security: update virtualenv to fix command injection vulnerability

[devin-ai-integration]

Security: Update virtualenv to fix command injection vulnerability

This PR updates virtualenv to version 20.29.1 to fix a high-severity command injection vulnerability that affects versions before 20.26.6. The vulnerability allows command injection through activation scripts for a virtual environment.

Changes

• Updated virtualenv from 20.23.1 to 20.29.1
• Updated related dependencies (distlib, platformdirs)

Security Impact

This update addresses a high-severity security vulnerability that could allow command injection through virtual environment activation scripts.

Testing

• ✅ Package updates successfully applied
• ✅ Dependencies resolved without conflicts
• ✅ Pre-commit hooks passing

Link to Devin run: https://app.devin.ai/sessions/2430149b78eb49f6bff9c52e97afdb17
Requested by: [email protected]

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add "(aside)" to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring