[dependabot]

Bumps virtualenv from 21.14.13 to 21.15.1.

Release notes

Sourced from virtualenv's releases.

21.15.1

Bug fixes

• Keep the name of a seeded console_scripts entry that contains digits but does not end in a version, such as python3-config or 2to3, instead of truncating it at the first digit; python3-config overwrote the environment's python executable (#3451) by @​JingHao-Leon and @​gaborbernat.
• Copy the content of a symlinked directory when a tree is copied into an environment, instead of dropping it (#3454) by @​JingHao-Leon and @​gaborbernat.
• Count each -v, -q, -p and --try-first-with option once instead of once per internal parsing pass, so Session.verbosity is 3 rather than 9 for a single -v (#3457) by @​darrenhuai and @​gaborbernat.
• Copy the seed packages instead of failing when VIRTUALENV_SYMLINK_APP_DATA or symlink_app_data in the config file turns on symlink seeding on a host that cannot create symlinks, such as Windows without the symlink privilege (#3465) by @​darrenhuai and @​gaborbernat.
• Run the interpreter that collects the target debug information (-vv output and Creator.debug) without PYTHONPATH and with the environment passed to cli_run, so the reported sys.path no longer lists the caller's PYTHONPATH entries (#3474) by @​RaphaelFakhri and @​gaborbernat.

New Contributors

• @​JingHao-Leon made their first contribution in pypa/virtualenv#3454
• @​RaphaelFakhri made their first contribution in pypa/virtualenv#3474
• @​FliegendeWurst made their first contribution in pypa/virtualenv#3468

PyPI release

Full Changelog

21.15.0

Features

• Bundle dependencies for Python 3.15 in the standalone zipapp and stop bundling Python 3.8, which is outside the package's supported range (#3458) by @​gaborbernat.

Packaging

• Publish GitHub Releases with categorized notes from the tagged changelog, retaining the zipapp, SBOM, and PyPI links (#3458) by @​gaborbernat.

🐍 PyPI release

📜 Full Changelog

Changelog

Sourced from virtualenv's changelog.

################# Release History #################

.. towncrier-draft-entries:: [UNRELEASED DRAFT]

.. towncrier release notes start

.. _release-21-15-2:

---

21.15.2 (2026-10-30)

---

.. _release-21-15-2-fixed:

Fixed

• Build the default application data folder only when no folder was given through --app-data, VIRTUALENV_APP_DATA or the configuration file, so --read-only-app-data with an explicit folder works when the default folder is missing, and writable runs stop creating an unused one. Folders from VIRTUALENV_APP_DATA and the configuration file now get the same checks as --app-data (:pr:3488) by :user:darrenhuai and :user:gaborbernat.
• Build the seed wheel image in a staging folder and move it into place only once it is complete, so an extraction that fails part way, for example on a full disk, after a killed process or on a path over the Windows length limit, no longer leaves a partial image that later runs seed as a pip without METADATA, RECORD or INSTALLER (:pr:3487) by :user:darrenhuai and :user:gaborbernat.
• Make -p/--python and --try-first-with replace the interpreters set by VIRTUALENV_PYTHON, VIRTUALENV_TRY_FIRST_WITH or the configuration file instead of being merged with them, so the configured interpreter no longer wins over the one asked for and a -p that finds nothing fails instead of falling back to it. Try several VIRTUALENV_PYTHON values in the order given rather than starting with the second (:pr:3494) by :user:darrenhuai and :user:gaborbernat.
• On Windows, re-create an environment in place when its copied interpreter files, such as python.exe, or its seeded packages are read-only, instead of failing with PermissionError (:pr:3492) by :user:darrenhuai and :user:gaborbernat.
• Reject an empty or whitespace-only destination. An empty one, and on Windows one made only of spaces, resolved to the current directory, so an unset VENV in virtualenv --clear "$VENV" deleted the working directory. Pass . to create the environment in the current directory (:pr:3491) by :user:darrenhuai and :user:gaborbernat.
• Restore the default prompt in deactivate.bat when PROMPT was undefined at activation, instead of leaving the environment name in front of it (:pr:3489) by :user:darrenhuai.
• Undefine PATH again in deactivate.bat when it was undefined at activation, instead of leaving the environment's Scripts folder on it, and stop a second activate.bat from adding that folder twice (:pr:3493) by :user:darrenhuai and :user:gaborbernat.

.. _release-21-15-1:

---

21.15.1 (2026-10-28)

---

... (truncated)

Commits

• d46a1e2 release 21.15.1
• 15a9c35 🐛 fix(seed): keep console script names that are not version suffixes (#3451)
• b6aff2b 🐛 fix(seed): copy seed packages when symlinks are unsupported (#3465)
• 9b3883e 🐛 fix(config): stop CLI options accumulating across parse passes (#3457)
• 784cb1b 📝 docs: fix dead links in two code comments (#3463)
• b539794 🧪 test(activation): use bash from PATH (#3468)
• e899805 ♻️ refactor(path): drop the copytree forwarder (#3480)
• 3def145 🐛 fix(create): drop PYTHONPATH from the debug interpreter (#3474)
• 852e6e3 🐛 fix(path): copy the content of a symlinked directory (#3454)
• e52dc49 👷 ci(release): pin github-workflows 6.2.1 (#3479)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[babenek]

LGTM