[pull] master from aio-libs:master - #778

Merged

pull[bot] merged 1 commit into

tj-python:masterfrom

aio-libs:master

Sep 25, 2026

pull Bot commented Sep 25, 2026 •

edited

Loading

See Commits and Changes for more details.

Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )


          Bump virtualenv from 21.9.0 to 21.9.1 (#13814)

36ca3b1

Bumps [virtualenv](https://github.com/pypa/virtualenv) from 21.9.0 to
21.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/virtualenv/releases">virtualenv's
releases</a>.</em></p>
<blockquote>
<h2>21.9.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>🐛 fix(upgrade): format generated notices by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3272">pypa/virtualenv#3272</a></li>
<li>fix(release): preserve partial publications by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3279">pypa/virtualenv#3279</a></li>
<li>docs(security): reconcile incident response by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3274">pypa/virtualenv#3274</a></li>
<li>fix(ci): reject unrelated GraalPy failures by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3275">pypa/virtualenv#3275</a></li>
<li>fix(fuzz): instrument Python targets in CI by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3276">pypa/virtualenv#3276</a></li>
<li>fix(upgrade): check newly added wheel ages by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3277">pypa/virtualenv#3277</a></li>
<li>fix(sbom): preserve format and reproducibility by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3278">pypa/virtualenv#3278</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pypa/virtualenv/compare/21.9.0...21.9.1">https://github.com/pypa/virtualenv/compare/21.9.0...21.9.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst">virtualenv's
changelog</a>.</em></p>
<blockquote>
<h1>Bugfixes - 21.9.1</h1>
<ul>
<li>Correct SBOM CSV parsing and unresolved dependency relationships,
and omit CI run identifiers from reproducible
builds. (:issue:<code>3278</code>)</li>
</ul>
<hr />
<p>v21.9.0 (2026-09-20)</p>
<hr />
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/virtualenv/commit/4f09d426aba3e07981d5003fe6daee77c1160ff8"><code>4f09d42</code></a>
release 21.9.1</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/7b5611d2d8767414ff48218ea52ebcff58d5e46b"><code>7b5611d</code></a>
fix(sbom): preserve format and reproducibility (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3278">#3278</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/ee7b3f35abf9e2f9e7d04b4b1ecf3ea65806e40c"><code>ee7b3f3</code></a>
fix(upgrade): check newly added wheel ages (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3277">#3277</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/34b65c0750fd6da1b1576650ce88eb8a79710f35"><code>34b65c0</code></a>
fix(fuzz): instrument Python targets in CI (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3276">#3276</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/af32afa77f5a3bba978dfaf14d61211f14420ee3"><code>af32afa</code></a>
fix(ci): reject unrelated GraalPy failures (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3275">#3275</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/a14d50813bcf04f54139d6812374835037359c4a"><code>a14d508</code></a>
docs(security): reconcile incident response (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3274">#3274</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/027535d22cdf9990b2c540eddb40bcc3ffde4155"><code>027535d</code></a>
fix(release): preserve partial publications (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3279">#3279</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/82f9ec70c8462296df5631790183c4386b480639"><code>82f9ec7</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3273">#3273</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/72e190685e234ff0add1d427cd4b7e1a3e4eaf1f"><code>72e1906</code></a>
🐛 fix(upgrade): format generated notices (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3272">#3272</a>)</li>
<li>See full diff in <a
href="https://github.com/pypa/virtualenv/compare/21.9.0...21.9.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=virtualenv&package-manager=pip&previous-version=21.9.0&new-version=21.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

pull Bot locked and limited conversation to collaborators

pull Bot added the ⤵️ pull label

pull Bot merged commit 36ca3b1 into tj-python:master

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels