diff --git a/dev-requirements.txt b/dev-requirements.txt
index d532b21..46ef093 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -6,7 +6,7 @@
 
 # PEP517 package builder, used in Makefile
 build>=1.0.0
-virtualenv>=20.25.0
+virtualenv>=20.26.6
 pyproject-hooks>=1.1.0
 
 # Coverage reporting (no imports, invoked via coveralls script):
diff --git a/docs/changes.rst b/docs/changes.rst
index a623ff2..77c97d4 100644
--- a/docs/changes.rst
+++ b/docs/changes.rst
@@ -27,6 +27,8 @@ Released: not yet
 
 **Bug fixes:**
 
+* Addressed safety issues up to 2024-11-30.
+
 * Test: Fixed the issue that coveralls was not found in the test workflow on MacOS
   with Python 3.9-3.11, by running it without login shell. Added Python 3.11 on
   MacOS to the normal tests.
diff --git a/minimum-constraints-develop.txt b/minimum-constraints-develop.txt
index 27e1b63..4f4d808 100644
--- a/minimum-constraints-develop.txt
+++ b/minimum-constraints-develop.txt
@@ -10,7 +10,7 @@
 
 # PEP517 package builder, used in Makefile
 build==1.0.0
-virtualenv==20.25.0
+virtualenv==20.26.6
 pyproject-hooks==1.1.0
 
 # Unit test (e.g. imports into testcases):
@@ -19,7 +19,6 @@ pyproject-hooks==1.1.0
 pytest==7.0.0
 
 # Install test:
-virtualenv==20.25.0
 six==1.16.0
 
 # Coverage reporting (no imports, invoked via coveralls script):