sidegraph 0.17.0__tar.gz → 0.17.1__tar.gz

{sidegraph-0.17.0 → sidegraph-0.17.1}/.github/workflows/ci.yml

@@ -135,7 +135,7 @@ jobs:
           interpreter="$environment/bin/python"
           constraints=()
           if [ "$SDK_PAIR" = minimum ]; then
-            constraints=(fastmcp==3.4.2 mcp==1.30.0)
+            constraints=(fastmcp==3.4.10 mcp==1.30.0)
           fi
           uv pip install --python "$interpreter" "$wheel" pytest "${constraints[@]}"
           mkdir -p "$RUNNER_TEMP/sdk-check"

{sidegraph-0.17.0 → sidegraph-0.17.1}/CHANGELOG.md

@@ -7,6 +7,18 @@ interfaces, exactly, and what each one promises: [`docs/reference/stability.md`]
 
 ## [Unreleased]
 
+## [0.17.1] — 2026-10-25
+
+### Security
+
+- Upgrade locked certifi, FastMCP/full+slim, opentelemetry-api, filelock and virtualenv
+  beyond their reported vulnerable ranges. Raise the runtime floors to FastMCP 3.4.10,
+  certifi 2026.10.19 and opentelemetry-api 1.45.1 so standalone wheel installs also exclude
+  the affected versions; retain FastMCP `<4` and MCP SDK `>=1.30,<2` compatibility.
+- Remove the misleading private redaction-helper name that CodeQL interpreted as a
+  secret-producing function. All 24 reported logging paths originated at its already
+  redacted output or integer replacement count; redaction and terminal output are unchanged.
+
 ## [0.17.0] — 2026-10-24
 
 ### Changed (Contract change)

{sidegraph-0.17.0 → sidegraph-0.17.1}/CLAUDE.md

@@ -13,7 +13,7 @@ task-aware retrieval + decision memory riding on the engine's entity graph.
 continuing participant in the project. A core feature must preserve, organize, or deliver
 accumulated project understanding. Document search by itself is not the product.
 
-Sidegraph is pre-1.0 (v0.17.0) — the full loop (capture, ratification, mistakes-first
+Sidegraph is pre-1.0 (v0.17.1) — the full loop (capture, ratification, mistakes-first
 retrieval, refactor-surviving re-anchoring, semantic docs layer, mind-model domains, and the
 facts evidence layer) ships and is exercised end-to-end, but interfaces may still move before
 a stable release. See

{sidegraph-0.17.0 → sidegraph-0.17.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: sidegraph
-Version: 0.17.0
+Version: 0.17.1
 Summary: Own the memory, rent the graph — a durable decision/lessons layer as a sidecar over a code-graph engine.
 Project-URL: Homepage, https://github.com/SantyagoSeaman/sidegraph
 Project-URL: Repository, https://github.com/SantyagoSeaman/sidegraph
@@ -22,8 +22,10 @@ Classifier: Topic :: Software Development :: Documentation
 Classifier: Topic :: Software Development :: Libraries
 Requires-Python: >=3.13
 Requires-Dist: anyio>=4
-Requires-Dist: fastmcp<4,>=3.4.2
+Requires-Dist: certifi>=2026.10.19
+Requires-Dist: fastmcp<4,>=3.4.10
 Requires-Dist: mcp<2,>=1.30
+Requires-Dist: opentelemetry-api>=1.45.1
 Requires-Dist: pydantic>=2.9
 Requires-Dist: python-ulid>=3.0
 Description-Content-Type: text/markdown

{sidegraph-0.17.0 → sidegraph-0.17.1}/docs/getting-started/installation.md

@@ -45,7 +45,9 @@ with Git for Windows installed; they do not establish support for Windows hosts
 remains outside these checks.
 See [Windows](#windows) before installing a host plugin.
 
