Skip to content

chore(deps): bump tox from 4.30.3 to 4.65.0 - #605

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/tox-4.65.0
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/tox-4.65.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •

Copy link
Copy Markdown

Bumps tox from 4.30.3 to 4.65.0.

Release notes

Sourced from tox's releases.

v4.65.0

What's Changed

Full Changelog: tox-dev/tox@4.64.10...4.65.0

v4.64.10

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.64.9...4.64.10

v4.64.9

What's Changed

Full Changelog: tox-dev/tox@4.64.8...4.64.9

v4.64.8

What's Changed

... (truncated)

Changelog

Sourced from tox's changelog.

Features - 4.65.0

  • Bump the default maximum CPython minor version to 3.15 in generative environment lists. (:issue:4136)

Bug fixes - 4.65.0

  • --result-json and tox config -o create the missing parent directory of the output file instead of crashing - by :user:SulimanAbdulrazzaq. (:issue:4126)
  • A set_env env file that is a directory or not UTF-8 fails the environment with a configuration error instead of a traceback, and a leading UTF-8 byte order mark no longer ends up in the first key - by :user:SulimanAbdulrazzaq. (:issue:4127)
  • A reused environment with commands = [] clears env_log_dir at the start of the run instead of keeping logs from the previous run - by :user:glaziermag. (:issue:4130)

Improved documentation - 4.65.0

  • Drop @impl from the tox_append_version_info plugin doc examples, since it made tox skip the inline plugin - by :user:Rodrigo-Palma. (:issue:4135)

v4.64.10 (2026-10-08)


Bug fixes - 4.64.10

  • Report an invalid configuration value as a one-line error naming the environment and key instead of a traceback, including -x overrides and values set by plugins - by :user:hfycium. (:issue:4118)
  • A command prefixed with ! that exits with 0 now fails the environment with exit code 1; before, tox reported it as a success - by :user:feiiiiii5. (:issue:4119)
  • Recreating an environment or clearing its temporary and log directories removes symlinks to directories, leaving their targets intact - by :user:gaborbernat. (:issue:4121)
  • A command prefixed with ! that cannot start, such as a missing executable, now fails the environment instead of passing - by :user:feiiiiii5. (:issue:4125)

v4.64.9 (2026-10-05)


Bug fixes - 4.64.9

  • Resolve substitutions and file| entries in :ref:set_env overrides passed through -x or TOX_OVERRIDE. Appended blocks replace inherited values while preserving explicit keys in the same or later overrides. Preserve these rules through section references, including native TOML arrays with extend = true. Resolve env-file selectors and values in the consuming environment. Prevent included values from overriding tox's own variables - by :user:Rodrigo-Palma. (:issue:4116)

... (truncated)

Commits
  • 21d7b51 release 4.65.0
  • fbe1248 feat: bump default maximum Python minor to 3.15 (#4136)
  • c6dabc2 📝 docs(plugins): drop @​impl from tox_append_version_info examples (#4135)
  • 5cec382 👷 ci: fix the cancelled() check that broke check.yaml (#4134)
  • 96f52d2 🐛 fix(env): reset env_log_dir when a run executes no commands (#4133)
  • 691ff93 ✅ test(exec): make the no_capture check actually assert (#4131)
  • 2316fa4 👷 ci: upload each test job's JUnit report as an artifact (#4132)
  • 023395c 🐛 fix(set_env): report unreadable env files and strip a UTF-8 BOM (#4127)
  • 0bb658c ✅ test: prune duplicate tests and fold lookup tables (#4129)
  • 9c6b900 🐛 fix(output): create missing parent dirs for --result-json and config -o (#4...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tox](https://github.com/tox-dev/tox) from 4.30.3 to 4.65.0.
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.30.3...4.65.0)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 12, 2026
BinoyOza-okta added a commit that referenced this pull request Oct 27, 2026
- Added changelog for the release 3.4.7.
- Updated versions from 3.4.6 to 3.4.7 for release.
- Applied dependency upgrades from the open Dependabot PRs to requirements.txt, test-requirements.txt, pyproject.toml and setup.py, and mirrored them in the OpenAPI Generator mustache templates.
- Added a virtualenv >= 21.14.9 dev dependency to resolve the transitive virtualenv security alerts from tox.

Supersedes #585, #586, #588, #589, #591, #592, #593, #595, #596, #597, #598, #599, #603, #604, #605
@dependabot @github

dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Author

Looks like tox is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 27, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/tox-4.65.0 branch October 27, 2026 05:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants