Skip to content

Bump virtualenv from 21.2.4 to 21.3.0#116

Merged
docktermj merged 1 commit into
mainfrom
dependabot/pip/virtualenv-21.3.0
May 20, 2026
Merged

Bump virtualenv from 21.2.4 to 21.3.0#116
docktermj merged 1 commit into
mainfrom
dependabot/pip/virtualenv-21.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Copy link
Copy Markdown
Contributor

Bumps virtualenv from 21.2.4 to 21.3.0.

Release notes

Sourced from virtualenv's releases.

21.3.0

What's Changed

New Contributors

Full Changelog: pypa/virtualenv@21.2.4...21.3.0

Changelog

Sourced from virtualenv's changelog.

Features - 21.3.0

  • Re-introduce xonsh shell activator (activate.xsh) previously removed in 20.7.0, and make the plugin loader prefer virtualenv's built-in entry points so a third-party package cannot override them by registering a duplicate name. (:issue:3003)

Bugfixes - 21.3.0

  • Upgrade embedded wheels:

    • pip to 26.1 (:issue:3132)

v21.2.4 (2026-04-14)


Commits
  • e917cc2 release 21.3.0
  • 21152f1 Upgrade embedded pip/setuptools/wheel (#3132)
  • 096bdcd chore(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 (#3131)
  • 01610dc docs: Add usage instruction for Xonsh activation (#3130)
  • fb6ec7c 🐛 fix(test): prevent PowerShell activation test from crashing xdist workers o...
  • 6095679 [pre-commit.ci] pre-commit autoupdate (#3129)
  • 8d3179c chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#3127)
  • a159c50 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#3126)
  • 9ba729b feat: Reintroduce xonsh shell support (#3125)
  • d42ea5c 🐛 fix(type): stop ty flagging default_source on Action (#3124)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [virtualenv](https://github.com/pypa/virtualenv) from 21.2.4 to 21.3.0.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.2.4...21.3.0)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 21.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 19, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 19, 2026 17:24
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 19, 2026
@github-actions

Copy link
Copy Markdown

🤖 Claude Code Review

Code Review: virtualenv 21.2.4 → 21.3.0 bump

PR Summary: Bumps virtualenv from 21.2.4 to 21.3.0 in the development dependency group.


Code Quality

  • Style guide — Single-line change in pyproject.toml, no style concerns.
  • No commented-out code — N/A.
  • Meaningful variable names — N/A.
  • DRY principle — N/A.
  • Defects / bugs — No logic changes; pure version bump. virtualenv is a dev-only dependency (not shipped), so the blast radius is minimal. No security advisories noted for 21.2.4 → 21.3.0.
  • CLAUDE.md — No concerns; the project memory is appropriately general.

Testing

  • Unit/integration tests — No functional code changed; existing test suite is sufficient to validate the bump.
  • ⚠️ Test coverage — No evidence in the diff that CI was run against this bump. Recommend confirming the CI pipeline passes (lint, tests) before merging, since a virtualenv minor version can occasionally change environment behavior.

Documentation

  • README — No update needed; virtualenv is an internal dev tool not mentioned in user-facing docs.
  • CHANGELOG.md — Not updated, but this is a transitive/automated dependency bump — acceptable to omit for patch-level tooling changes. If the project tracks all dependency bumps in CHANGELOG, add an entry.
  • Markdown formatting — N/A.

Security

  • No hardcoded credentials — N/A.
  • No license files (.lic / AQAAAD) — None present.
  • Input validation / error handling — N/A.
  • No sensitive data in logs — N/A.

Summary

This is a clean, low-risk automated dependency bump. The only action item is confirming CI passes — particularly that the updated virtualenv does not break any test environment setup steps.

Verdict: Approve pending green CI.

Automated code review analyzing defects and coding standards

@docktermj docktermj merged commit 484ce93 into main May 20, 2026
12 checks passed
@docktermj docktermj deleted the dependabot/pip/virtualenv-21.3.0 branch May 20, 2026 12:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants