Bump virtualenv from 21.6.1 to 21.7.0

[dependabot]

Bumps virtualenv from 21.6.1 to 21.7.0.

Release notes

Sourced from virtualenv's releases.

21.7.0

What's Changed

• Replace prettier with mdformat and yamlfmt by @​gaborbernat in pypa/virtualenv#3190
• 👷 ci: test against Python 3.15 beta by @​gaborbernat in pypa/virtualenv#3192

Full Changelog: pypa/virtualenv@21.6.1...21.7.0

Changelog

Sourced from virtualenv's changelog.

Features - 21.7.0

• Declare support for Python 3.15: CI now tests against the CPython 3.15 beta, including the free-threaded 3.15t build, and the Programming Language :: Python :: 3.15 classifier is advertised. (:issue:3192)

---

v21.6.1 (2026-07-10)

---

Commits

• e6eb5b0 release 21.7.0
• 6d7bf90 Add changelog fragment for Python 3.15 support
• 482c7f9 👷 ci: test against Python 3.15 beta (#3192)
• a190228 [pre-commit.ci] pre-commit autoupdate (#3191)
• b54bc80 Replace prettier with mdformat and yamlfmt (#3190)
• c5dff1d chore(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (#3189)
• cab4a0a chore(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (#3188)
• c53b5b1 [pre-commit.ci] pre-commit autoupdate (#3187)
• 20b70f3 chore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (#3186)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

PR Code Review

Change summary: Single-line dependency bump — virtualenv pinned version in pyproject.toml from 21.6.1 → 21.7.0 (development dependency group). No source code, test, or documentation files are touched.

Code Quality

• ✅ Style/formatting: Change conforms to existing TOML formatting (pyproject.toml:46), no whitespace or quoting issues.
• ✅ No commented-out code introduced.
• ✅ N/A — no variable naming involved.
• ✅ N/A — no logic duplicated or introduced (DRY).
• ✅ Defects: No logic change, no bugs/race conditions/crashes possible from a version pin bump alone. virtualenv is a dev-only tool dependency (under the development group), not shipped in the runtime package, so no production behavior is affected.
• ✅ .claude/CLAUDE.md: Reviewed — content is general project guidance (commands, architecture, mapping file structure) with nothing environment-specific to a local developer's machine. No changes needed as a result of this PR.

Testing

• ✅ N/A — no new functions or endpoints introduced; a dependency version bump doesn't require new unit/integration tests.
• ✅ N/A — no new edge cases introduced.
• ✅ N/A — test coverage percentage unaffected by this change.

Documentation

• ✅ N/A — README/API docs/inline comments don't need updates for a transitive dev-tool version bump.
• ❌ CHANGELOG.md not updated — if this repo maintains a CHANGELOG.md and tracks dependency bumps there, this entry should be added. Worth confirming whether Dependabot-style bumps are exempted from this repo's changelog policy; if they are, this is not actionable.
• ✅ N/A — no Markdown files are touched in this diff, so CommonMark/prettier formatting checks don't apply.

Security

• ✅ No hardcoded credentials introduced.
• ✅ N/A — no input validation logic touched.
• ✅ N/A — no error handling touched.
• ✅ No sensitive data/logs touched.
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff — no license file concerns.
• Note: virtualenv==21.7.0 bump appears to be a routine upstream release; no known CVE context is being evaluated here since network access is disabled for this review — recommend confirming via the Dependabot PR body/changelog that this is a patch/minor release with no breaking changes for the development dependency group.

Overall

This is a low-risk, mechanical dependency bump with no functional or security concerns identified. The only open item is confirming whether this repo's CHANGELOG.md policy requires an entry for dependency bumps — if automated dependency PRs are already exempted, this PR is ready to merge as-is.

Automated code review analyzing defects and coding standards