Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 2, 2025

Bumps tox from 4.26.0 to 4.29.0.

Release notes

Sourced from tox's releases.

4.29.0

What's Changed

Full Changelog: tox-dev/tox@4.28.4...4.29.0

4.28.4

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.28.3...4.28.4

4.28.3

What's Changed

Full Changelog: tox-dev/tox@4.28.2...4.28.3

4.28.2

What's Changed

Full Changelog: tox-dev/tox@4.28.1...4.28.2

4.28.1

What's Changed

... (truncated)

Changelog

Sourced from tox's changelog.

v4.29.0 (2025-08-29)

Features - 4.29.0

- A new tox life cycle event is now exposed for use via :doc:`Plugins
  API </plugins>` -- by :user:`webknjaz`.

The corresponding hook point is :func:tox_extend_envs &lt;tox.plugin.spec.tox_extend_envs&gt;. It allows plugin authors to declare ephemeral environments that they can then populate through the in-memory configuration loader interface.

This patch was made possible thanks to pair programming with :user:gaborbernat at PyCon US 2025. (:issue:3510, :issue:3591)

v4.28.4 (2025-07-31)

Features - 4.28.4

  • Pass ssh-agent variables SSH_AGENT_PID and SSH_AUTH_SOCK in pass_env by default.
    • by :user:daniilgankov (:issue:3572)

v4.28.3 (2025-07-25)

No significant changes.

v4.28.2 (2025-07-25)

Bugfixes - 4.28.2

- Don't pass in the filter argument to tar.extractall on old Python versions - by :user:`gaborbernat`. (:issue:`3568`)

v4.28.1 (2025-07-22)

Bugfixes - 4.28.1

  • Use tarfile.data_filter <https://docs.python.org/3/library/tarfile.html#tarfile.data_filter>_ with extractall only on supported Python versions:

    • >= 3.11.4
    • >= 3.10.12 and < 3.11
    • >= 3.9.17 and < 3.10

    by :user:gaborbernat. (:issue:3565)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tox](https://github.com/tox-dev/tox) from 4.26.0 to 4.29.0.
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.26.0...4.29.0)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 2, 2025
Copy link

codecov bot commented Sep 2, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 4, 2025

Superseded by #1521.

@dependabot dependabot bot closed this Sep 4, 2025
@dependabot dependabot bot deleted the dependabot/pip/requirements/tox-4.29.0 branch September 4, 2025 02:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants