build(deps-dev): bump the pip-dependencies group in /requirements.d with 2 updates

[dependabot]

Bumps the pip-dependencies group in /requirements.d with 2 updates: virtualenv and tox.

Updates virtualenv from 21.4.1 to 21.4.3

Release notes

Sourced from virtualenv's releases.

21.4.3

What's Changed

• ci: silence avoidable check workflow notices by @​gaborbernat in pypa/virtualenv#3154
• Upgrade embedded pip/setuptools/wheel by @​github-actions[bot] in pypa/virtualenv#3155
• Fish activator passes VIRTUAL_ENV through cygpath by @​LuNoX in pypa/virtualenv#3161
• Stop exporting PS1 in bash activator by @​karlhillx in pypa/virtualenv#3162
• Add wheel-0.47.0 to seed packages as mitigation of CVE-2026-24049 by @​apophizzz in pypa/virtualenv#3167
• 🐛 fix(discovery): resolve base interpreter executable-only symlinks by @​gaborbernat in pypa/virtualenv#3166

New Contributors

• @​LuNoX made their first contribution in pypa/virtualenv#3161
• @​karlhillx made their first contribution in pypa/virtualenv#3162
• @​apophizzz made their first contribution in pypa/virtualenv#3167

Full Changelog: pypa/virtualenv@21.4.2...21.4.3

21.4.2

What's Changed

• 🐛 fix(activation): silence deactivate hash -r under set -e by @​gaborbernat in pypa/virtualenv#3152

Full Changelog: pypa/virtualenv@21.4.1...21.4.2

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.4.3

• Upgrade embedded wheels:

  • pip to 26.1.2 from 26.1.1 (:issue:u)

• Resolve executable-only symlinks when recording home and base-executable in pyvenv.cfg, mirroring CPython's getpath.realpathpython/cpython#115237 binary locate the base stdlib (for example python-build-standalone); a fully symlinked interpreter tree is kept as-is

  • by :user:gaborbernat. (:issue:3157)

• Stop exporting PS1 from the bash activator so child processes do not inherit shell prompt state. (:issue:3158)

• Handle CYGWIN/MSYS/MINGW path conversions in fish activation script - by user::LuNoX. (:issue:3160)

---

v21.4.2 (2026-05-31)

---

Bugfixes - 21.4.2

• Stop deactivate in the bash/zsh activation script from aborting under set -e when hash -r fails (for example with shell hashing disabled) by appending || true, matching CPython venv (gh-149701) and the existing non-deactivate call - by :user:gaborbernat. (:issue:3152)

---

v21.4.1 (2026-05-28)

---

Commits

• 134b080 release 21.4.3
• 2a36128 🐛 fix(discovery): resolve base interpreter executable-only symlinks (#3166)
• 5389c25 Add wheel-0.47.0 to seed packages as mitigation of CVE-2026-24049 (#3167)
• 0134fee chore(deps): bump astral-sh/setup-uv from 8.1.0 to 8.2.0 (#3165)
• af1ed9f chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#3164)
• 1b00ec8 [pre-commit.ci] pre-commit autoupdate (#3163)
• ce9729e Stop exporting PS1 in bash activator (#3162)
• 9e6f59f Fish activator passes VIRTUAL_ENV through cygpath (#3161)
• a423028 [pre-commit.ci] pre-commit autoupdate (#3156)
• f838c21 Upgrade embedded pip/setuptools/wheel (#3155)
• Additional commits viewable in compare view

Updates tox from 4.55.0 to 4.55.1

Release notes

Sourced from tox's releases.

v4.55.1

What's Changed

• 🐛 fix(config): propagate overrides through config references by @​tales-aparecida in tox-dev/tox#3951

New Contributors

• @​tales-aparecida made their first contribution in tox-dev/tox#3951

Full Changelog: tox-dev/tox@4.55.0...4.55.1

Changelog

Sourced from tox's changelog.

Bug fixes - 4.55.1

• TOX_OVERRIDE (and -x/--override) now propagates through configuration references. Previously, overriding a base value that was later referenced via {[section]key} (ini) or {replace = "ref", of = [...]} (toml) was ignored because reference resolution read the raw file value, bypassing the override system - by :user:tales-aparecida. (:issue:3950) (:issue:3950)

---

v4.55.0 (2026-05-28)

---

Commits

• 7ebde0c release 4.55.1
• 9ac5479 🐛 fix(config): propagate overrides through config references (#3951)
• 28972a9 [pre-commit.ci] pre-commit autoupdate (#3949)
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
tox	[>= 4.49.dev0, < 4.50]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions