.

Fixed in 21.7.11: PyEnvCfg.write() now collapses those boundaries to spaces
as it serializes each line, so it cannot emit a structurally invalid file
regardless of what a caller places in content.

Severity

Unknown

References

• https://github.com/pypa/virtualenv/security/advisories/GHSA-9h9j-4vrj-gf7g
• https://github.com/pypa/virtualenv/pull/3247
• https://github.com/pypa/virtualenv/commit/a30f995461043acb6cacbf3a890951563ccf7140
• https://github.com/pypa/virtualenv/releases/tag/21.7.11
• https://github.com/pypa/virtualenv
• https://pypi.org/project/virtualenv

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

BIT-virtualenv-2026-102930 / CVE-2026-102930 / GHSA-94p9-xgh2-xp45 / PYSEC-2026-4011

More information

Details

download_wheel() runs pip download and hands the result straight to the seeder, with nothing checking the bytes it gets back. The embedded pip and setuptools wheels carry a BUNDLE_SHA256 that virtualenv checks on every load, but a wheel fetched over the network for the periodic-update feature or the --download flag had no equivalent verification.

A compromised index, a stale mirror, or a MITM'd download (when TLS is intercepted, e.g. via a misconfigured or malicious CA) could substitute a different wheel under the same distribution/version/filename, and virtualenv would cache and seed it into every environment created afterward with no warning.

Fixed by computing the downloaded wheel's sha256 and comparing it against the digest PyPI's public JSON API reports for that exact release, independent of which index actually served the file. The check is skipped, not treated as failure, when a custom index (PIP_INDEX_URL, PIP_EXTRA_INDEX_URL, PIP_INDEX) is configured, since a private index can legitimately serve a different, intentionally rebuilt wheel. Fix: https://github.com/pypa/virtualenv/pull/3251

Severity

• CVSS Score: 7.7 / 10 (High)
• Vector String: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

• https://github.com/pypa/virtualenv/security/advisories/GHSA-94p9-xgh2-xp45
• https://nvd.nist.gov/vuln/detail/CVE-2026-102930
• https://github.com/pypa/virtualenv/pull/3251
• https://github.com/pypa/virtualenv/commit/a01ed3e2f239d6ab1fce62c5c7664ccf268fff6d
• https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4011.yaml
• https://github.com/pypa/virtualenv
• https://github.com/pypa/virtualenv/releases/tag/21.7.12
• https://pypi.org/project/virtualenv

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

virtualenv: Command injection via --prompt in activate.bat (batch activator)

BIT-virtualenv-2026-102937 / CVE-2026-102937 / GHSA-x78j-v8h9-3j2q / PYSEC-2026-4014

More information

Details

BatchActivator.quote() returned its input unchanged, the only activator with no escaping at all. --prompt, the VIRTUALENV_PROMPT environment variable, and the config file all set the prompt, and activate.bat writes it straight into @set "VAR=value". A prompt containing a double quote closes that string early, and whatever follows runs as live cmd.exe syntax:

$ virtualenv --prompt 'x" & calc & "' venv
$ venv\Scripts\activate.bat

runs calc the moment someone activates the environment. Confirmed on a real Windows runner. Anyone who templates a prompt from untrusted input (a CI job using a branch name, a wrapper script deriving an environment name from user input) hands an attacker code execution in the shell of anyone who activates the resulting venv on Windows.

Fixed in 21.7.12 by escaping the characters cmd.exe treats as live syntax inside this construct. Fix: https://github.com/pypa/virtualenv/pull/3250

Severity

• CVSS Score: 7.3 / 10 (High)
• Vector String: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

• https://github.com/pypa/virtualenv/security/advisories/GHSA-x78j-v8h9-3j2q
• https://nvd.nist.gov/vuln/detail/CVE-2026-102937
• https://github.com/pypa/virtualenv/pull/3250
• https://github.com/pypa/virtualenv/commit/d721ff140ce4afdc2a9b76751e4584e25d9fbea6
• https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4014.yaml
• https://github.com/pypa/virtualenv
• https://github.com/pypa/virtualenv/releases/tag/21.7.12
• https://pypi.org/project/virtualenv

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

BIT-virtualenv-2026-102930 / CVE-2026-102930 / GHSA-94p9-xgh2-xp45 / PYSEC-2026-4011

More information

Details

download_wheel() runs pip download and hands the result straight to the
seeder, with nothing checking the bytes it gets back. The embedded pip and
setuptools wheels carry a BUNDLE_SHA256 that virtualenv checks on every load,
but a wheel fetched over the network for the periodic-update feature or the
--download flag had no equivalent verification.

