Bump virtualenv from 21.6.1 to 21.7.0

[dependabot]

Bumps virtualenv from 21.6.1 to 21.7.0.

Release notes

Sourced from virtualenv's releases.

21.7.0

What's Changed

• Replace prettier with mdformat and yamlfmt by @​gaborbernat in pypa/virtualenv#3190
• 👷 ci: test against Python 3.15 beta by @​gaborbernat in pypa/virtualenv#3192

Full Changelog: pypa/virtualenv@21.6.1...21.7.0

Changelog

Sourced from virtualenv's changelog.

Features - 21.7.0

• Declare support for Python 3.15: CI now tests against the CPython 3.15 beta, including the free-threaded 3.15t build, and the Programming Language :: Python :: 3.15 classifier is advertised. (:issue:3192)

---

v21.6.1 (2026-07-10)

---

Commits

• e6eb5b0 release 21.7.0
• 6d7bf90 Add changelog fragment for Python 3.15 support
• 482c7f9 👷 ci: test against Python 3.15 beta (#3192)
• a190228 [pre-commit.ci] pre-commit autoupdate (#3191)
• b54bc80 Replace prettier with mdformat and yamlfmt (#3190)
• c5dff1d chore(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (#3189)
• cab4a0a chore(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (#3188)
• c53b5b1 [pre-commit.ci] pre-commit autoupdate (#3187)
• 20b70f3 chore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (#3186)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

Confirmed — this is a routine dependabot dependency bump, consistent with prior bump commits in this repo (none of which touch CHANGELOG.md). Here's the review.

Code Review: Bump virtualenv 21.6.1 → 21.7.0

Code Quality

• ✅ Style conventions: Change is a single-line version bump in pyproject.toml:45, consistent with existing formatting (quoted string, alphabetically-ordered development extras list, == pin).
• ✅ No commented-out code
• ✅ Meaningful names — N/A, no identifiers changed
• ✅ DRY — N/A
• ✅ Defects: None. virtualenv is a dev-only dependency (used transitively for building isolated environments during linting/testing per the development extras group), not imported by application code. Patch-level bump (21.6.1 → 21.7.0 is a minor version bump per semver, but within virtualenv's typically backward-compatible release cadence). No functional code paths are affected.
• ✅ CLAUDE.md review: .claude/CLAUDE.md is unchanged by this diff; no action needed. (Note for completeness: the existing file is already environment-agnostic, using placeholders like <project_path> and generic paths — no local-machine specifics to flag.)

Testing

• ✅ N/A — this is an automated dependency bump (dependabot pattern, confirmed via git log), not new functionality. No new tests required.

Documentation

• ✅ Consistent with repo convention: prior dependency bump commits (e.g. a997902 cryptography, 7142ea2 coverage) also did not update CHANGELOG.md or README. No inconsistency introduced.
• N/A for API docs / inline comments — no code logic changed.

Security

• ✅ No hardcoded credentials
• ✅ No input validation concerns — build config only
• ✅ No error handling concerns
• ✅ No sensitive data in logs
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff

Summary

Low-risk, mechanical dependency version bump. No issues found. Approve.

Automated code review analyzing defects and coding standards

[github-actions]

🤖 Claude Code Review

Code Review — Dependabot: virtualenv 21.6.1 → 21.7.0

Scope: Single-line dependency version bump in pyproject.toml (dev dependency group). No source code, tests, or docs touched.

Code Quality

• ✅ Style/formatting — trivial, correctly formatted TOML line (pyproject.toml:45)
• ✅ No commented-out code
• ✅ N/A — no new variables/identifiers introduced
• ✅ N/A — no logic duplicated
• ✅ Defects — none introduced; this is a pinned dev-tool version bump (virtualenv used only for env creation, not part of shipped code paths). No functional risk to the Senzing snippets themselves.
• ✅ .claude/CLAUDE.md reviewed — unaffected by this change, still general-purpose/no local-environment-specific content.

Testing

• ✅ N/A — no new functions/endpoints; pure dependency version bump requires no new tests
• ✅ N/A — no edge cases introduced
• ✅ N/A — coverage unaffected

Documentation

• ✅ README — no update needed for a dev-dependency bump
• ✅ API docs — N/A
• ✅ Inline comments — N/A, no complex logic
• ❌ CHANGELOG.md — not updated. Minor/optional for a routine dependabot dependency bump; flagging per checklist but not blocking.

Security

• ✅ No hardcoded credentials
• ✅ N/A — no input handling changed
• ✅ N/A — no error handling changed
• ✅ No sensitive data in logs
• ✅ No .lic files or AQAAAD-prefixed license strings present in this diff

Verdict

Safe, routine dependency bump. No blocking issues. Approve.

Automated code review analyzing defects and coding standards