1. 72e1906 🐛 fix(upgrade): format generated notices (#3272) by Bernát Gábor · 14 hours ago main
  2. 1f6750c release 21.9.0 by Bernát Gábor · 34 hours ago 21.9.0
  3. 7549b43 ✨ feat(build): make the embedded SBOM exhaustive (#3270) by Bernát Gábor · 2 days ago
  4. f4f69f8 ✨ feat(build): add SBOM timestamp and generator metadata (#3269) by Bernát Gábor · 2 days ago
  5. ab0e25f release 21.8.1 by Bernát Gábor · 2 days ago 21.8.1
  6. 1d28796 🐛 fix(build): make the SBOM serial number deterministic and validate its structure in CI (#3268) by Bernát Gábor · 2 days ago
  7. a8b7f0a chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-actions group (#3267) by dependabot[bot] · 2 days ago
  8. da2aacc release 21.8.0 by Bernát Gábor · 2 days ago 21.8.0
  9. 3d3537e 🔧 chore(deps): watch pip ecosystem with Dependabot (#3264) by Bernát Gábor · 2 days ago
  10. 777dc41 ✨ feat(build): ship a CycloneDX SBOM in every wheel (#3265) by Bernát Gábor · 2 days ago
  11. 3e95492 ✨ feat(build): publish a third-party notices file (#3266) by Bernát Gábor · 2 days ago
  12. 4c946c2 release 21.7.16 by Bernát Gábor · 2 days ago 21.7.16
  13. 630ae10 🐛 fix(activation): escape csh prompt expansion characters (#3263) by Bernát Gábor · 2 days ago
  14. 496e8c9 📝 docs(security): document both reporting lanes and scope (#3261) by Bernát Gábor · 2 days ago
  15. 8560652 📝 docs(security): add an incident response plan (#3262) by Bernát Gábor · 2 days ago
  16. 502d383 release 21.7.15 by Bernát Gábor · 2 days ago 21.7.15
  17. fc2f35f 🐛 fix(activation): make csh deactivate work without test (#3260) by Bernát Gábor · 2 days ago
  18. ee55cc2 🐛 fix(activation): restore empty saved values on deactivate (#3259) by Bernát Gábor · 2 days ago
  19. 9baea3c release 21.7.14 by Bernát Gábor · 3 days ago 21.7.14
  20. ab3dcff 🐛 fix(activation): escape ! for csh history expansion (#3256) by Bernát Gábor · 3 days ago
  21. 0c295ff release 21.7.13 by Bernát Gábor · 3 days ago 21.7.13
  22. 4d5a105 🐛 fix(activation): stop path command injection in bash and fish (#3252) by Bernát Gábor · 3 days ago
  23. 0525dce 👷 ci: scope the nushell apt key to its own repo (#3253) by Bernát Gábor · 3 days ago
  24. aa8323a 🔧 chore: drop misc as a changelog fragment type (#3255) by Bernát Gábor · 3 days ago
  25. a435477 👷 ci: correct a stale checkout pin comment (#3254) by Bernát Gábor · 3 days ago
  26. 9666b42 release 21.7.12 by Bernát Gábor · 3 days ago 21.7.12
  27. a01ed3e 🐛 fix(seed): verify downloaded wheel digests (#3251) by Bernát Gábor · 3 days ago
  28. d721ff1 🐛 fix(activation): escape batch quote() against injection (#3250) by Bernát Gábor · 3 days ago
  29. 087a2ef 🔧 chore(changelog): drop dead CVE-2026-24049 fragment (#3249) by Bernát Gábor · 4 days ago
  30. 73e352a release 21.7.11 by Bernát Gábor · 4 days ago 21.7.11
  31. 68ee5a3 📝 docs(readme): add OpenSSF Best Practices badge (#3248) by Bernát Gábor · 4 days ago
  32. 787d1c9 🔧 chore(test): add opt-in Atheris fuzz harness (#3246) by Bernát Gábor · 4 days ago
  33. a30f995 🐛 fix(create): keep pyvenv.cfg values on a single line (#3247) by Bernát Gábor · 4 days ago
  34. 469dd28 🐛 fix(activation): undo a live activation before activate.bat saves values (#3245) by darrenhuai · 4 days ago
