[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
virtualenv	<21.7.10 → <21.7.15

---

Release Notes

pypa/virtualenv (virtualenv)

v21.7.14

Compare Source

What's Changed

• 🐛 fix(activation): escape ! for csh history expansion by @​gaborbernat in #​3256

Full Changelog: pypa/virtualenv@21.7.13...21.7.14

v21.7.13

Compare Source

What's Changed

• 👷 ci: correct a stale checkout pin comment by @​gaborbernat in #​3254
• 🔧 chore: drop misc as a changelog fragment type by @​gaborbernat in #​3255
• 👷 ci: scope the nushell apt key to its own repo by @​gaborbernat in #​3253
• 🐛 fix(activation): stop path command injection in bash and fish by @​gaborbernat in #​3252

Full Changelog: pypa/virtualenv@21.7.12...21.7.13

v21.7.12

Compare Source

What's Changed

• 🔧 chore(changelog): drop dead CVE-2026-24049 fragment by @​gaborbernat in #​3249
• 🐛 fix(activation): escape batch quote() against injection by @​gaborbernat in #​3250
• 🐛 fix(seed): verify downloaded wheel digests by @​gaborbernat in #​3251

Full Changelog: pypa/virtualenv@21.7.11...21.7.12

v21.7.11

Compare Source

What's Changed

• Add OpenSSF Scorecard workflow by @​gaborbernat in #​3238
• Document AI-assisted contributions and licensing policy by @​gaborbernat in #​3239
• 👷 ci(release): attest and sign release provenance by @​gaborbernat in #​3242
• 👷 ci: harden Scorecard-scored checks in CI by @​gaborbernat in #​3241
• 🐛 fix(ci): parallelize graalpy tests, recover crashed workers by @​gaborbernat in #​3240
• 🐛 fix(ci): mark real-shell activation tests as slow by @​gaborbernat in #​3243
• 👷 ci: run macOS jobs on macos-26 by @​gaborbernat in #​3244
• 🐛 fix(activation): undo a live activation before activate.bat saves values by @​darrenhuai in #​3245
• 🐛 fix(create): keep pyvenv.cfg values on a single line by @​gaborbernat in #​3247
• 🔧 chore(test): add opt-in Atheris fuzz harness by @​gaborbernat in #​3246
• 📝 docs(readme): add OpenSSF Best Practices badge by @​gaborbernat in #​3248

Full Changelog: pypa/virtualenv@21.7.10...21.7.11

v21.7.10

Compare Source

What's Changed

• 🔧 chore: check spelling with typos in pre-commit by @​even-even in #​3235
• 🐛 fix(activation): keep and restore the user's TCL_LIBRARY and TK_LIBRARY by @​darrenhuai in #​3234
• 🐛 fix(create): skip blank and comment lines in pyvenv.cfg by @​r3wretrhy in #​3232
• 🐛 fix(activation): restore PKG_CONFIG_PATH that was not set before by @​darrenhuai in #​3233

New Contributors

• @​r3wretrhy made their first contribution in #​3232

Full Changelog: pypa/virtualenv@21.7.9...21.7.10

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.