Bump virtualenv from 20.39.0 to 21.0.0

[dependabot]

Bumps virtualenv from 20.39.0 to 21.0.0.

Release notes

Sourced from virtualenv's releases.

21.0.0

What's Changed

• ♻️ refactor(discovery): extract py_discovery as self-contained package by @​gaborbernat in pypa/virtualenv#3070
• 📝 docs(changelog): add removal entry for python-discovery extraction by @​gaborbernat in pypa/virtualenv#3074

Full Changelog: pypa/virtualenv@20.39.1...21.0.0

20.39.1

What's Changed

• Align dependency versions across projects by @​gaborbernat in pypa/virtualenv#3069
• ✨ feat(create): add RustPython support by @​gaborbernat in pypa/virtualenv#3071
• 🐛 fix(create): add pythonw3.exe to Windows venvs by @​gaborbernat in pypa/virtualenv#3073

Full Changelog: pypa/virtualenv@20.39.0...20.39.1

Changelog

Sourced from virtualenv's changelog.

Deprecations and Removals - 21.0.0

• The Python discovery logic has been extracted into a standalone python-discovery package on PyPI (documentation <https://python-discovery.readthedocs.io/>_) and is now consumed as a dependency. If you previously imported discovery internals directly (e.g. from virtualenv.discovery.py_info import PythonInfo), switch to from python_discovery import PythonInfo. Backward-compatibility re-export shims are provided at virtualenv.discovery.py_info, virtualenv.discovery.py_spec, and virtualenv.discovery.cached_py_info, however these are considered unsupported and may be removed in a future release - by :user:gaborbernat. (:issue:3070)

---

v20.39.1 (2026-02-25)

---

Features - 20.39.1

• Add support for creating virtual environments with RustPython - by :user:elmjag. (:issue:3010)

---

v20.39.0 (2026-02-23)

---

Commits

• 7687420 release 21.0.0
• 8ec3142 📝 docs(changelog): add removal entry for python-discovery extraction (#3074)
• f89d46c ♻️ refactor(discovery): extract py_discovery as self-contained package (#3070)
• 0272c72 release 20.39.1
• b1ca37f 🐛 fix(create): add pythonw3.exe to Windows venvs (#3073)
• 1d4a338 ✨ feat(create): add RustPython support (#3071)
• a10c5d4 Align dependency versions across projects (#3069)
• 22a8860 [pre-commit.ci] pre-commit autoupdate (#3068)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Resolves #3074
Resolves #3070
Resolves #3073
Resolves #3071
Resolves #3069
Resolves #3068
Resolves pypa/virtualenv#3070
Resolves pypa/virtualenv#3074
Resolves pypa/virtualenv#3069
Resolves pypa/virtualenv#3071
Resolves pypa/virtualenv#3073

[github-actions]

🤖 Claude Code Review

PR Code Review

Bump virtualenv from 20.39.0 to 21.0.0

---

Code Quality

✅ Style guide — Single-line change in pyproject.toml, no style concerns.

✅ No commented-out code — N/A.

✅ Meaningful variable names — N/A.

✅ DRY principle — N/A.

✅ Defects — Dependency version bump only. No logic changes. No bugs or security issues introduced.

✅ CLAUDE.md — No issues; project config is appropriately general.

---

Testing

✅ No code logic changed; no new tests required.

---

Documentation

✅ README — No update needed for a dev-dependency bump.

✅ CHANGELOG.md — Dependency bumps of this nature (automated bot PRs) typically don't require changelog entries.

---

Security

✅ No hardcoded credentials — Clean.

✅ No license files — None present.

⚠️ Note on major version bump: virtualenv is jumping from 20.x to 21.0.0 (major version). While this is a dev dependency only (used in the development group), it's worth confirming that virtualenv==21.0.0 is compatible with the supported Python versions (>=3.10 per pyproject.toml) and that no breaking changes affect the development workflow.

---

Summary

This is a routine automated dependency bump (likely from Dependabot/Renovate). The change is minimal and low-risk since virtualenv is a development-only dependency. The major version increment (20.x → 21.0.0) is the only point worth a quick sanity check on compatibility, but otherwise this PR is approved.

Automated code review analyzing defects and coding standards