use venv instead of virtualenv for nox backend

parthea · parthea · commit 7fc0fe8ace1f · 2025-07-02T11:13:25.000Z
diff --git a/noxfile.py b/noxfile.py
@@ -35,6 +35,10 @@
 
 # Error if a python version is missing
 nox.options.error_on_missing_interpreters = True
+# Use venv backend which doesn't include bundled setuptools
+# for CVE-2025-47273, CVE-2024-6345.
+# See https://github.com/python/cpython/issues/135374
+nox.options.default_venv_backend = 'venv'
 
 nox.options.sessions = [
     "blacken",
