Bump virtualenv from 21.7.7 to 21.7.8

[dependabot]

Bumps virtualenv from 21.7.7 to 21.7.8.

Release notes

Sourced from virtualenv's releases.

21.7.8

What's Changed

• 🐛 fix(create): report a missing source that both modes need by @​darrenhuai in pypa/virtualenv#3227

Full Changelog: pypa/virtualenv@21.7.7...21.7.8

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.7.8

• A missing source needed by both install modes now disables the builtin creator through meta.error. The check compared RefWhen values against RefMust members, so creation went on to fail with a FileNotFoundError or a dangling symlink - by :user:darrenhuai. (:issue:3227)

---

v21.7.7 (2026-08-28)

---

Commits

• e8e8615 release 21.7.8
• f4e186e 🐛 fix(create): report a missing source that both modes need (#3227)
• adfa9e4 [pre-commit.ci] pre-commit autoupdate (#3226)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

Scope: Single-line dependency bump — virtualenv==21.7.7 → 21.7.8 in pyproject.toml (development extras group).

Code Quality

• ✅ Style conventions: Change matches existing formatting/alignment in the development array.
• ✅ No commented-out code
• ✅ Meaningful variable names: N/A (dependency pin only)
• ✅ DRY: N/A
• ✅ Defects: No logic changes; this is a routine dependency version bump (patch release). No functional risk identified.
• ✅ CLAUDE.md review: .claude/CLAUDE.md is unaffected by this diff and remains general-purpose (no local-machine-specific paths or settings).

Testing

• ✅ N/A — no new functions/endpoints introduced by a dependency bump.
• ⚠️ Edge cases / coverage: Not applicable to a version pin change, but recommend confirming CI passes with the new virtualenv version before merge (no evidence of CI results in the diff itself).

Documentation

• ✅ Readme/API docs: Not applicable.
• ❌ CHANGELOG.md: Not updated. For a dev-dependency-only bump this is commonly exempted (no user-facing change), but flagging per checklist — confirm this repo's convention is to skip CHANGELOG entries for dependency bumps (recent commit history, e.g. c70cec6, 29fe280, suggests this is the existing pattern for bump PRs, so likely fine).
• ✅ Markdown/CommonMark: No .md files changed.

Security

• ✅ No hardcoded credentials
• ✅ No input validation concerns
• ✅ No error handling concerns
• ✅ No sensitive data in logs
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff

Summary

This is a low-risk, routine dependency version bump with no code, test, or security concerns. No blocking issues found.

Automated code review analyzing defects and coding standards