-Package dependencies support `fastmcp>=3.4.2,<4` and `mcp>=1.30,<2`. Major SDK upgrades
+Package dependencies support `fastmcp>=3.4.10,<4` and `mcp>=1.30,<2`. Runtime security
+floors also require `certifi>=2026.10.19` and
+`opentelemetry-api>=1.45.1`, including standalone wheel installations. Major SDK upgrades
 require a separate compatibility review; an unlocked package install may resolve newer
 versions within those bounds than the development lockfile.
 

{sidegraph-0.17.0 → sidegraph-0.17.1}/docs/reference/mcp-tools.md

@@ -29,8 +29,9 @@ use; see [configuration](configuration.md#path-resolution-semantics).
 Git commands for provenance, initiative, ratification identity and graph checks receive
 EOF on standard input, keeping subprocesses separate from the MCP protocol stream.
 
-The development lockfile selects FastMCP 3.4.2 and MCP Python SDK 1.30.0. Supported package
-dependencies are `fastmcp>=3.4.2,<4` and `mcp>=1.30,<2`. The locked stack
+The development lockfile selects FastMCP 3.4.11 and MCP Python SDK 1.30.0. Supported package
+dependencies are `fastmcp>=3.4.10,<4` and `mcp>=1.30,<2`, with runtime security floors
+`certifi>=2026.10.19` and `opentelemetry-api>=1.45.1`. The locked stack
 uses the `initialize` / `notifications/initialized` lifecycle and negotiates protocol
 versions through **2025-11-25**. The server reports Sidegraph's package version in
 `serverInfo.version`; that is separate from the negotiated protocol version.
@@ -141,7 +142,7 @@ shape, string and node policy described below. Unknown write parameter names are
 from errors while valid parameter help remains. Read-tool aliases/help are unchanged.
 The server rejects unsupported tool registrations rather than executing an unguarded
 write. The isolated FastMCP compatibility adapter requires the tested argument-only
-core-schema shape (locked FastMCP 3.4.2 / Pydantic 2.13.4); it validates no function body.
+core-schema shape (locked FastMCP 3.4.11 / Pydantic 2.13.4); it validates no function body.
 
 An incomplete store operation can report `rejected` after canonical replacement. Follow
 its may-have-written warning: do not repeat the proposal in the same session; reopen the

{sidegraph-0.17.0 → sidegraph-0.17.1}/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sidegraph",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "type": "module",
   "exports": "./index.js"
 }

{sidegraph-0.17.0 → sidegraph-0.17.1}/plugin/sidegraph/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "sidegraph",
   "displayName": "Sidegraph",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "description": "Durable decision/lessons memory over your code graph — ADRs, gotchas, and constraints that survive refactors, retrieved mistakes-first.",
   "author": { "name": "SantyagoSeaman", "url": "https://github.com/SantyagoSeaman" },
   "homepage": "https://github.com/SantyagoSeaman/sidegraph",

{sidegraph-0.17.0 → sidegraph-0.17.1}/plugin/sidegraph/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "sidegraph",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "description": "Durable decision/lessons memory over your code graph — ADRs, gotchas, and constraints that survive refactors, retrieved mistakes-first.",
   "license": "Apache-2.0",
   "skills": "./skills/",

{sidegraph-0.17.0 → sidegraph-0.17.1}/plugin/sidegraph/.muse-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "name": "sidegraph",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "description": "Durable decisions, facts and lessons over your code graph.",
   "compat": {
     "source": "native",

{sidegraph-0.17.0 → sidegraph-0.17.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "sidegraph"
-version = "0.17.0"
+version = "0.17.1"
 description = "Own the memory, rent the graph — a durable decision/lessons layer as a sidecar over a code-graph engine."
 readme = "README.md"
 requires-python = ">=3.13"
@@ -34,7 +34,10 @@ classifiers = [
 ]
 dependencies = [
     "pydantic>=2.9",
-    "fastmcp>=3.4.2,<4",
+    "fastmcp>=3.4.10,<4",
+    # Security floors also apply to standalone wheel installs, which do not use uv.lock.
+    "certifi>=2026.10.19",
+    "opentelemetry-api>=1.45.1",
     "python-ulid>=3.0",
     # Imported directly by server.py (the refresh middleware). Keep the security floor for
     # GHSA-84m7-p3x7-pcfv / CVE-2026-59951: MCP 1.30.0 fixes stateful StreamableHTTP.

{sidegraph-0.17.0 → sidegraph-0.17.1}/src/sidegraph/__init__.py

@@ -30,7 +30,7 @@ if TYPE_CHECKING:
     )
     from .store import Store
 
-__version__ = "0.17.0"
+__version__ = "0.17.1"
 
 # name -> the submodule that defines it
 _LAZY = {

{sidegraph-0.17.0 → sidegraph-0.17.1}/src/sidegraph/capture.py

@@ -225,7 +225,8 @@ def _redact_assignments(text: str, *, quoted_key: bool) -> tuple[str, int]:
     return "".join(parts), total
 
 
-def _replace_secret_spans(text: str, spans: Iterable[tuple[int, int]]) -> tuple[str, int]:
+def _replace_spans(text: str, spans: Iterable[tuple[int, int]]) -> tuple[str, int]:
+    """Replace supplied spans with the redaction marker and count replacements."""
     parts: list[str] = []
     cursor = 0
     count = 0
@@ -239,16 +240,16 @@ def _replace_secret_spans(text: str, spans: Iterable[tuple[int, int]]) -> tuple[
 
 def redact(text: str) -> tuple[str, int]:
     """Scrub secrets from text. Returns (clean_text, replacement_count)."""
-    text, total = _replace_secret_spans(text, iter_private_key_spans(text))
+    text, total = _replace_spans(text, iter_private_key_spans(text))
     for pattern in _SECRET_PATTERNS_BEFORE_ASSIGNMENTS[1:]:
         text, n = pattern.subn("[REDACTED]", text)
         total += n
     for quoted_key in (False, True):
         text, n = _redact_assignments(text, quoted_key=quoted_key)
         total += n
-    text, n = _replace_secret_spans(text, iter_jwt_spans(text))
+    text, n = _replace_spans(text, iter_jwt_spans(text))
     total += n
-    text, n = _replace_secret_spans(text, PhaseScanner(text).url_spans())
+    text, n = _replace_spans(text, PhaseScanner(text).url_spans())
     total += n
     for pattern in _SECRET_PATTERNS_AFTER_ASSIGNMENTS[2:]:
         text, n = pattern.subn("[REDACTED]", text)

{sidegraph-0.17.0 → sidegraph-0.17.1}/uv.lock

@@ -144,11 +144,11 @@ wheels = [
 
 [[package]]
 name = "certifi"
-version = "2026.6.17"
+version = "2026.10.23"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/c9/c7/424b75da314c1045981bd9777432fad05a9e0c69daa4ed7e308bbaffe405/certifi-2026.6.17.tar.gz", hash = "sha256:024c88eeec92ca068db80f02b8b07c9cef7b9fe261d1d535abfd5abd6f6af432", size = 134594, upload-time = "2026-06-17T10:31:07.894Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/fd/11/b524cbd9bbdaca58608e4cf4053fd463417549e1959fa8d3aa18319f9555/certifi-2026.10.23.tar.gz", hash = "sha256:a9895e6e2758b371e0545e321a3a8fd1fcfd9829ada8824a936dfb16aaaf36cd", size = 136225, upload-time = "2026-10-23T11:36:16.478Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/ef/2f/c5464532e965badff2f4c4c1a3a83f5697f0d7c407ed0cda44aaa99bb451/certifi-2026.6.17-py3-none-any.whl", hash = "sha256:2227dcbaafe0d2f59279d1762ddddc37783ed4354594f194ffc31d20f41fc3db", size = 133289, upload-time = "2026-06-17T10:31:06.348Z" },
+    { url = "https://files.pythonhosted.org/packages/32/d1/a3652fe2c19134d0d15922177821d863cbd7e842d53a21bbe7e8e3a1b5ac/certifi-2026.10.23-py3-none-any.whl", hash = "sha256:e9b54de76e530bb6cf0ccd036787103acb58fd42ba930ea8bf948ddbaa2f61d1", size = 135082, upload-time = "2026-10-23T11:36:14.763Z" },
 ]
 
 [[package]]
@@ -342,19 +342,19 @@ wheels = [
 
 [[package]]
 name = "fastmcp"
-version = "3.4.2"
+version = "3.4.11"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "fastmcp-slim", extra = ["client", "server"] },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/29/18/46beaec18c9f86a599ae3f9cdf6677dd6b50240cfd844d18233710b47f13/fastmcp-3.4.2.tar.gz", hash = "sha256:b468722946fc467c3796a6572f7a14d93d48c014cf8fea12910245220cbbe4e1", size = 28756849, upload-time = "2026-06-06T01:30:35.694Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/f7/77/b5ef8688b0dd3e403b7671106533d62e93252d7d8f3c75f547e4686bba1e/fastmcp-3.4.11.tar.gz", hash = "sha256:36273b04eff98021da4601d4f86c64dfa10e61119e9ddd17ad80650465c65355", size = 28868316, upload-time = "2026-10-20T22:44:36.64Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/58/4d/8b1ba42251160e11ca34686344572121432c23a082d56ef6bbdec5888fc1/fastmcp-3.4.2-py3-none-any.whl", hash = "sha256:c87a62b029f0c5400ada85f683629345d2466c39169f0cb853e487b2f7308c08", size = 8018, upload-time = "2026-06-06T01:30:38.118Z" },
+    { url = "https://files.pythonhosted.org/packages/d5/fb/e6b04a2f4dbce64994f3239267b6899411e8fd9693238c39ee99fe6f2b35/fastmcp-3.4.11-py3-none-any.whl", hash = "sha256:f50a7aa4cc2a5954d02fcc9672ff1d69daff73a02387f959c2647523cd6d5606", size = 8028, upload-time = "2026-10-20T22:44:33.334Z" },
 ]
 
 [[package]]
 name = "fastmcp-slim"
-version = "3.4.2"
+version = "3.4.11"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "platformdirs" },
@@ -364,14 +364,15 @@ dependencies = [
     { name = "rich" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/a3/2e/d627b28b7403ecc526991ef732921b08bde010006e6148635f053fd29f4c/fastmcp_slim-3.4.2.tar.gz", hash = "sha256:290646e0955a516235a317151034559aa48336cb843d3f006131aedad8759bb4", size = 576291, upload-time = "2026-06-06T01:30:12.553Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/9d/35/5f61dc70141df213eddff40bb2b8ccf68b02ecd666da6a1efab7c55b5694/fastmcp_slim-3.4.11.tar.gz", hash = "sha256:50e29b0830fb216aba437f35cfc7dd4bce7451f2f85f8786d6fff3da78d79386", size = 610380, upload-time = "2026-10-20T22:44:12.833Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/f7/58/22afebf18df7260b09148199cbeb90cdcc4b3a4e1b5d7460e3591c3a7add/fastmcp_slim-3.4.2-py3-none-any.whl", hash = "sha256:bdc72492212681ca502755fa8acc0457f559295da1fc3dfc0599adc1c04b82f3", size = 749195, upload-time = "2026-06-06T01:30:11.22Z" },
+    { url = "https://files.pythonhosted.org/packages/ff/71/614669d0a0d8dea87dc0dc684650bb36793027fc409197526532f587fcab/fastmcp_slim-3.4.11-py3-none-any.whl", hash = "sha256:24535dd843b3dcb3272b86c88fdf6ada5026c39ec5b56e2426557223c4d2c8bf", size = 785938, upload-time = "2026-10-20T22:44:10.921Z" },
 ]
 
 [package.optional-dependencies]
 client = [
     { name = "authlib" },
+    { name = "certifi" },
     { name = "exceptiongroup" },
     { name = "httpx" },
     { name = "mcp" },
@@ -381,6 +382,7 @@ client = [
 ]
 server = [
     { name = "authlib" },
+    { name = "certifi" },
     { name = "cyclopts" },
     { name = "exceptiongroup" },
     { name = "griffelib" },
@@ -405,11 +407,11 @@ server = [
 
 [[package]]
 name = "filelock"
-version = "3.32.0"
+version = "4.2.4"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/c0/80/8232b582c4b318b817cf1274ba74976b07b34d35ef439b3eb948f98645a1/filelock-3.32.0.tar.gz", hash = "sha256:7be2ad23a14607ccc71808e68fe30848aeace7058ace17852f68e2a68e310402", size = 213757, upload-time = "2026-07-21T13:17:42.898Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/d8/28/3893324bcadf8f89b1616637468d766af3f625008c0735bf704fdfa86617/filelock-4.2.4.tar.gz", hash = "sha256:c6d8663535e1650ee430507b4ffbac7b464dd64b7647ea0112a9f406499d163d", size = 652444, upload-time = "2026-10-19T01:57:51.001Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/06/79/b4c714bef36bc4ec2beeae1e0c124f0223888cd8c6feb1cdc56038116920/filelock-3.32.0-py3-none-any.whl", hash = "sha256:d396bea984af47333ef05e50eae7eff88c84256de6112aea0ec48a233c064fe3", size = 97732, upload-time = "2026-07-21T13:17:41.55Z" },
+    { url = "https://files.pythonhosted.org/packages/e0/1b/5e74289a1878e666bb4b65fe5805a04cafcac2aa5f519ef1ead67ef91c56/filelock-4.2.4-py3-none-any.whl", hash = "sha256:301241438c57936ef93f4243a94f2559022268bfcf9b375a9a72eb0f8db8358e", size = 162475, upload-time = "2026-10-19T01:57:49.419Z" },
 ]
 
 [[package]]
@@ -790,23 +792,23 @@ wheels = [
 
 [[package]]
 name = "opentelemetry-api"
-version = "1.43.0"
+version = "1.45.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/ae/cc/e4c9584181f86494df0f6bdec1a4f3280c50db44704dc2a407e994fc87bb/opentelemetry_api-1.43.0.tar.gz", hash = "sha256:107d0d03857ea8fc7c5fcbbbd83f800c281f0d560553d61c1d675fccfd1761c1", size = 73476, upload-time = "2026-06-24T15:19:55.323Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/2e/02/6e0ae9cc61bd3169d401077b507b3ebc344745171e1051ab430be012dcd9/opentelemetry_api-1.45.1.tar.gz", hash = "sha256:aa38ed19bcc084ba42782a73255b3582283eced7ad6dddbd6695189e69adfb75", size = 72804, upload-time = "2026-10-06T17:32:58.133Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/17/83/6dba32b85f31868400440dc7ad2ca1eab94cbbf3a7b0459ed39f8311a9e2/opentelemetry_api-1.43.0-py3-none-any.whl", hash = "sha256:20acf45e9b21851926835292e4045d290acade1edd2ff3de86d2f069687ba1fd", size = 61912, upload-time = "2026-06-24T15:19:35.434Z" },
+    { url = "https://files.pythonhosted.org/packages/1e/41/f7dcf80b81ee8e71c1a2b59f14208bc723edbd89ed027a73b175abf6348e/opentelemetry_api-1.45.1-py3-none-any.whl", hash = "sha256:b31553efa588ae44bc306f863c785c5333a9ecc091248c6ee68b4b6c87fdedfb", size = 60256, upload-time = "2026-10-06T17:32:33.506Z" },
 ]
 
 [[package]]
 name = "packaging"
-version = "26.2"
+version = "26.3"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/d7/f1/e7a6dd94a8d4a5626c03e4e99c87f241ba9e350cd9e6d75123f992427270/packaging-26.2.tar.gz", hash = "sha256:ff452ff5a3e828ce110190feff1178bb1f2ea2281fa2075aadb987c2fb221661", size = 228134, upload-time = "2026-04-24T20:15:23.917Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/7d/fa/3944b40b07da9ce895c0e6303a5ab7d53da063554f534556b134a54d6093/packaging-26.3.tar.gz", hash = "sha256:94edc256424af38762eb31306eed28beb9f0efc50a8837492c9d6fd6004aed79", size = 313412, upload-time = "2026-08-04T18:15:28.737Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/df/b2/87e62e8c3e2f4b32e5fe99e0b86d576da1312593b39f47d8ceef365e95ed/packaging-26.2-py3-none-any.whl", hash = "sha256:5fc45236b9446107ff2415ce77c807cee2862cb6fac22b8a73826d0693b0980e", size = 100195, upload-time = "2026-04-24T20:15:22.081Z" },
+    { url = "https://files.pythonhosted.org/packages/63/34/ba1c580383c9eada3711951fef0795c80b829a078d72188184bcab9dd527/packaging-26.3-py3-none-any.whl", hash = "sha256:d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c", size = 129956, upload-time = "2026-08-04T18:15:27.159Z" },
 ]
 
 [[package]]
@@ -1293,12 +1295,14 @@ wheels = [
 
 [[package]]
 name = "sidegraph"
-version = "0.17.0"
+version = "0.17.1"
 source = { editable = "." }
 dependencies = [
     { name = "anyio" },
+    { name = "certifi" },
     { name = "fastmcp" },
     { name = "mcp" },
+    { name = "opentelemetry-api" },
     { name = "pydantic" },
     { name = "python-ulid" },
 ]
@@ -1315,8 +1319,10 @@ dev = [
 [package.metadata]
 requires-dist = [
     { name = "anyio", specifier = ">=4" },
-    { name = "fastmcp", specifier = ">=3.4.2,<4" },
+    { name = "certifi", specifier = ">=2026.10.19" },
+    { name = "fastmcp", specifier = ">=3.4.10,<4" },
     { name = "mcp", specifier = ">=1.30,<2" },
+    { name = "opentelemetry-api", specifier = ">=1.45.1" },
     { name = "pydantic", specifier = ">=2.9" },
     { name = "python-ulid", specifier = ">=3.0" },
 ]
@@ -1400,7 +1406,7 @@ wheels = [
 
 [[package]]
 name = "virtualenv"
-version = "21.14.4"
+version = "21.14.13"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "distlib" },
@@ -1409,9 +1415,9 @@ dependencies = [
     { name = "platformdirs" },
     { name = "python-discovery" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/f5/3e/5a73d53ce67e43d3c1dabfbfcda956d2c840f21c2a65dc7256eaffe5ac38/virtualenv-21.14.4.tar.gz", hash = "sha256:d7f167214b3c4f69df5386677dae5091dbc9c400fc46080187ae28064c9d453d", size = 5464960, upload-time = "2026-10-02T13:49:00.365Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/70/aa/bff50daee0488e16d611258a9b6c5a1d0c9e128f8ca424e9f4e1c0444ef2/virtualenv-21.14.13.tar.gz", hash = "sha256:de5307ba4b9a0001d9c8ea02832d38f63ca432880f416c1bface61c4323fd905", size = 5570301, upload-time = "2026-10-22T20:10:16.952Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/89/69/49381b5dd39d930c4b42819a23b8f9f242dd256bf46fb9dcd7ce713fe5d5/virtualenv-21.14.4-py3-none-any.whl", hash = "sha256:2d1a394ef089220b4606408b184433e49417a6e5590a09c7b8a67fb1e013af56", size = 5487214, upload-time = "2026-10-02T13:48:58.227Z" },
+    { url = "https://files.pythonhosted.org/packages/bb/a9/c10d8a44a29fb94a18b43fdf11f38caca53ae7c9406f11a72b1cb8f624f1/virtualenv-21.14.13-py3-none-any.whl", hash = "sha256:5fbb04138a4861580b78ba9110d529a26bc48fcc93c8ec36bc0202eeed96a788", size = 5557094, upload-time = "2026-10-22T20:10:15.096Z" },
 ]
 
 [[package]]