  35. a045a14 👷 ci: run macOS jobs on macos-26 (#3244) by Bernát Gábor · 4 days ago
  36. 7c1991e 🐛 fix(ci): mark real-shell activation tests as slow (#3243) by Bernát Gábor · 4 days ago
  37. 13ed8cc 🐛 fix(ci): parallelize graalpy tests, recover crashed workers (#3240) by Bernát Gábor · 4 days ago
  38. e13bb21 👷 ci: harden Scorecard-scored checks in CI (#3241) by Bernát Gábor · 4 days ago
  39. 18a239d 👷 ci(release): attest and sign release provenance (#3242) by Bernát Gábor · 4 days ago
  40. 0c2fcaf Document AI-assisted contributions and licensing policy (#3239) by Bernát Gábor · 4 days ago
  41. 903d05d Add OpenSSF Scorecard workflow (#3238) by Bernát Gábor · 4 days ago
  42. 7af3724 release 21.7.10 by Bernát Gábor · 5 days ago 21.7.10
  43. f90e927 🐛 fix(activation): restore PKG_CONFIG_PATH that was not set before (#3233) by darrenhuai · 5 days ago
  44. b5bd520 🐛 fix(create): skip blank and comment lines in pyvenv.cfg (#3232) by Zhaoqi Xu · 5 days ago
  45. 973298a 🐛 fix(activation): keep and restore the user's TCL_LIBRARY and TK_LIBRARY (#3234) by darrenhuai · 5 days ago
  46. a438d8a 🔧 chore: check spelling with typos in pre-commit (#3235) by Vladimir Roshchin · 5 days ago
  47. ca4025d [pre-commit.ci] pre-commit autoupdate (#3236) by pre-commit-ci[bot] · 7 days ago
  48. abd3829 release 21.7.9 by Bernát Gábor · 12 days ago 21.7.9
  49. 66fadcb 🐛 fix(util): replace a stale symlink instead of writing through it (#3229) by darrenhuai · 12 days ago
  50. 4b31a63 🐛 fix(config): ignore a config file that fails to parse instead of crashing (#3230) by darrenhuai · 12 days ago
  51. f9010b3 [pre-commit.ci] pre-commit autoupdate (#3231) by pre-commit-ci[bot] · 13 days ago
  52. 2ef85af fix(test): EncodingWarning: 'encoding' argument not specified (#3228) by Vladimir Roshchin · 3 weeks ago
  53. e8e8615 release 21.7.8 by Bernát Gábor · 3 weeks ago 21.7.8
  54. f4e186e 🐛 fix(create): report a missing source that both modes need (#3227) by darrenhuai · 3 weeks ago
  55. adfa9e4 [pre-commit.ci] pre-commit autoupdate (#3226) by pre-commit-ci[bot] · 3 weeks ago
  56. b65d93d release 21.7.7 by Bernát Gábor · 3 weeks ago 21.7.7
  57. 72776f2 🎨 refactor(create): read the system exe without narrowing (#3224) by Bernát Gábor · 3 weeks ago
  58. 8fab8d6 📄 docs: document the interpreter names in an environment (#3225) by Bernát Gábor · 3 weeks ago
  59. 267f4cd release 21.7.6 by Bernát Gábor · 3 weeks ago 21.7.6
  60. 28c4cd1 🐛 fix(create): name Windows venv exes after the interpreter (#3223) by darrenhuai · 3 weeks ago
  61. 2a645ae release 21.7.5 by Bernát Gábor · 4 weeks ago 21.7.5
  62. a48bf4b 🐛 fix(util): make safe_delete's error handler actually run (#3222) by darrenhuai · 4 weeks ago
  63. 31b5081 🐛 fix(create): check every execute bit in ExePathRef.can_run (#3217) by darrenhuai · 4 weeks ago
  64. 5640eef [pre-commit.ci] pre-commit autoupdate (#3221) by pre-commit-ci[bot] · 4 weeks ago
  65. 1ebcab6 docs: actualize python support version (#3220) by Vladimir · 4 weeks ago
  66. eb241a0 🔧 chore: batch dependency updates weekly on Tuesday (#3219) by Bernát Gábor · 4 weeks ago
  67. 9534eda chore(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#3218) by dependabot[bot] · 4 weeks ago
