Bump virtualenv from 21.7.0 to 21.7.1

[dependabot]

Bumps virtualenv from 21.7.0 to 21.7.1.

Release notes

Sourced from virtualenv's releases.

21.7.1

What's Changed

• 📝 docs(branding): clarify official logo vs favicon by @​gaborbernat in pypa/virtualenv#3200
• Upgrade embedded pip/setuptools/wheel by @​github-actions[bot] in pypa/virtualenv#3201

Full Changelog: pypa/virtualenv@21.7.0...21.7.1

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.7.1

• Upgrade embedded wheels:

  • pip to 26.2 from 26.1.2 (:issue:u)

Improved Documentation - 21.7.1

• Document that virtualenv.png is the official logo and virtualenv.svg is a simplified favicon-only mark - by :user:gaborbernat. (:issue:3199)

---

v21.7.0 (2026-07-21)

---

Commits

• e46c8e9 release 21.7.1
• b66560a Upgrade embedded pip/setuptools/wheel (#3201)
• bf5f520 📝 docs(branding): clarify official logo vs favicon (#3200)
• 8507c7b [pre-commit.ci] pre-commit autoupdate (#3197)
• 694406a chore(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 (#3198)
• b486255 chore(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#3196)
• ac2ad97 chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0 (#3195)
• df94b34 chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#3194)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

Code Review: Bump virtualenv 21.7.0 → 21.7.1

This is a single-line dependabot dependency bump in pyproject.toml:47, within the development optional-dependencies list. Reviewed against the Senzing checklist.

Code Quality

• ✅ Style conventions — Change is a version-string bump inside an existing alphabetically-ish sorted array; formatting matches surrounding entries.
• ✅ No commented-out code — N/A, single-line diff.
• ✅ Meaningful variable names — N/A, no code identifiers involved.
• ✅ DRY — N/A.
• ✅ Defects — This is a patch-level bump of a dev-only tool (virtualenv); no logic, no runtime code paths, no risk of behavioral regression in shipped code.
• ✅ .claude/CLAUDE.md check — No .claude/CLAUDE.md exists in this repo (mapper-nomino) itself; the one found under build-resources/.claude/CLAUDE.md belongs to the vendored/shared senzing-factory/build-resources submodule/checkout and documents that separate repo generically (no local-machine-specific paths or secrets). Nothing to flag.

Testing

• ✅ N/A — No new functions, endpoints, or logic added; this is a dependency-pin change only. No tests required.

Documentation

• ❌ CHANGELOG.md not updated — CHANGELOG.md:1-16 has no entry for this bump. Consistent with the pattern of prior dependency-bump commits in this repo's history (238e387, 5c5326b, 581ed93, bf60050 — none added CHANGELOG entries either), so this appears to be accepted practice for dependabot PRs here rather than a new gap. Flagging per checklist, but likely a non-blocker if the project's convention is to exclude routine dependency bumps from the changelog.
• ✅ README — Not applicable, no user-facing change.
• ✅ Markdown/CommonMark — No markdown files touched in this diff.

Security

• ✅ No hardcoded credentials.
• ✅ No .lic files or AQAAAD-prefixed strings checked in anywhere in the repo (verified via repo-wide grep, excluding the vendored build-resources checkout). The two AQAAAD hits found are in prompt-header.md/prompt-temp.md — those are just the literal checklist instruction text (documentation about what to search for), not actual embedded keys.
• ✅ Input validation / error handling / logging — N/A, no code changed.

Summary

This is a low-risk, routine dependabot patch bump with no functional impact. The only checklist gap is the missing CHANGELOG.md entry, which matches this repo's existing pattern for dependency PRs. No blocking issues found.

Automated code review analyzing defects and coding standards