Bump virtualenv from 21.4.2 to 21.4.3

[dependabot]

Bumps virtualenv from 21.4.2 to 21.4.3.

Release notes

Sourced from virtualenv's releases.

21.4.3

What's Changed

• ci: silence avoidable check workflow notices by @​gaborbernat in pypa/virtualenv#3154
• Upgrade embedded pip/setuptools/wheel by @​github-actions[bot] in pypa/virtualenv#3155
• Fish activator passes VIRTUAL_ENV through cygpath by @​LuNoX in pypa/virtualenv#3161
• Stop exporting PS1 in bash activator by @​karlhillx in pypa/virtualenv#3162
• Add wheel-0.47.0 to seed packages as mitigation of CVE-2026-24049 by @​apophizzz in pypa/virtualenv#3167
• 🐛 fix(discovery): resolve base interpreter executable-only symlinks by @​gaborbernat in pypa/virtualenv#3166

New Contributors

• @​LuNoX made their first contribution in pypa/virtualenv#3161
• @​karlhillx made their first contribution in pypa/virtualenv#3162
• @​apophizzz made their first contribution in pypa/virtualenv#3167

Full Changelog: pypa/virtualenv@21.4.2...21.4.3

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.4.3

• Upgrade embedded wheels:

  • pip to 26.1.2 from 26.1.1 (:issue:u)

• Resolve executable-only symlinks when recording home and base-executable in pyvenv.cfg, mirroring CPython's getpath.realpathpython/cpython#115237 binary locate the base stdlib (for example python-build-standalone); a fully symlinked interpreter tree is kept as-is

  • by :user:gaborbernat. (:issue:3157)

• Stop exporting PS1 from the bash activator so child processes do not inherit shell prompt state. (:issue:3158)

• Handle CYGWIN/MSYS/MINGW path conversions in fish activation script - by user::LuNoX. (:issue:3160)

---

v21.4.2 (2026-05-31)

---

Commits

• 134b080 release 21.4.3
• 2a36128 🐛 fix(discovery): resolve base interpreter executable-only symlinks (#3166)
• 5389c25 Add wheel-0.47.0 to seed packages as mitigation of CVE-2026-24049 (#3167)
• 0134fee chore(deps): bump astral-sh/setup-uv from 8.1.0 to 8.2.0 (#3165)
• af1ed9f chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#3164)
• 1b00ec8 [pre-commit.ci] pre-commit autoupdate (#3163)
• ce9729e Stop exporting PS1 in bash activator (#3162)
• 9e6f59f Fish activator passes VIRTUAL_ENV through cygpath (#3161)
• a423028 [pre-commit.ci] pre-commit autoupdate (#3156)
• f838c21 Upgrade embedded pip/setuptools/wheel (#3155)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

Change summary: Single-line dependency bump in pyproject.toml (virtualenv==21.4.2 → 21.4.3) within the development extras group. This is an automated dependency update (likely Dependabot, per the merge commit message "Bump virtualenv from 21.4.2 to 21.4.3").

Code Quality

• ✅ Style conventions — Change follows existing formatting in pyproject.toml (pyproject.toml:48), no formatting issues.
• ✅ No commented-out code
• ✅ Meaningful variable names — N/A, dependency pin only
• ✅ DRY principle — N/A
• ✅ Defects — No logic changes; a patch-version bump of a dev-only dependency (virtualenv is in the development extras, not a runtime dependency) carries minimal risk. No bugs introduced.
• ✅ CLAUDE.md consideration — Not modified by this PR; no issue.

Testing

• ✅ N/A — No new functions/endpoints; this is a version pin change. No new tests required.

Documentation

• ✅ N/A — No README/API/CHANGELOG impact expected for a dev-dependency patch bump. Note: CHANGELOG.md was not updated, but this repo's dependency-bump PRs (per recent commit history, e.g. d62a5cf, 2dbe096) do not appear to update CHANGELOG.md for automated bumps, so this is consistent with existing convention.

Security

• ✅ No hardcoded credentials
• ✅ No input validation concerns
• ✅ No error handling concerns
• ✅ No sensitive data
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff

Verdict

Approve. This is a low-risk, routine dependency version bump with no functional, security, or documentation concerns.

Automated code review analyzing defects and coding standards

[github-actions]

Coverage report

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
src/senzing
szengineflags.py
szerror.py
Project Total

This report was generated by python-coverage-comment-action