  68. c8c4285 chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0 (#3215) by dependabot[bot] · 5 weeks ago
  69. ea806db [pre-commit.ci] pre-commit autoupdate (#3214) by pre-commit-ci[bot] · 5 weeks ago
  70. a21130f Push renamed changelog to PR branch in upgrade workflow (#3213) by Bernát Gábor · 5 weeks ago
  71. 00b80f5 📄 docs: publish llms.txt from the docs build (#3210) by Bernát Gábor · 6 weeks ago
  72. 38a2a31 🐛 fix(types): adapt to python-discovery 1.5.2 annotations (#3211) by Bernát Gábor · 6 weeks ago
  73. 60ed5e9 release 21.7.4 by Bernát Gábor · 6 weeks ago 21.7.4
  74. 6d93009 Upgrade embedded pip/setuptools/wheel (#3208) by github-actions[bot] · 6 weeks ago
  75. 8b4f9f9 [pre-commit.ci] pre-commit autoupdate (#3209) by pre-commit-ci[bot] · 6 weeks ago
  76. 2c52ec0 release 21.7.3 by Bernát Gábor · 6 weeks ago 21.7.3
  77. 8873d5e 🐛 fix(config): return a real list from ListType.split_values (#3207) by darrenhuai · 6 weeks ago
  78. d32f44c release 21.7.2 by Bernát Gábor · 6 weeks ago 21.7.2
  79. eb997d3 Upgrade embedded pip/setuptools/wheel (#3206) by github-actions[bot] · 6 weeks ago
  80. 9952a89 chore(deps): bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#3203) by dependabot[bot] · 7 weeks ago
  81. a3d3bb8 [pre-commit.ci] pre-commit autoupdate (#3202) by pre-commit-ci[bot] · 7 weeks ago
  82. e46c8e9 release 21.7.1 by Bernát Gábor · 8 weeks ago 21.7.1
  83. b66560a Upgrade embedded pip/setuptools/wheel (#3201) by github-actions[bot] · 8 weeks ago
  84. bf5f520 📝 docs(branding): clarify official logo vs favicon (#3200) by Bernát Gábor · 8 weeks ago
  85. 8507c7b [pre-commit.ci] pre-commit autoupdate (#3197) by pre-commit-ci[bot] · 8 weeks ago
  86. 694406a chore(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 (#3198) by dependabot[bot] · 8 weeks ago
  87. b486255 chore(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#3196) by dependabot[bot] · 8 weeks ago
  88. ac2ad97 chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0 (#3195) by dependabot[bot] · 8 weeks ago
  89. df94b34 chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#3194) by dependabot[bot] · 8 weeks ago
  90. e6eb5b0 release 21.7.0 by Bernát Gábor · 9 weeks ago 21.7.0
  91. 6d7bf90 Add changelog fragment for Python 3.15 support by Bernát Gábor · 9 weeks ago
  92. 482c7f9 👷 ci: test against Python 3.15 beta (#3192) by Bernát Gábor · 9 weeks ago
  93. a190228 [pre-commit.ci] pre-commit autoupdate (#3191) by pre-commit-ci[bot] · 9 weeks ago
  94. b54bc80 Replace prettier with mdformat and yamlfmt (#3190) by Bernát Gábor · 10 weeks ago
  95. c5dff1d chore(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (#3189) by dependabot[bot] · 10 weeks ago
  96. cab4a0a chore(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (#3188) by dependabot[bot] · 10 weeks ago
  97. c53b5b1 [pre-commit.ci] pre-commit autoupdate (#3187) by pre-commit-ci[bot] · 10 weeks ago
  98. 20b70f3 chore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (#3186) by dependabot[bot] · 2 months ago
  99. 544ca3d release 21.6.1 by Bernát Gábor · 2 months ago 21.6.1
  100. 3abee98 🐛 fix(fish): harden prompt against shadowed builtins (#3185) by Bernát Gábor · 2 months ago