Bump virtualenv from 20.17.1 to 21.2.1

[dependabot]

Bumps virtualenv from 20.17.1 to 21.2.1.

Release notes

Sourced from virtualenv's releases.

21.2.1

What's Changed

• Upgrade embedded pip/setuptools/wheel by @​github-actions[bot] in pypa/virtualenv#3093
• Enhance upgrade workflow: age check, dedup, issue tracking by @​rahuldevikar in pypa/virtualenv#3094
• 🐛 fix(create): use commonpath for correct path validation by @​gaborbernat in pypa/virtualenv#3097
• 🔒 ci(workflows): add zizmor security auditing by @​gaborbernat in pypa/virtualenv#3099
• Add current and previous maintainers by @​rahuldevikar in pypa/virtualenv#3101
• 🔧 fix(ci): restore git credentials for release and upgrade jobs by @​gaborbernat in pypa/virtualenv#3102
• Fix broken Installation link in README by @​Bahtya in pypa/virtualenv#3106
• fix: use terminal width for help formatting instead of hardcoded 240 by @​Bahtya in pypa/virtualenv#3110
• 🐛 fix(nushell): surface actionable hint in deactivate error output by @​gaborbernat in pypa/virtualenv#3112
• 👷 ci: fix setup-uv warnings and drop brew@3.9 by @​gaborbernat in pypa/virtualenv#3113
• fix(ci): fix pre-release push and release note generation by @​gaborbernat in pypa/virtualenv#3114
• fix(ci): check out repo in publish job for gh release notes by @​gaborbernat in pypa/virtualenv#3115

New Contributors

• @​github-actions[bot] made their first contribution in pypa/virtualenv#3093
• @​Bahtya made their first contribution in pypa/virtualenv#3106

Full Changelog: pypa/virtualenv@21.2.0...21.2.1

21.2.0

What's Changed

• Move SECURITY.md to .github/SECURITY.md by @​gaborbernat in pypa/virtualenv#3077
• Standardize .github files to .yaml suffix by @​gaborbernat in pypa/virtualenv#3079
• Add type annotations to embed wheel generator output by @​rahuldevikar in pypa/virtualenv#3085
• fix broken README heading introduced in docs restructure by @​rahuldevikar in pypa/virtualenv#3088
• 🐛 fix(bash): use BASH_SOURCE in activate relocation by @​gaborbernat in pypa/virtualenv#3091
• 🐛 fix(create): prevent venv from racing virtualenv on gitignore creation by @​gaborbernat in pypa/virtualenv#3092

Full Changelog: pypa/virtualenv@21.1.0...21.2.0

21.1.0

What's Changed

• add comprehensive type annotations across the entire codebase by @​rahuldevikar in pypa/virtualenv#3076

Full Changelog: pypa/virtualenv@21.0.0...21.1.0

21.0.0

What's Changed

... (truncated)

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.2.1

• Upgrade embedded wheels:

  • setuptools to 82.0.1 from 82.0.0 (:issue:3093)

• Use terminal width for help formatting instead of hardcoded 240. (:issue:3110)

---

v21.2.0 (2026-03-09)

---

Features - 21.2.0

• Update embed wheel generator (tasks/upgrade_wheels.py) to include type annotations in generated output - by :user:rahuldevikar. (:issue:3075)

Bugfixes - 21.2.0

• Pass --without-scm-ignore-files to subprocess venv on Python 3.13+ so virtualenv controls .gitignore creation, fixing flaky test_create_no_seed and --no-vcs-ignore being ignored in subprocess path - by :user:gaborbernat. (:issue:3089)
• Use BASH_SOURCE[0] instead of $0 in the bash activate script relocation fallback, fixing incorrect PATH when sourcing the activate script from a different directory - by :user:gaborbernat. (:issue:3090)

---

v21.1.0 (2026-02-27)

---

Features - 21.1.0

• Add comprehensive type annotations across the entire codebase and ship a PEP 561 py.typed marker so downstream consumers and type checkers recognize virtualenv as an inline-typed package - by :user:rahuldevikar. (:issue:3075)

---

v21.0.0 (2026-02-25)

---

Deprecations and Removals - 21.0.0

• The Python discovery logic has been extracted into a standalone python-discovery package on PyPI (documentation <https://python-discovery.readthedocs.io/>_) and is now consumed as a dependency. If you previously imported discovery internals directly (e.g. from virtualenv.discovery.py_info import PythonInfo), switch to from python_discovery import PythonInfo. Backward-compatibility re-export shims are provided at virtualenv.discovery.py_info, virtualenv.discovery.py_spec, and virtualenv.discovery.cached_py_info, however these are considered unsupported and may be removed in a future release - by :user:gaborbernat.

... (truncated)

Commits

• d1fc6e6 Release 21.2.1
• 4136b51 fix(ci): check out repo in publish job for gh release notes (#3115)
• d1decea fix(ci): persist git credentials in pre-release workflow (#3114)
• 48e2110 👷 ci: fix setup-uv warnings and drop brew@3.9 (#3113)
• d00c465 🐛 fix(nushell): surface actionable hint in deactivate error output (#3112)
• 0a8c46a chore(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 (#3111)
• f0bbe17 fix: use terminal width for help formatting instead of hardcoded 240 (#3110)
• dfaa738 [pre-commit.ci] pre-commit autoupdate (#3109)
• cc658da chore(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 (#3107)
• f235373 Fix broken Installation link in README (#3106)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)