Bugfixes - 21.14.13

• Stop bash running commands from --prompt or an environment name containing $(...), backticks or a backslash
  after shopt -s promptvars, set -o posix, or in a child shell that inherits an exported PS1
  (GHSA-cx6f-vjhg-g3cc); reported by rozzkml. zsh now draws the prompt from psvar[9], which is never parsed
  as shell syntax.

  Write the .venv redirect and the wheel RECORD with exclusive create, so a link planted after the existence
  check cannot redirect the write. On POSIX, a read-only .venv redirect that points at a virtualenv is replaced.
  (#3466)

PyPI release

Full Changelog: 21.14.12...21.14.13