Bump virtualenv from 20.39.0 to 21.0.0

[dependabot]

Bumps virtualenv from 20.39.0 to 21.0.0.

Release notes

Sourced from virtualenv's releases.

21.0.0

What's Changed

• ♻️ refactor(discovery): extract py_discovery as self-contained package by @​gaborbernat in pypa/virtualenv#3070
• 📝 docs(changelog): add removal entry for python-discovery extraction by @​gaborbernat in pypa/virtualenv#3074

Full Changelog: pypa/virtualenv@20.39.1...21.0.0

20.39.1

What's Changed

• Align dependency versions across projects by @​gaborbernat in pypa/virtualenv#3069
• ✨ feat(create): add RustPython support by @​gaborbernat in pypa/virtualenv#3071
• 🐛 fix(create): add pythonw3.exe to Windows venvs by @​gaborbernat in pypa/virtualenv#3073

Full Changelog: pypa/virtualenv@20.39.0...20.39.1

Changelog

Sourced from virtualenv's changelog.

Deprecations and Removals - 21.0.0

• The Python discovery logic has been extracted into a standalone python-discovery package on PyPI (documentation <https://python-discovery.readthedocs.io/>_) and is now consumed as a dependency. If you previously imported discovery internals directly (e.g. from virtualenv.discovery.py_info import PythonInfo), switch to from python_discovery import PythonInfo. Backward-compatibility re-export shims are provided at virtualenv.discovery.py_info, virtualenv.discovery.py_spec, and virtualenv.discovery.cached_py_info, however these are considered unsupported and may be removed in a future release - by :user:gaborbernat. (:issue:3070)

---

v20.39.1 (2026-02-25)

---

Features - 20.39.1

• Add support for creating virtual environments with RustPython - by :user:elmjag. (:issue:3010)

---

v20.39.0 (2026-02-23)

---

Commits

• 7687420 release 21.0.0
• 8ec3142 📝 docs(changelog): add removal entry for python-discovery extraction (#3074)
• f89d46c ♻️ refactor(discovery): extract py_discovery as self-contained package (#3070)
• 0272c72 release 20.39.1
• b1ca37f 🐛 fix(create): add pythonw3.exe to Windows venvs (#3073)
• 1d4a338 ✨ feat(create): add RustPython support (#3071)
• a10c5d4 Align dependency versions across projects (#3069)
• 22a8860 [pre-commit.ci] pre-commit autoupdate (#3068)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Resolves #3074
Resolves #3070
Resolves #3073
Resolves #3071
Resolves #3069
Resolves #3068
Resolves pypa/virtualenv#3070
Resolves pypa/virtualenv#3074
Resolves pypa/virtualenv#3069
Resolves pypa/virtualenv#3071
Resolves pypa/virtualenv#3073

[github-actions]

🤖 Claude Code Review

PR Code Review

Diff Summary: Bumps virtualenv from 20.39.0 to 21.0.0 in pyproject.toml (development dependencies).

---

Code Quality

• ✅ Style guide: Single dependency version bump, no style concerns.
• ✅ No commented-out code
• ✅ Meaningful variable names: N/A
• ✅ DRY principle: N/A
• ✅ Defects: No logic changes; this is a dependency update only. No bugs or security concerns introduced.
• ✅ CLAUDE.md: No issues — the project instructions are general and environment-agnostic.

Testing

• ✅ Unit/integration tests: No code changes require new tests.
• ⚠️ Test coverage: Not applicable for a dependency bump, but worth confirming CI passes with the new virtualenv version (major version bump 20.x → 21.x could introduce breaking changes in tooling behavior).

Documentation

• ✅ README: No update needed.
• ✅ API docs: N/A
• ✅ Inline comments: N/A
• ❌ CHANGELOG.md: Not updated. Dependency bumps are typically noted in a changelog entry. Recommend adding an entry for the virtualenv upgrade.
• ✅ Markdown formatting: N/A

Security

• ✅ No hardcoded credentials
• ✅ No license files checked in
• ✅ No sensitive data
• ✅ virtualenv 21.0.0: This is a legitimate PyPA-maintained package upgrade. No known security issues with this version.

---

Summary

This is a routine dependency bump. The only notable item:

1. Major version bump (20.x → 21.x): Verify that virtualenv 21.0.0 does not introduce breaking changes affecting the development workflow (e.g., the python -m venv usage in CLAUDE.md). Review the virtualenv changelog to confirm compatibility.
2. CHANGELOG.md should be updated to record this dependency change.

---

Automated code review analyzing defects and coding standards