Merge pull request #3916 from mapfish/ghci/audit/snyk/3.33

Audit Snyk check/fix 3.33

Author: geo-ghci-int[bot]

ci/requirements.txt

@@ -3,3 +3,4 @@ pre-commit==4.2.0
 tag-publish==1.1.1
 filelock>=3.20.1 # not directly required, pinned by Snyk to avoid a vulnerability
 urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability
+virtualenv>=20.36.1 # not directly required, pinned by Snyk to avoid a vulnerability