[dependabot]

Bumps virtualenv from 21.7.7 to 21.7.8.

Release notes

Sourced from virtualenv's releases.

21.7.8

What's Changed

• 🐛 fix(create): report a missing source that both modes need by @​darrenhuai in pypa/virtualenv#3227

Full Changelog: pypa/virtualenv@21.7.7...21.7.8

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.7.8

• A missing source needed by both install modes now disables the builtin creator through meta.error. The check compared RefWhen values against RefMust members, so creation went on to fail with a FileNotFoundError or a dangling symlink - by :user:darrenhuai. (:issue:3227)

---

v21.7.7 (2026-08-28)

---

Commits

• e8e8615 release 21.7.8
• f4e186e 🐛 fix(create): report a missing source that both modes need (#3227)
• adfa9e4 [pre-commit.ci] pre-commit autoupdate (#3226)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

Scope: Single-line dependency bump in pyproject.toml — virtualenv 21.7.7 → 21.7.8 (dev dependency group).

Code Quality

• ✅ No style/formatting issues — this is a version pin bump only.
• ✅ No commented-out code.
• ✅ N/A — no new variables/functions introduced.
• ✅ N/A — no logic duplicated.
• ✅ No defects identified. This is a patch-version bump of a development-only dependency (virtualenv), not used at runtime by spire_mapper.py. No crash/race/security risk from the version bump itself.
• ✅ .claude/CLAUDE.md reviewed — content is general (project overview, commands, architecture, Python version support) and not tied to a specific local developer's environment. No changes needed, and this PR doesn't touch it.

Testing

• ✅ N/A — no new functions/endpoints added.
• ✅ N/A — no new edge cases introduced by a version bump.
• ✅ N/A — coverage unaffected.

Documentation

• ✅ README/API docs/CHANGELOG not applicable for a routine dependency bump.
• ✅ No markdown files changed in this diff.

Security

• ✅ No hardcoded credentials.
• ✅ N/A — no input handling changed.
• ✅ N/A — no error handling changed.
• ✅ No sensitive data involved.
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff.

Summary

This is a routine, low-risk dependency version bump (likely automated via Dependabot). Nothing to flag — safe to merge assuming CI passes.

Automated code review analyzing defects and coding standards