build(deps-dev): bump virtualenv from 21.7.8 to 21.7.10

[dependabot]

Bumps virtualenv from 21.7.8 to 21.7.10.

Release notes

Sourced from virtualenv's releases.

21.7.10

What's Changed

• 🔧 chore: check spelling with typos in pre-commit by @​even-even in pypa/virtualenv#3235
• 🐛 fix(activation): keep and restore the user's TCL_LIBRARY and TK_LIBRARY by @​darrenhuai in pypa/virtualenv#3234
• 🐛 fix(create): skip blank and comment lines in pyvenv.cfg by @​r3wretrhy in pypa/virtualenv#3232
• 🐛 fix(activation): restore PKG_CONFIG_PATH that was not set before by @​darrenhuai in pypa/virtualenv#3233

New Contributors

• @​r3wretrhy made their first contribution in pypa/virtualenv#3232

Full Changelog: pypa/virtualenv@21.7.9...21.7.10

21.7.9

What's Changed

• fix(test): EncodingWarning: 'encoding' argument not specified by @​even-even in pypa/virtualenv#3228
• 🐛 fix(config): ignore a config file that fails to parse instead of crashing by @​darrenhuai in pypa/virtualenv#3230
• 🐛 fix(util): replace a stale symlink instead of writing through it by @​darrenhuai in pypa/virtualenv#3229

Full Changelog: pypa/virtualenv@21.7.8...21.7.9

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.7.10

• Skip blank lines, # comments and lines without = in pyvenv.cfg instead of raising ValueError - by :user:r3wretrhy. (:issue:3232)
• deactivate in bash, fish and PowerShell unsets PKG_CONFIG_PATH when activation found it unset, instead of keeping the environment's lib/pkgconfig. csh activation no longer drops a PKG_CONFIG_PATH the user had set. Activation in batch, fish, nushell and PowerShell no longer adds a trailing separator when PKG_CONFIG_PATH is unset, and PowerShell and nushell build the value with the host's path separators - by :user:darrenhuai. (:issue:3233)
• Activation in bash, csh, fish and PowerShell keeps the user's TCL_LIBRARY and TK_LIBRARY, and deactivate restores them. csh and PowerShell removed both variables on every activation, fish did so when the interpreter has tcl, and bash kept the environment's value after deactivate when the variable was unset before - by :user:darrenhuai. (:issue:3234)

---

v21.7.9 (2026-09-09)

---

Bugfixes - 21.7.9

• Replace dangling symlinks, including interpreter aliases, when recreating an environment. This prevents FileExistsError with --symlinks and writes outside the environment with --copies - by :user:darrenhuai. (:issue:3229)
• Ignore malformed or unreadable virtualenv.ini files and report the error in the log and --help. Accept a UTF-8 byte order mark, as written by PowerShell 5 and older Notepad versions - by :user:darrenhuai. (:issue:3230)

---

v21.7.8 (2026-09-01)

---

Commits

• 7af3724 release 21.7.10
• f90e927 🐛 fix(activation): restore PKG_CONFIG_PATH that was not set before (#3233)
• b5bd520 🐛 fix(create): skip blank and comment lines in pyvenv.cfg (#3232)
• 973298a 🐛 fix(activation): keep and restore the user's TCL_LIBRARY and TK_LIBRARY (#3...
• a438d8a 🔧 chore: check spelling with typos in pre-commit (#3235)
• ca4025d [pre-commit.ci] pre-commit autoupdate (#3236)
• abd3829 release 21.7.9
• 66fadcb 🐛 fix(util): replace a stale symlink instead of writing through it (#3229)
• 4b31a63 🐛 fix(config): ignore a config file that fails to parse instead of crashing (...
• f9010b3 [pre-commit.ci] pre-commit autoupdate (#3231)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Review: bump virtualenv 21.7.8 → 21.7.10

This is a one-line dev-dependency patch bump in pyproject.toml:45, in the development extras group.

Code Quality

• ✅ Style: The change matches the surrounding pinned entries, which use exact == pins.
• ✅ No commented-out code.
• ✅ Naming and DRY: Not applicable.
• ✅ Defects: None expected from a patch bump of a dev-only tool. virtualenv isn't imported by the snippets and doesn't ship at runtime.
• ✅ .claude/CLAUDE.md: Not modified. I saw nothing environment-specific in it. It uses placeholder paths like /path/to/data and <project_path>.

Testing

• ✅ Unit and integration tests, edge cases, coverage: Not applicable, because there is no new code. The CI lint and test jobs should confirm the new version installs cleanly.

Documentation

• ✅ README and API docs: No update needed.
• ⚠️ CHANGELOG.md: Not updated. This is acceptable for a Dependabot dev-dependency bump, since such bumps are usually excluded from changelogs. If the project's convention is to log them, add an entry.
• ✅ Markdown: No Markdown files changed.

Security

• ✅ No hardcoded credentials or sensitive data in logs.
• ✅ No license files: No .lic files or AQAAAD strings in the diff.
• ✅ Input validation and error handling: Not applicable.

Summary

The change is low-risk and fine to merge once CI passes. The only optional follow-up is a CHANGELOG entry, if the project tracks dev-dependency bumps.

Automated code review analyzing defects and coding standards