A compromised index, a stale mirror, or a MITM'd download (when TLS is
intercepted, e.g. via a misconfigured or malicious CA) could substitute a
different wheel under the same distribution/version/filename, and virtualenv
would cache and seed it into every environment created afterward with no
warning.

Fixed in 21.7.12 by computing the downloaded wheel's sha256 and comparing it
against the digest PyPI's public JSON API reports for that exact release,
independent of which index actually served the file. The check is skipped, not
treated as failure, when a custom index (PIP_INDEX_URL,
PIP_EXTRA_INDEX_URL, PIP_INDEX) is configured, since a private index can
legitimately serve a different, intentionally rebuilt wheel.

Severity

Unknown

References

• https://github.com/pypa/virtualenv/security/advisories/GHSA-94p9-xgh2-xp45
• https://github.com/pypa/virtualenv/pull/3251
• https://github.com/pypa/virtualenv/commit/a01ed3e2f239d6ab1fce62c5c7664ccf268fff6d
• https://github.com/pypa/virtualenv/releases/tag/21.7.12
• https://github.com/pypa/virtualenv
• https://pypi.org/project/virtualenv

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

Command injection via --prompt in activate.bat (batch activator)

BIT-virtualenv-2026-102937 / CVE-2026-102937 / GHSA-x78j-v8h9-3j2q / PYSEC-2026-4014

More information

Details

BatchActivator.quote() returned its input unchanged, the only activator with
no escaping at all. --prompt, the VIRTUALENV_PROMPT environment variable,
and the config file all set the prompt, and activate.bat writes it straight
into @set "VAR=value". A prompt containing a double quote closes that string
early, and whatever follows runs as live cmd.exe syntax. For example, a venv
created with --prompt 'x" & calc & "' runs calc the moment someone runs
activate.bat.

Anyone who templates a prompt from untrusted input (a CI job using a branch
name, a wrapper script deriving an environment name from user input) hands an
attacker code execution in the shell of anyone who activates the resulting venv
on Windows.

Fixed in 21.7.12 by escaping the characters cmd.exe treats as live syntax
inside this construct.

Severity

Unknown

References

• https://github.com/pypa/virtualenv/security/advisories/GHSA-x78j-v8h9-3j2q
• https://github.com/pypa/virtualenv/pull/3250
• https://github.com/pypa/virtualenv/commit/d721ff140ce4afdc2a9b76751e4584e25d9fbea6
• https://github.com/pypa/virtualenv/releases/tag/21.7.12
• https://github.com/pypa/virtualenv
• https://pypi.org/project/virtualenv

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

virtualenv bash and fish activation scripts execute commands embedded in paths

BIT-virtualenv-2026-102925 / CVE-2026-102925 / GHSA-p58f-9548-mpm2 / PYSEC-2026-4013

More information

Details

Impact

The generated activate (bash/zsh) and activate.fish scripts interpolate a shlex.quote-ed value into a position that quotes it a second time. The extra quotes terminate the quoted run early and leave part of the value parsed as shell code, so a path containing shell metacharacters runs commands when a user sources the activation script.

activate is affected through the virtual environment's own path, on the branch that reports a relocated environment:

echo "Virtual environment directory __VIRTUAL_ENV__ does not exist!" >&2

For a destination named x'$(id)'y, shlex.quote emits 'x'"'"'$(id)'"'"'y'. The inner " closes the enclosing double quote and $(id) is left unquoted. Backtick and ; payloads reach the same result. This branch runs whenever the recorded path is absent, which is the normal case for a virtual environment copied or distributed to another machine.

activate.fish is affected through the interpreter's Tcl/Tk library paths:

set -gx TCL_LIBRARY '__TCL_LIBRARY__'

shlex.quote already returns '/tcl/(cmd)/lib', so the rendered line is ''/tcl/(cmd)/lib''. fish concatenates the adjacent quoted runs and expands the (cmd) left between them. The same doubling also splits a path containing a space into two list elements, corrupting TCL_LIBRARY and TK_LIBRARY.

This is the same defect class as GHSA-x78j-v8h9-3j2q, which covered activate.bat.

Patches

Fixed in 21.7.13 by moving the placeholders outside the surrounding quotes, so each value keeps only the quoting shlex.quote applied. Fix: https://github.com/pypa/virtualenv/pull/3252

Workarounds

Avoid creating or distributing virtual environments whose path contains ', `, $, ;, ( or ), and inspect the generated activation script before sourcing one you did not create.

Severity

• CVSS Score: 7.8 / 10 (High)
• Vector String: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

• https://github.com/pypa/virtualenv/security/advisories/GHSA-p58f-9548-mpm2
• https://nvd.nist.gov/vuln/detail/CVE-2026-102925
• https://github.com/pypa/virtualenv/pull/3252
• https://github.com/pypa/virtualenv/commit/4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6
• https://github.com/pypa/advisory-database/tree/main/vulns/virtualenv/PYSEC-2026-4013.yaml
• https://github.com/pypa/virtualenv
• https://github.com/pypa/virtualenv/releases/tag/21.7.13
• https://pypi.org/project/virtualenv

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

virtualenv bash and fish activation scripts execute commands embedded in paths

BIT-virtualenv-2026-102925 / CVE-2026-102925 / GHSA-p58f-9548-mpm2 / PYSEC-2026-4013

More information

Details

The generated activate (bash/zsh) and activate.fish scripts interpolate a
shlex.quote-ed value into a position that quotes it a second time. The extra
quotes terminate the quoted run early and leave part of the value parsed as
shell code, so a path containing shell metacharacters runs commands when a user
sources the activation script.

activate is affected through the virtual environment's own path, on the branch
that reports a relocated environment (Virtual environment directory __VIRTUAL_ENV__ does not exist!). For a destination named x'$(id)'y,
shlex.quote emits 'x'"'"'$(id)'"'"'y'; the inner " closes the enclosing
double quote and $(id) is left unquoted. This branch runs whenever the
recorded path is absent, which is the normal case for a virtual environment
copied or distributed to another machine.

activate.fish is affected through the interpreter's Tcl/Tk library paths
(set -gx TCL_LIBRARY '__TCL_LIBRARY__'). The rendered line becomes
''/tcl/(cmd)/lib'', and fish expands the (cmd) left between the adjacent
quoted runs. The same doubling splits a path containing a space into two list
elements, corrupting TCL_LIBRARY and TK_LIBRARY.

This is the same defect class as GHSA-x78j-v8h9-3j2q, which covered
activate.bat.

Fixed in 21.7.13 by moving the placeholders outside the surrounding quotes, so
each value keeps only the quoting shlex.quote applied.

Severity

• CVSS Score: 7.8 / 10 (High)
• Vector String: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

• https://github.com/pypa/virtualenv/security/advisories/GHSA-p58f-9548-mpm2
• https://github.com/pypa/virtualenv/pull/3252
• https://github.com/pypa/virtualenv/commit/4d5a105ec2a2723b8c7f4571bb68f4f71d01e3f6
• https://github.com/pypa/virtualenv/releases/tag/21.7.13
• https://github.com/pypa/virtualenv
• https://pypi.org/project/virtualenv

This data is provided by OSV and the PyPI Advisory Database (CC-BY 4.0).

---

Release Notes

pypa/virtualenv (virtualenv)

v21.7.13

Compare Source

What's Changed

• 👷 ci: correct a stale checkout pin comment by @​gaborbernat in #​3254
• 🔧 chore: drop misc as a changelog fragment type by @​gaborbernat in #​3255
• 👷 ci: scope the nushell apt key to its own repo by @​gaborbernat in #​3253
• 🐛 fix(activation): stop path command injection in bash and fish by @​gaborbernat in #​3252

Full Changelog: pypa/virtualenv@21.7.12...21.7.13

v21.7.12

Compare Source

What's Changed

• 🔧 chore(changelog): drop dead CVE-2026-24049 fragment by @​gaborbernat in #​3249
• 🐛 fix(activation): escape batch quote() against injection by @​gaborbernat in #​3250
• 🐛 fix(seed): verify downloaded wheel digests by @​gaborbernat in #​3251

