Bump virtualenv from 20.39.0 to 21.0.0

[dependabot]

Bumps virtualenv from 20.39.0 to 21.0.0.

Release notes

Sourced from virtualenv's releases.

21.0.0

What's Changed

• ♻️ refactor(discovery): extract py_discovery as self-contained package by @​gaborbernat in pypa/virtualenv#3070
• 📝 docs(changelog): add removal entry for python-discovery extraction by @​gaborbernat in pypa/virtualenv#3074

Full Changelog: pypa/virtualenv@20.39.1...21.0.0

20.39.1

What's Changed

• Align dependency versions across projects by @​gaborbernat in pypa/virtualenv#3069
• ✨ feat(create): add RustPython support by @​gaborbernat in pypa/virtualenv#3071
• 🐛 fix(create): add pythonw3.exe to Windows venvs by @​gaborbernat in pypa/virtualenv#3073

Full Changelog: pypa/virtualenv@20.39.0...20.39.1

Changelog

Sourced from virtualenv's changelog.

Deprecations and Removals - 21.0.0

• The Python discovery logic has been extracted into a standalone python-discovery package on PyPI (documentation <https://python-discovery.readthedocs.io/>_) and is now consumed as a dependency. If you previously imported discovery internals directly (e.g. from virtualenv.discovery.py_info import PythonInfo), switch to from python_discovery import PythonInfo. Backward-compatibility re-export shims are provided at virtualenv.discovery.py_info, virtualenv.discovery.py_spec, and virtualenv.discovery.cached_py_info, however these are considered unsupported and may be removed in a future release - by :user:gaborbernat. (:issue:3070)

---

v20.39.1 (2026-02-25)

---

Features - 20.39.1

• Add support for creating virtual environments with RustPython - by :user:elmjag. (:issue:3010)

---

v20.39.0 (2026-02-23)

---

Commits

• 7687420 release 21.0.0
• 8ec3142 📝 docs(changelog): add removal entry for python-discovery extraction (#3074)
• f89d46c ♻️ refactor(discovery): extract py_discovery as self-contained package (#3070)
• 0272c72 release 20.39.1
• b1ca37f 🐛 fix(create): add pythonw3.exe to Windows venvs (#3073)
• 1d4a338 ✨ feat(create): add RustPython support (#3071)
• a10c5d4 Align dependency versions across projects (#3069)
• 22a8860 [pre-commit.ci] pre-commit autoupdate (#3068)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Resolves #3074
Resolves #3070
Resolves #3073
Resolves #3071
Resolves #3069
Resolves #3068
Resolves pypa/virtualenv#3070
Resolves pypa/virtualenv#3074
Resolves pypa/virtualenv#3069
Resolves pypa/virtualenv#3071
Resolves pypa/virtualenv#3073

[github-actions]

🤖 Claude Code Review

Code Review

Code Quality

• ✅ Simple dependency version bump, no style concerns
• ✅ No commented-out code
• ✅ No logic changes to evaluate

Testing

• ✅ Dependency bump — no new functions or endpoints requiring tests

Documentation

• ✅ No README or API doc changes needed for a dependency update
• ❌ CHANGELOG.md not updated — version bumps should be recorded

Security

• ✅ No hardcoded credentials
• ✅ virtualenv==21.0.0 — confirm this is a trusted release from PyPI (standard package, no known issues)
• ✅ No license files checked in

---

Summary

This is a straightforward virtualenv bump from 20.39.0 → 21.0.0. The only actionable finding is:

• CHANGELOG.md: Should be updated to reflect this dependency change if the project maintains one.

Otherwise, the change is clean and acceptable to merge.

Automated code review analyzing defects and coding standards