Move virtualenv to 21.14.12, past its new advisories #1030

Merged

tiagoagueda merged 1 commit from audit-virtualenv into main

2026-10-21 21:37:59 +00:00

tiagoagueda commented

2026-10-21 18:38:51 +00:00

Owner

pip-audit --strict over the exported lock names two advisories published since the last audit: CVE-2026-113725 and CVE-2026-113726 against virtualenv 21.14.2 (fixed in 21.14.4 and 21.14.7). The security audit's push run failed on #1014's branch for it, and fails on main.

What changed

uv lock --upgrade-package virtualenv: virtualenv 21.14.2 to 21.14.12, and python-discovery 1.6.0 to 1.6.4 with it. Nothing else.

Tests

pip-audit --strict over the new export: no known vulnerabilities (the same command CI runs). npm audit --audit-level=high reports none.

Library check

None needed.

🤖 Generated with Claude Code

`pip-audit --strict` over the exported lock names two advisories published since the last audit: CVE-2026-113725 and CVE-2026-113726 against virtualenv 21.14.2 (fixed in 21.14.4 and 21.14.7). The security audit's push run failed on #1014's branch for it, and fails on `main`. ## What changed `uv lock --upgrade-package virtualenv`: virtualenv 21.14.2 to 21.14.12, and python-discovery 1.6.0 to 1.6.4 with it. Nothing else. ## Tests `pip-audit --strict` over the new export: no known vulnerabilities (the same command CI runs). `npm audit --audit-level=high` reports none. ## Library check None needed. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

tiagoagueda added 1 commit

2026-10-21 18:38:51 +00:00

Move virtualenv to 21.14.12, past its new advisories

CI / Unit tests and coverage (Python 3.14) (pull_request) Successful in 13m37s

Details

CI / Checks: lint, migrations, catalogues, settings, built files (pull_request) Successful in 2m29s

Details

CI / Database tests on PostgreSQL (pull_request) Successful in 3m47s

Details

CI / Security audit (pull_request) Successful in 55s

Details

CI / Browser tests (Chromium) (pull_request) Successful in 29m59s

Details

b13d0b9c70

pip-audit names CVE-2026-113725 and CVE-2026-113726 against virtualenv 21.14.2. The security
audit's push run failed on the branch of #1014 because of them, and fails on main too.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

tiagoagueda merged commit 80294f630c into main

2026-10-21 21:37:59 +00:00

tiagoagueda deleted branch audit-virtualenv

2026-10-21 21:37:59 +00:00

tiagoagueda referenced this pull request from a commit

2026-10-21 21:38:00 +00:00

Move virtualenv to 21.14.12, past its new advisories (#1030)