Full Changelog: pypa/virtualenv@21.7.11...21.7.12

v21.7.11

Compare Source

What's Changed

• Add OpenSSF Scorecard workflow by @​gaborbernat in #​3238
• Document AI-assisted contributions and licensing policy by @​gaborbernat in #​3239
• 👷 ci(release): attest and sign release provenance by @​gaborbernat in #​3242
• 👷 ci: harden Scorecard-scored checks in CI by @​gaborbernat in #​3241
• 🐛 fix(ci): parallelize graalpy tests, recover crashed workers by @​gaborbernat in #​3240
• 🐛 fix(ci): mark real-shell activation tests as slow by @​gaborbernat in #​3243
• 👷 ci: run macOS jobs on macos-26 by @​gaborbernat in #​3244
• 🐛 fix(activation): undo a live activation before activate.bat saves values by @​darrenhuai in #​3245
• 🐛 fix(create): keep pyvenv.cfg values on a single line by @​gaborbernat in #​3247
• 🔧 chore(test): add opt-in Atheris fuzz harness by @​gaborbernat in #​3246
• 📝 docs(readme): add OpenSSF Best Practices badge by @​gaborbernat in #​3248

Full Changelog: pypa/virtualenv@21.7.10...21.7.11

v21.7.10

Compare Source

What's Changed

• 🔧 chore: check spelling with typos in pre-commit by @​even-even in #​3235
• 🐛 fix(activation): keep and restore the user's TCL_LIBRARY and TK_LIBRARY by @​darrenhuai in #​3234
• 🐛 fix(create): skip blank and comment lines in pyvenv.cfg by @​r3wretrhy in #​3232
• 🐛 fix(activation): restore PKG_CONFIG_PATH that was not set before by @​darrenhuai in #​3233

New Contributors

• @​r3wretrhy made their first contribution in #​3232

Full Changelog: pypa/virtualenv@21.7.9...21.7.10

v21.7.9

Compare Source

What's Changed

• fix(test): EncodingWarning: 'encoding' argument not specified by @​even-even in #​3228
• 🐛 fix(config): ignore a config file that fails to parse instead of crashing by @​darrenhuai in #​3230
• 🐛 fix(util): replace a stale symlink instead of writing through it by @​darrenhuai in #​3229

Full Changelog: pypa/virtualenv@21.7.8...21.7.9

v21.7.8

Compare Source

What's Changed

• 🐛 fix(create): report a missing source that both modes need by @​darrenhuai in #​3227

Full Changelog: pypa/virtualenv@21.7.7...21.7.8

v21.7.7

Compare Source

What's Changed

• 📄 docs: document the interpreter names in an environment by @​gaborbernat in #​3225
• 🎨 refactor(create): read the system exe without narrowing by @​gaborbernat in #​3224

Full Changelog: pypa/virtualenv@21.7.6...21.7.7

v21.7.6

Compare Source

What's Changed

• 🐛 fix(create): name Windows venv exes after the interpreter by @​darrenhuai in #​3223

Full Changelog: pypa/virtualenv@21.7.5...21.7.6

v21.7.5

Compare Source

What's Changed

• 🐛 fix(types): adapt to python-discovery 1.5.2 annotations by @​gaborbernat in #​3211
• 📄 docs: publish llms.txt from the docs build by @​gaborbernat in #​3210
• Push renamed changelog to PR branch in upgrade workflow by @​gaborbernat in #​3213
• 🔧 chore: batch dependency updates weekly on Tuesday by @​gaborbernat in #​3219
• docs: actualize python support version by @​even-even in #​3220
• 🐛 fix(create): check every execute bit in ExePathRef.can_run by @​darrenhuai in #​3217
• 🐛 fix(util): make safe_delete's error handler actually run by @​darrenhuai in #​3222

New Contributors

• @​even-even made their first contribution in #​3220

Full Changelog: pypa/virtualenv@21.7.4...21.7.5

v21.7.4

Compare Source

What's Changed

• Upgrade embedded pip/setuptools/wheel by @​github-actions[bot] in #​3208

Full Changelog: pypa/virtualenv@21.7.3...21.7.4

v21.7.3

Compare Source

What's Changed

• 🐛 fix(config): return a real list from ListType.split_values by @​darrenhuai in #​3207

New Contributors

• @​darrenhuai made their first contribution in #​3207

Full Changelog: pypa/virtualenv@21.7.2...21.7.3

v21.7.2

Compare Source

What's Changed

• Upgrade embedded pip/setuptools/wheel by @​github-actions[bot] in #​3206

Full Changelog: pypa/virtualenv@21.7.1...21.7.2

v21.7.1

Compare Source

What's Changed

• 📝 docs(branding): clarify official logo vs favicon by @​gaborbernat in #​3200
• Upgrade embedded pip/setuptools/wheel by @​github-actions[bot] in #​3201

Full Changelog: pypa/virtualenv@21.7.0...21.7.1

v21.7.0

Compare Source

What's Changed

• Replace prettier with mdformat and yamlfmt by @​gaborbernat in #​3190
• 👷 ci: test against Python 3.15 beta by @​gaborbernat in #​3192

Full Changelog: pypa/virtualenv@21.6.1...21.7.0

v21.6.1

Compare Source

What's Changed

• 🐛 fix(fish): harden prompt against shadowed builtins by @​gaborbernat in #​3185

Full Changelog: pypa/virtualenv@21.6.0...21.6.1

v21.6.0

Compare Source

What's Changed

• ✨ feat(create): skip distutils hook on Python 3.10+ by @​gaborbernat in #​3184

Full Changelog: pypa/virtualenv@21.5.2...21.6.0

v21.5.2

Compare Source

What's Changed

• 🐛 fix(seed): sync wheel regen script with seeder guard by @​gaborbernat in #​3175
• fix(upgrade): emit dash bullets in changelog by @​gaborbernat in #​3182
• Upgrade embedded pip/setuptools/wheel by @​github-actions[bot] in #​3180

Full Changelog: pypa/virtualenv@21.5.1...21.5.2

v21.5.1

Compare Source

What's Changed

• 🐛 fix(seed): refuse to seed unsupported Python versions by @​gaborbernat in #​3173

Full Changelog: pypa/virtualenv@21.5.0...21.5.1

v21.5.0

Compare Source

What's Changed

• Set git identity in upgrade changelog rename step by @​gaborbernat in #​3169
• Upgrade embedded pip/setuptools/wheel by @​github-actions[bot] in #​3168
• ✨ feat: drop Python 3.8 support by @​gaborbernat in #​3170

Full Changelog: pypa/virtualenv@21.4.3...21.5.0

v21.4.3

Compare Source

What's Changed

• ci: silence avoidable check workflow notices by @​gaborbernat in #​3154
• Upgrade embedded pip/setuptools/wheel by @​github-actions[bot] in #​3155
• Fish activator passes VIRTUAL_ENV through cygpath by @​LuNoX in #​3161
• Stop exporting PS1 in bash activator by @​karlhillx in #​3162
• Add wheel-0.47.0 to seed packages as mitigation of CVE-2026-24049 by @​apophizzz in #​3167
• 🐛 fix(discovery): resolve base interpreter executable-only symlinks by @​gaborbernat in #​3166

New Contributors

• @​LuNoX made their first contribution in #​3161
• @​karlhillx made their first contribution in #​3162
• @​apophizzz made their first contribution in #​3167

Full Changelog: pypa/virtualenv@21.4.2...21.4.3

v21.4.2

Compare Source

What's Changed

• 🐛 fix(activation): silence deactivate hash -r under set -e by @​gaborbernat in #​3152

Full Changelog: pypa/virtualenv@21.4.1...21.4.2

v21.4.1

Compare Source

What's Changed

• 🐛 fix(create): debug build venvlauncher lookup on Windows 3.13+ by @​gaborbernat in #​3151

Full Changelog: pypa/virtualenv@21.4.0...21.4.1

v21.4.0

Compare Source

What's Changed

• Fix Mermaid flowchart rendering by @​Herrtian in #​3147
• ♻️ refactor(create): remove dead code and document droppable paths by @​gaborbernat in #​3149
• ✨ feat(create): support Windows debug builds and remove dead code by @​gaborbernat in #​3150

New Contributors

• @​Herrtian made their first contribution in #​3147

Full Changelog: pypa/virtualenv@21.3.3...21.4.0

v21.3.3

Compare Source

What's Changed

• Accept GraalPy implementation name. by @​timfel in #​3144

Full Changelog: pypa/virtualenv@21.3.2...21.3.3

v21.3.2

Compare Source

What's Changed

• add 3.16 to embedded wheel versions by @​asottile in #​3140
• 🐛 fix(upgrade): regen embedded init with correct MAX and 3.16 by @​gaborbernat in #​3143

