[dependabot]

Bumps virtualenv from 21.11.1 to 21.12.0.

Release notes

Sourced from virtualenv's releases.

21.12.0

What's Changed

• ✨ feat(create): point a .venv redirect per PEP 832 by @​gaborbernat in pypa/virtualenv#3204

Full Changelog: pypa/virtualenv@21.11.1...21.12.0

Changelog

Sourced from virtualenv's changelog.

Features - 21.12.0

• Write the PEP 838 <https://peps.python.org/pep-0838/>_ python-version key into pyvenv.cfg, holding the target interpreter's feature release. The new :doc:reference/files page covers it alongside every other file a created environment holds - by :user:konstin. (:issue:3193)

• Point a .venv redirect file in the parent folder at the created environment, per PEP 832 <https://peps.python.org/pep-0832/>_, so editors and type checkers can find it - by :user:gaborbernat.

  • virtualenv leaves a .venv folder alone, and a redirect pointing at an environment it did not create.
  • Pass --no-venv-redirect to opt out.
  • The feature is provisional while PEP 832 is a draft: a minor or patch release may change it in backward incompatible ways to follow the PEP. (:issue:3204)

---

v21.11.1 (2026-09-23)

---

Commits

• f19165b release 21.12.0
• 554bc8f ✨ feat(create): point a .venv redirect per PEP 832 (#3204)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

PR Review: bump virtualenv 21.11.1 → 21.12.0

The diff is a single-line dev-dependency bump in pyproject.toml:45.

Code Quality

• ✅ Style: the pin format matches the neighbouring entries.
• ✅ No commented-out code.
• ✅ Naming and DRY: not applicable to this change.
• ✅ Defects: none found. virtualenv is a development-only dependency (the development extras group), so it doesn't affect the runtime of the snippets. It is pinned exactly, like the other entries. I did not check the 21.12.0 release notes, because this run has no network access.
• ✅ .claude/CLAUDE.md: not modified. I did not check it for local-environment-specific content, because it isn't part of this diff.

Testing

• ✅ Unit and integration tests: none are needed for a version bump. The existing python/tests suite covers the snippets and doesn't depend on virtualenv.
• ✅ Edge cases and coverage: not applicable.

Documentation

• ✅ README and API docs: no updates needed.
• ⚠️ CHANGELOG.md: not updated. Previous Dependabot bumps in this repo (for example build(deps-dev): bump virtualenv from 21.10.0 to 21.11.1 #250, build(deps-dev): bump flake8 from 7.3.0 to 7.4.1 #251 and build(deps-dev): bump pylint from 4.0.8 to 4.0.9 #252) don't appear to have updated it either, so this follows the existing convention. I didn't open the file to confirm.
• ✅ Markdown: no Markdown files were changed.

Security

• ✅ No hardcoded credentials.
• ✅ No .lic files or AQAAAD strings in the diff.
• ✅ Input validation, error handling and logging: not applicable.
• ✅ The pin is exact, so the install is reproducible. Take one precaution before merging: confirm that CI passes with the new version.

Summary

Approve. This is a low-risk, dev-only dependency bump with no issues found.

Automated code review analyzing defects and coding standards

[dependabot]

Superseded by #254.