21.13.0

What's Changed

• 👷 ci(codeql): scan local inputs and guard activation templates by @gaborbernat in #3317
• 👷 ci(codeql): add regression queries for 21.7 advisories by @gaborbernat in #3318
• 👷 ci(upgrade): pass base to create-pull-request by @gaborbernat in #3320
• 👷 ci(upgrade): dispatch CI on the upgrade pull request by @gaborbernat in #3322
• Upgrade embedded pip/setuptools/wheel and CI test tools by @github-actions[bot] in #3321
• docs: correct changelog fragment types by @januththedev in #3324
• 🐛 fix(activation): escape PowerShell curly single quotes by @gaborbernat in #3325
• 👷 ci(codeql): scan the tasks scripts by @gaborbernat in #3327
• 👷 ci(check): gate required checks behind one job by @gaborbernat in #3328
• 🐛 fix(activation): stop bash re-expanding the prompt in PS1 by @gaborbernat in #3326
• 🔧 build(docs): pin Mermaid and bump it weekly by @gaborbernat in #3333
• 🔧 build(meta): add Changelog and Funding project URLs by @gaborbernat in #3334
• 📝 docs(release): refresh release verification docs by @gaborbernat in #3330
• 👷 ci(upgrade): bump the GraalPy test version weekly by @gaborbernat in #3332
• 👷 ci(deps): review dependency licenses and advisories on pull requests by @gaborbernat in #3329

New Contributors

• @januththedev made their first contribution in #3324

Full Changelog: 21.12.1...21.13.0