Full Changelog: pypa/virtualenv@21.3.1...21.3.2

v21.3.1

Compare Source

What's Changed

• 👷 ci: retry transient apt failures on Linux by @​gaborbernat in #​3139
• 🐛 fix(seed): bump embedded pip to 26.1.1 by @​gaborbernat in #​3138

Full Changelog: pypa/virtualenv@21.3.0...21.3.1

v21.3.0

Compare Source

What's Changed

• 🐛 fix(type): stop ty flagging default_source on Action by @​gaborbernat in #​3124
• feat: Reintroduce xonsh shell support by @​anki-code in #​3125
• 🐛 fix(test): prevent PowerShell activation test from crashing xdist workers on Windows by @​gaborbernat in #​3128
• docs: Add usage instruction for Xonsh activation by @​anki-code in #​3130
• Upgrade embedded pip/setuptools/wheel by @​github-actions[bot] in #​3132

New Contributors

• @​anki-code made their first contribution in #​3125

Full Changelog: pypa/virtualenv@21.2.4...21.3.0

v21.2.4

Compare Source

What's Changed

• 🐛 fix(periodic-update): refuse unverified HTTPS to PyPI by default by @​gaborbernat in #​3122
• 🐛 fix(zipapp): enforce ROOT containment with Path.relative_to by @​gaborbernat in #​3121
• 🐛 fix(seed): validate distribution and version before pip download by @​gaborbernat in #​3120
• 🐛 fix(seed): verify sha256 of bundled wheels on load by @​gaborbernat in #​3119
• 🐛 fix(seed): validate wheel zip entries before extraction by @​gaborbernat in #​3118

Full Changelog: pypa/virtualenv@21.2.3...21.2.4

v21.2.3

Compare Source

Full Changelog: pypa/virtualenv@21.2.2...21.2.3

v21.2.2

Compare Source

What's Changed

• bump python-discovery minimum to 1.2.2 by @​rahuldevikar in #​3117

Full Changelog: pypa/virtualenv@21.2.1...21.2.2

v21.2.1

Compare Source

What's Changed

• Upgrade embedded pip/setuptools/wheel by @​github-actions[bot] in #​3093
• Enhance upgrade workflow: age check, dedup, issue tracking by @​rahuldevikar in #​3094
• 🐛 fix(create): use commonpath for correct path validation by @​gaborbernat in #​3097
• 🔒 ci(workflows): add zizmor security auditing by @​gaborbernat in #​3099
• Add current and previous maintainers by @​rahuldevikar in #​3101
• 🔧 fix(ci): restore git credentials for release and upgrade jobs by @​gaborbernat in #​3102
• Fix broken Installation link in README by @​Bahtya in #​3106
• fix: use terminal width for help formatting instead of hardcoded 240 by @​Bahtya in #​3110
• 🐛 fix(nushell): surface actionable hint in deactivate error output by @​gaborbernat in #​3112
• 👷 ci: fix setup-uv warnings and drop brew@​3.9 by @​gaborbernat in #​3113
• fix(ci): fix pre-release push and release note generation by @​gaborbernat in #​3114
• fix(ci): check out repo in publish job for gh release notes by @​gaborbernat in #​3115

New Contributors

• @​github-actions[bot] made their first contribution in #​3093
• @​Bahtya made their first contribution in #​3106

Full Changelog: pypa/virtualenv@21.2.0...21.2.1

v21.2.0

Compare Source

What's Changed

• Move SECURITY.md to .github/SECURITY.md by @​gaborbernat in #​3077
• Standardize .github files to .yaml suffix by @​gaborbernat in #​3079
• Add type annotations to embed wheel generator output by @​rahuldevikar in #​3085
• fix broken README heading introduced in docs restructure by @​rahuldevikar in #​3088
• 🐛 fix(bash): use BASH_SOURCE in activate relocation by @​gaborbernat in #​3091
• 🐛 fix(create): prevent venv from racing virtualenv on gitignore creation by @​gaborbernat in #​3092

Full Changelog: pypa/virtualenv@21.1.0...21.2.0

v21.1.0

Compare Source

If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.