[dependabot]

Bumps virtualenv from 21.7.4 to 21.7.5.

Release notes

Sourced from virtualenv's releases.

21.7.5

What's Changed

• 🐛 fix(types): adapt to python-discovery 1.5.2 annotations by @​gaborbernat in pypa/virtualenv#3211
• 📄 docs: publish llms.txt from the docs build by @​gaborbernat in pypa/virtualenv#3210
• Push renamed changelog to PR branch in upgrade workflow by @​gaborbernat in pypa/virtualenv#3213
• 🔧 chore: batch dependency updates weekly on Tuesday by @​gaborbernat in pypa/virtualenv#3219
• docs: actualize python support version by @​even-even in pypa/virtualenv#3220
• 🐛 fix(create): check every execute bit in ExePathRef.can_run by @​darrenhuai in pypa/virtualenv#3217
• 🐛 fix(util): make safe_delete's error handler actually run by @​darrenhuai in pypa/virtualenv#3222

New Contributors

• @​even-even made their first contribution in pypa/virtualenv#3220

Full Changelog: pypa/virtualenv@21.7.4...21.7.5

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.7.5

• Fix the type check against python-discovery 1.5.2, whose annotations allow a None prefix and integer sysconfig_vars values: config var substitution now skips a missing prefix and locating the shared libpython requires string INSTSONAME/LIBDIR values. (:issue:3211)
• ExePathRef.can_run now checks the group and other execute bits instead of only the owner one, and returns False rather than None when a file carries none of the three - by :user:darrenhuai. (:issue:3217)
• safe_delete no longer passes ignore_errors=True to shutil.rmtree, which replaced its own chmod-and-retry handler with a no-op and swallowed every failure. Read-only files - every file in a wheel image, which set_tree marks - survived, so --reset-app-data and --clear kept trees they reported deleting. The handler now retries only the deletion itself, keeps the other mode bits, and raises the original error for anything it cannot clear - by :user:darrenhuai. (:issue:3222)

---

v21.7.4 (2026-08-10)

---

Commits

• 2a645ae release 21.7.5
• a48bf4b 🐛 fix(util): make safe_delete's error handler actually run (#3222)
• 31b5081 🐛 fix(create): check every execute bit in ExePathRef.can_run (#3217)
• 5640eef [pre-commit.ci] pre-commit autoupdate (#3221)
• 1ebcab6 docs: actualize python support version (#3220)
• eb241a0 🔧 chore: batch dependency updates weekly on Tuesday (#3219)
• 9534eda chore(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#3218)
• c8c4285 chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0 (#3215)
• ea806db [pre-commit.ci] pre-commit autoupdate (#3214)
• a21130f Push renamed changelog to PR branch in upgrade workflow (#3213)
• Additional commits viewable in compare view

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

Scope: Single-line dependency bump — virtualenv pinned version updated from 21.7.4 to 21.7.5 in pyproject.toml (development dependency group).

Code Quality

• ✅ Follows existing style/formatting conventions in pyproject.toml (pyproject.toml:46)
• ✅ No commented-out code
• ✅ N/A — no variables introduced
• ✅ N/A — no duplication introduced
• ✅ No defects identified — this is a routine dependency version pin bump (patch release), no logic changes
• ✅ .claude/CLAUDE.md reviewed — it is general-purpose project guidance (commands, architecture, Python version) with no local-machine-specific specifics; no changes needed and this PR doesn't touch it

Testing

• N/A — no new functions, endpoints, or logic; a dependency bump doesn't require new tests
• ✅ Edge cases: N/A
• ✅ Test coverage: unaffected by this change

Documentation

• ✅ No README/API doc changes needed for a dev-dependency patch bump
• ✅ No CHANGELOG.md entry present for this change — flagging as minor: if this repo's convention is to log dependency bumps in CHANGELOG.md, confirm whether that's expected (many repos exempt automated dependency-bot PRs from this requirement)
• ✅ No markdown files changed

Security

• ✅ No hardcoded credentials
• ✅ N/A — no input handling changed
• ✅ N/A — no error handling changed
• ✅ No sensitive data in logs
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff

Summary

This is a low-risk, routine dependency version bump (virtualenv 21.7.4 → 21.7.5) with no functional impact on src/spire_mapper.py. Nothing blocking. Approve.

Automated code review analyzing defects and coding standards

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

Scope: Single-line dependency bump in pyproject.toml — virtualenv pinned version 21.7.4 → 21.7.5 (line 46). This is a Dependabot-style version bump with no application code changes.

Code Quality

• ✅ Style conventions — Change conforms to existing pyproject.toml formatting (aligned quoting, comma style unchanged).
• ✅ No commented-out code
• ✅ Meaningful variable names — N/A, no identifiers introduced.
• ✅ DRY principle — N/A.
• ✅ Defects/bugs/edge cases/security — No logic changed. virtualenv 21.7.5 is a patch-level bump; no breaking API surface expected for this build tool. Nothing crash-prone or racy introduced.
• ✅ .claude/CLAUDE.md review — Present and already generic (build/run commands, architecture summary, Python version support). Nothing in it is specific to a local developer's machine (no absolute paths, personal usernames, or machine-specific config). No changes needed as a result of this PR.

Testing

• ✅ N/A — No new functions or behavior; a version pin bump doesn't require new unit/integration tests.
• ✅ Edge cases — N/A.
• ✅ Coverage — Unaffected by this change.

Documentation

• ✅ README — Not impacted (no user-facing behavior change).
• ✅ API docs — Not impacted.
• ✅ Inline comments — N/A, no complex logic added.
• ❌ CHANGELOG.md not updated. Repo has a "documentation" dependency group listed in pyproject.toml, and per the checklist this should be verified. Dependency bumps are commonly excluded from changelogs when they're pure dev/build tooling (as virtualenv is, under development deps, not runtime deps) — flagging for confirmation rather than as a hard blocker, since this looks like an automated Dependabot PR where changelog entries for dev-dependency bumps are typically not expected.
• ✅ Markdown/CommonMark — No .md files touched in this diff.

Security

• ✅ No hardcoded credentials
• ✅ Input validation — N/A, no input-handling code changed.
• ✅ Error handling — N/A.
• ✅ No sensitive data in logs — N/A.
• ✅ No .lic files or AQAAAD-prefixed license strings present in this diff.

Summary

Trivial, low-risk dependency version bump (dev-only virtualenv dependency). No functional, security, or test concerns. Only note is confirming whether dev-dependency bumps are expected to have CHANGELOG entries per this project's convention — likely not required for automated bumps like this one.

Automated code review analyzing defects and coding standards