[dependabot]

Bumps virtualenv from 21.11.1 to 21.12.1.

Release notes

Sourced from virtualenv's releases.

21.12.1

What's Changed

• 🐛 fix(create): limit .venv redirect to projects by @​gaborbernat in pypa/virtualenv#3316

Full Changelog: pypa/virtualenv@21.12.0...21.12.1

21.12.0

What's Changed

• ✨ feat(create): point a .venv redirect per PEP 832 by @​gaborbernat in pypa/virtualenv#3204

Full Changelog: pypa/virtualenv@21.11.1...21.12.0

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.12.1

• Limit the :PEP:832 .venv redirect to folders holding a pyproject.toml and no .venv yet, so virtualenv foo in a scratch folder, and tools such as tox or nox building environments through virtualenv, no longer claim a folder's default environment - by :user:gaborbernat.

  • --venv-redirect writes the redirect in any folder and replaces an earlier virtualenv redirect.
  • A flag on the command line overrides the environment variable and the config file in either direction. (:issue:3316)

---

v21.12.0 (2026-09-24)

---

Features - 21.12.0

• Write the PEP 838 <https://peps.python.org/pep-0838/>_ python-version key into pyvenv.cfg, holding the target interpreter's feature release. The new :doc:reference/files page covers it alongside every other file a created environment holds - by :user:konstin. (:issue:3193)

• Point a .venv redirect file in the parent folder at the created environment, per PEP 832 <https://peps.python.org/pep-0832/>_, so editors and type checkers can find it - by :user:gaborbernat.

  • virtualenv leaves a .venv folder alone, and a redirect pointing at an environment it did not create.
  • Pass --no-venv-redirect to opt out.
  • The feature is provisional while PEP 832 is a draft: a minor or patch release may change it in backward incompatible ways to follow the PEP. (:issue:3204)

---

v21.11.1 (2026-09-23)

---

Commits

• befec5e release 21.12.1
• 572d159 🐛 fix(create): limit .venv redirect to projects (#3316)
• f19165b release 21.12.0
• 554bc8f ✨ feat(create): point a .venv redirect per PEP 832 (#3204)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

PR Review: bump virtualenv 21.11.1 → 21.12.1

This is a one-line dev-dependency bump in pyproject.toml:45, in the development extras. I reviewed it from the diff alone and didn't open the repo.

Code Quality

• ✅ Style: The change matches the surrounding pinned-version entries.
• ✅ No commented-out code.
• ✅ Variable names: Not applicable.
• ✅ DRY: No duplication.
• ✅ Defects: The pin is exact (==), like its neighbours, so installs stay reproducible. virtualenv is dev-only and isn't imported by the snippets, so it can't affect runtime behavior. I didn't check the upstream release notes for 21.12.1.
• ✅ .claude/CLAUDE.md: Not modified. The existing file contains no local-environment-specific content.

Testing

• ✅ Unit and integration tests: Not applicable to a tooling bump. CI should confirm that the dev environment still installs and that python/tests still passes.
• ✅ Edge cases: Not applicable.
• ✅ Coverage: Unchanged.

Documentation

• ✅ README and API docs: No update needed.
• ⚠️ CHANGELOG.md: It isn't updated. Dependabot-style dev-dependency bumps usually don't get entries. The recent virtualenv and flake8 bumps in the git log (build(deps-dev): bump virtualenv from 21.10.0 to 21.11.1 #250–build(deps-dev): bump pylint from 4.0.8 to 4.0.9 #252) suggest the project follows that convention, but I didn't check CHANGELOG.md itself.
• ✅ Markdown: No Markdown files changed.

Security

• ✅ No hardcoded credentials, license files (.lic) or AQAAAD strings.
• ✅ Input validation, error handling and logging: Not applicable.
• ✅ Supply chain: This is a version bump of a well-known package, pinned exactly, and the diff contains nothing else.

Verdict

✅ Approve. It's a low-risk, dev-only bump. Merge once CI is green.

Automated code review analyzing defects and coding standards

[dependabot]

Superseded by #255.