Bump virtualenv from 20.39.0 to 21.2.0

[dependabot]

Bumps virtualenv from 20.39.0 to 21.2.0.

Release notes

Sourced from virtualenv's releases.

21.2.0

What's Changed

• Move SECURITY.md to .github/SECURITY.md by @​gaborbernat in pypa/virtualenv#3077
• Standardize .github files to .yaml suffix by @​gaborbernat in pypa/virtualenv#3079
• Add type annotations to embed wheel generator output by @​rahuldevikar in pypa/virtualenv#3085
• fix broken README heading introduced in docs restructure by @​rahuldevikar in pypa/virtualenv#3088
• 🐛 fix(bash): use BASH_SOURCE in activate relocation by @​gaborbernat in pypa/virtualenv#3091
• 🐛 fix(create): prevent venv from racing virtualenv on gitignore creation by @​gaborbernat in pypa/virtualenv#3092

Full Changelog: pypa/virtualenv@21.1.0...21.2.0

21.1.0

What's Changed

• add comprehensive type annotations across the entire codebase by @​rahuldevikar in pypa/virtualenv#3076

Full Changelog: pypa/virtualenv@21.0.0...21.1.0

21.0.0

What's Changed

• ♻️ refactor(discovery): extract py_discovery as self-contained package by @​gaborbernat in pypa/virtualenv#3070
• 📝 docs(changelog): add removal entry for python-discovery extraction by @​gaborbernat in pypa/virtualenv#3074

Full Changelog: pypa/virtualenv@20.39.1...21.0.0

20.39.1

What's Changed

• Align dependency versions across projects by @​gaborbernat in pypa/virtualenv#3069
• ✨ feat(create): add RustPython support by @​gaborbernat in pypa/virtualenv#3071
• 🐛 fix(create): add pythonw3.exe to Windows venvs by @​gaborbernat in pypa/virtualenv#3073

Full Changelog: pypa/virtualenv@20.39.0...20.39.1

Changelog

Sourced from virtualenv's changelog.

Features - 21.2.0

• Update embed wheel generator (tasks/upgrade_wheels.py) to include type annotations in generated output - by :user:rahuldevikar. (:issue:3075)

Bugfixes - 21.2.0

• Pass --without-scm-ignore-files to subprocess venv on Python 3.13+ so virtualenv controls .gitignore creation, fixing flaky test_create_no_seed and --no-vcs-ignore being ignored in subprocess path - by :user:gaborbernat. (:issue:3089)
• Use BASH_SOURCE[0] instead of $0 in the bash activate script relocation fallback, fixing incorrect PATH when sourcing the activate script from a different directory - by :user:gaborbernat. (:issue:3090)

---

v21.1.0 (2026-02-27)

---

Features - 21.1.0

• Add comprehensive type annotations across the entire codebase and ship a PEP 561 py.typed marker so downstream consumers and type checkers recognize virtualenv as an inline-typed package - by :user:rahuldevikar. (:issue:3075)

---

v21.0.0 (2026-02-25)

---

Deprecations and Removals - 21.0.0

• The Python discovery logic has been extracted into a standalone python-discovery package on PyPI (documentation <https://python-discovery.readthedocs.io/>_) and is now consumed as a dependency. If you previously imported discovery internals directly (e.g. from virtualenv.discovery.py_info import PythonInfo), switch to from python_discovery import PythonInfo. Backward-compatibility re-export shims are provided at virtualenv.discovery.py_info, virtualenv.discovery.py_spec, and virtualenv.discovery.cached_py_info, however these are considered unsupported and may be removed in a future release - by :user:gaborbernat. (:issue:3070)

---

v20.39.1 (2026-02-25)

---

Features - 20.39.1

• Add support for creating virtual environments with RustPython - by :user:elmjag. (:issue:3010)

---

... (truncated)

Commits

• 0b6f444 release 21.2.0
• e1af35d 🐛 fix(create): prevent venv from racing virtualenv on gitignore creation (#3092)
• f05bf08 🐛 fix(bash): use BASH_SOURCE in activate relocation (#3091)
• 0cd0e09 fix broken README heading introduced in docs restructure (#3088)
• b7ab17e [pre-commit.ci] pre-commit autoupdate (#3087)
• f2062bc chore(deps): bump astral-sh/setup-uv from 4 to 7 (#3086)
• eb27e55 Add type annotations to embed wheel generator output (#3085)
• fbb3bd1 chore(deps): bump peter-evans/create-pull-request from 7 to 8 (#3081)
• a1d3963 chore(deps): bump actions/setup-python from 5 to 6 (#3080)
• e768d56 chore(deps): bump actions/upload-artifact from 4 to 7 (#3082)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[YevheniiSemendiak]

Auto-approved