Repository navigation
Bump virtualenv to 21.14.13 (GHSA-cx6f-vjhg-g3cc) #82
Description
Summary
Dependabot proposes bumping the locked virtualenv dependency from 21.7.13 to 21.14.13.
Why
Includes security fixes (notably GHSA-cx6f-vjhg-g3cc: bash prompt injection / exclusive create for .venv redirect and wheel RECORD). This is a development/tooling lockfile dependency (uv.lock), not a runtime library change for py-multihash users.
Tracking
Handled by Dependabot PR #80.
Activity
Add newsfragment for virtualenv bump (#82)