[dependabot]

Bumps virtualenv from 21.11.1 to 21.12.0.

Release notes

Sourced from virtualenv's releases.

21.12.0

What's Changed

• ✨ feat(create): point a .venv redirect per PEP 832 by @​gaborbernat in pypa/virtualenv#3204

Full Changelog: pypa/virtualenv@21.11.1...21.12.0

Changelog

Sourced from virtualenv's changelog.

Features - 21.12.0

• Write the PEP 838 <https://peps.python.org/pep-0838/>_ python-version key into pyvenv.cfg, holding the target interpreter's feature release. The new :doc:reference/files page covers it alongside every other file a created environment holds - by :user:konstin. (:issue:3193)

• Point a .venv redirect file in the parent folder at the created environment, per PEP 832 <https://peps.python.org/pep-0832/>_, so editors and type checkers can find it - by :user:gaborbernat.

  • virtualenv leaves a .venv folder alone, and a redirect pointing at an environment it did not create.
  • Pass --no-venv-redirect to opt out.
  • The feature is provisional while PEP 832 is a draft: a minor or patch release may change it in backward incompatible ways to follow the PEP. (:issue:3204)

---

v21.11.1 (2026-09-23)

---

Commits

• f19165b release 21.12.0
• 554bc8f ✨ feat(create): point a .venv redirect per PEP 832 (#3204)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

PR Code Review

Scope: One-line dependency bump in pyproject.toml, virtualenv 21.11.1 → 21.12.0 (development group, pinned).

Code Quality

• ✅ Style: the change matches the existing pinned-version format.
• ✅ No commented-out code.
• ✅ Variable names: not applicable.
• ✅ DRY: no duplication introduced.
• ✅ Defects: none seen. virtualenv is a dev-only tool and is not imported at runtime, so there is no runtime risk. I did not check the 21.12.0 release notes, because there is no network access. The CI matrix (Python 3.10–3.13) should confirm that it installs everywhere.
• ✅ .claude/CLAUDE.md: not modified. It contains nothing specific to a local environment.

Testing

• ✅ Unit tests, integration tests and edge cases: not applicable to a dev-dependency bump.
• ✅ Coverage: unchanged.

Documentation

• ✅ README and API docs: no update needed.
• ⚠️ CHANGELOG.md: not updated. This is consistent with earlier Dependabot bumps (Bump flake8 from 7.3.0 to 7.4.1 #160, Bump pylint from 4.0.8 to 4.0.9 #161, Bump virtualenv from 21.10.0 to 21.11.1 #162), so it is acceptable. Add an entry if the project's convention requires one.
• ✅ Markdown: no Markdown files changed.

Security

• ✅ No hardcoded credentials.
• ✅ No input validation concerns.
• ✅ No error handling or logging changes.
• ✅ No license files (.lic) and no AQAAAD strings in the diff.

Notes

Untracked files in the working tree (pr_diff.txt, review.txt, prompt-header.md, prompt-temp.md, build-resources/) are not part of this diff. Make sure they are not committed accidentally.

Verdict

Approve. This is a low-risk, pin-only dev-dependency update.

Automated code review analyzing defects and coding standards