Skip to content

Bump virtualenv from 21.7.8 to 21.7.13 - #805

Merged
Hananel-Hazan merged 1 commit into
masterfrom
dependabot/pip/virtualenv-21.7.13
Oct 2, 2026
Merged

Hananel-Hazan merged 1 commit into
masterfrom
dependabot/pip/virtualenv-21.7.13

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps virtualenv from 21.7.8 to 21.7.13.

Release notes

Sourced from virtualenv's releases.

21.7.13

What's Changed

Full Changelog: pypa/virtualenv@21.7.12...21.7.13

21.7.12

What's Changed

Full Changelog: pypa/virtualenv@21.7.11...21.7.12

21.7.11

What's Changed

Full Changelog: pypa/virtualenv@21.7.10...21.7.11

21.7.10

What's Changed

... (truncated)

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.7.13

  • Fix activate and activate.fish running commands embedded in the virtual environment path or in the interpreter's Tcl/Tk library paths. (:issue:3252)

v21.7.12 (2026-09-18)


Bugfixes - 21.7.12

  • Fix activate.bat running arbitrary commands from a crafted --prompt, VIRTUALENV_PROMPT, or config file value. (:issue:3250)
  • Verify a downloaded seed wheel's sha256 against PyPI before seeding it into a virtual environment, skipped when a custom pip index is configured. (:issue:3251)

v21.7.11 (2026-09-17)


Bugfixes - 21.7.11

  • Running activate.bat again before deactivate no longer makes deactivate leave the environment's PKG_CONFIG_PATH, TCL_LIBRARY and TK_LIBRARY behind, or lose values the user had set before the first activation - by :user:darrenhuai. (:issue:3245)
  • Write pyvenv.cfg values on a single line, so a prompt carrying a line boundary can no longer inject configuration. --prompt, the VIRTUALENV_PROMPT environment variable and the config file all set the prompt, and pyvenv.cfg has no escape syntax, so a newline, a carriage return, or any other boundary str.splitlines recognizes, such as U+2028, started a new configuration line. Reading the file back picked up those lines as keys, and since the last value for a key wins, they replaced anything written earlier, including home. (:issue:3247)

Improved Documentation - 21.7.11

  • Document the policy for AI-assisted contributions and the licensing rules for dependencies. (:issue:3239)

Misc - 21.7.11

  • :issue:3238, :issue:3240, :issue:3241, :issue:3242, :issue:3243, :issue:3244, :issue:3246

v21.7.10 (2026-09-15)


Bugfixes - 21.7.10

... (truncated)

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 2, 2026
@Hananel-Hazan

Copy link
Copy Markdown
Collaborator

@dependabot fix

Hananel-Hazan added a commit that referenced this pull request Oct 2, 2026
…ult (#807)

The cu130 torch build pinned in poetry.lock sometimes segfaults in
torch._preload_cuda_lib on GPU-less runners (seen on master 7cac0c3 and
Dependabot PRs #804/#805). After poetry install, reinstall the same
torch/torchvision versions from the CPU wheel index and assert the
build has no CUDA.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
@Hananel-Hazan

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [virtualenv](https://github.com/pypa/virtualenv) from 21.7.8 to 21.7.13.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.7.8...21.7.13)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 21.7.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/virtualenv-21.7.13 branch from 3ca0699 to 14bd7bf Compare October 2, 2026 12:58
@Hananel-Hazan
Hananel-Hazan merged commit fbb7e4b into master Oct 2, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/virtualenv-21.7.13 branch October 2, 2026 13:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant