Bump virtualenv from 21.7.4 to 21.7.5

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps virtualenv from 21.7.4 to 21.7.5.

Release notes

Sourced from virtualenv's releases.

21.7.5

What's Changed

• 🐛 fix(types): adapt to python-discovery 1.5.2 annotations by @​gaborbernat in pypa/virtualenv#3211
• 📄 docs: publish llms.txt from the docs build by @​gaborbernat in pypa/virtualenv#3210
• Push renamed changelog to PR branch in upgrade workflow by @​gaborbernat in pypa/virtualenv#3213
• 🔧 chore: batch dependency updates weekly on Tuesday by @​gaborbernat in pypa/virtualenv#3219
• docs: actualize python support version by @​even-even in pypa/virtualenv#3220
• 🐛 fix(create): check every execute bit in ExePathRef.can_run by @​darrenhuai in pypa/virtualenv#3217
• 🐛 fix(util): make safe_delete's error handler actually run by @​darrenhuai in pypa/virtualenv#3222

New Contributors

• @​even-even made their first contribution in pypa/virtualenv#3220

Full Changelog: pypa/virtualenv@21.7.4...21.7.5

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.7.5

• Fix the type check against python-discovery 1.5.2, whose annotations allow a None prefix and integer sysconfig_vars values: config var substitution now skips a missing prefix and locating the shared libpython requires string INSTSONAME/LIBDIR values. (:issue:3211)
• ExePathRef.can_run now checks the group and other execute bits instead of only the owner one, and returns False rather than None when a file carries none of the three - by :user:darrenhuai. (:issue:3217)
• safe_delete no longer passes ignore_errors=True to shutil.rmtree, which replaced its own chmod-and-retry handler with a no-op and swallowed every failure. Read-only files - every file in a wheel image, which set_tree marks - survived, so --reset-app-data and --clear kept trees they reported deleting. The handler now retries only the deletion itself, keeps the other mode bits, and raises the original error for anything it cannot clear - by :user:darrenhuai. (:issue:3222)

---

v21.7.4 (2026-08-10)

---

Commits

• 2a645ae release 21.7.5
• a48bf4b 🐛 fix(util): make safe_delete's error handler actually run (#3222)
• 31b5081 🐛 fix(create): check every execute bit in ExePathRef.can_run (#3217)
• 5640eef [pre-commit.ci] pre-commit autoupdate (#3221)
• 1ebcab6 docs: actualize python support version (#3220)
• eb241a0 🔧 chore: batch dependency updates weekly on Tuesday (#3219)
• 9534eda chore(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#3218)
• c8c4285 chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0 (#3215)
• ea806db [pre-commit.ci] pre-commit autoupdate (#3214)
• a21130f Push renamed changelog to PR branch in upgrade workflow (#3213)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.02%. Comparing base (c52fe79) to head (d4d4111).
⚠️ Report is 2 commits behind head on master.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##           master   #13570   +/-   ##
=======================================
  Coverage   99.02%   99.02%           
=======================================
  Files         135      135           
  Lines       50486    50486           
  Branches     2650     2650           
=======================================
  Hits        49993    49993           
  Misses        370      370           
  Partials      123      123           

Flag	Coverage Δ
Autobahn	22.03% <ø> (ø)
CI-GHA	98.91% <ø> (ø)
OS-Linux	98.69% <ø> (ø)
OS-Windows	97.09% <ø> (ø)
OS-macOS	97.97% <ø> (ø)
Py-3.10	98.12% <ø> (ø)
Py-3.11	98.35% <ø> (ø)
Py-3.12	98.43% <ø> (ø)
Py-3.13	98.42% <ø> (ø)
Py-3.14	98.46% <ø> (ø)
Py-3.14t	97.61% <ø> (-0.01%)	⬇️
Py-pypy-3.11	97.41% <ø> (+<0.01%)	⬆️
VM-macos	97.97% <ø> (ø)
VM-ubuntu	98.69% <ø> (ø)
VM-windows	97.09% <ø> (ø)
cython-coverage	83.09% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

[codspeed-hq]

Merging this PR will degrade performance by 13.19%

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

❌ 1 (👁 1) regressed benchmark
✅ 95 untouched benchmarks
⏩ 83 skipped benchmarks¹

Performance Changes

	Benchmark	BASE	HEAD	Efficiency
👁	test_read_base64_part	10.2 ms	11.7 ms	-13.19%

---

_{Comparing dependabot/pip/virtualenv-21.7.5 (d4d4111) with master (c52fe79)}

Footnotes

1. 83 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