build(deps-dev): bump virtualenv from 21.7.12 to 21.7.13

[dependabot]

Bumps virtualenv from 21.7.12 to 21.7.13.

Release notes

Sourced from virtualenv's releases.

21.7.13

What's Changed

• 👷 ci: correct a stale checkout pin comment by @​gaborbernat in pypa/virtualenv#3254
• 🔧 chore: drop misc as a changelog fragment type by @​gaborbernat in pypa/virtualenv#3255
• 👷 ci: scope the nushell apt key to its own repo by @​gaborbernat in pypa/virtualenv#3253
• 🐛 fix(activation): stop path command injection in bash and fish by @​gaborbernat in pypa/virtualenv#3252

Full Changelog: pypa/virtualenv@21.7.12...21.7.13

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.7.13

• Fix activate and activate.fish running commands embedded in the virtual environment path or in the interpreter's Tcl/Tk library paths. (:issue:3252)

---

v21.7.12 (2026-09-18)

---

Commits

• 0c295ff release 21.7.13
• 4d5a105 🐛 fix(activation): stop path command injection in bash and fish (#3252)
• 0525dce 👷 ci: scope the nushell apt key to its own repo (#3253)
• aa8323a 🔧 chore: drop misc as a changelog fragment type (#3255)
• a435477 👷 ci: correct a stale checkout pin comment (#3254)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

Review: bump virtualenv 21.7.12 → 21.7.13

The diff changes one line in development-requirements.txt. It's a patch-level bump of a dev-only dependency.

Code Quality

• ✅ Style conventions: The change keeps the existing pinned == format and the alphabetical ordering.
• ✅ No commented-out code.
• ✅ Variable names: Not applicable.
• ✅ DRY: Not applicable.
• ✅ Defects: None are likely. This is a patch release of a build and test tool, and it isn't shipped in runtime dependencies. I didn't check the upstream release notes, since there was no network access.
• ✅ .claude/CLAUDE.md: The PR doesn't touch it.

Testing

• ✅ Unit tests, integration tests, edge cases, coverage: No code changed, so no new tests are needed. CI should confirm the environment still builds and tests pass with the new version.

Documentation

• ✅ README and API docs: No update needed.
• ✅ CHANGELOG.md: Dependabot bumps to dev dependencies usually don't get an entry, and the previous bumps (build(deps-dev): bump build from 1.6.0 to 1.6.1 #205, build(deps-dev): bump virtualenv from 21.7.9 to 21.7.12 #206, build(deps-dev): bump coverage from 7.16.0 to 7.16.1 #209) follow that pattern. I haven't confirmed the file's convention.
• ✅ Markdown: No Markdown files changed.

Security

• ✅ No hardcoded credentials.
• ✅ Input validation and error handling: Not applicable.
• ✅ No sensitive data in logs.
• ✅ No .lic files or AQAAAD strings in the diff.

Summary

✅ Approve. This is a low-risk, routine dependency bump. Merge once CI is green.

Automated code review analyzing defects and coding standards