Build(deps-dev): bump tox from 4.60.0 to 4.60.1

[dependabot]

Bumps tox from 4.60.0 to 4.60.1.

Release notes

Sourced from tox's releases.

v4.60.1

What's Changed

• Stop Windows pytest-timeout kills in CI by @​gaborbernat in tox-dev/tox#4026
• fix(config): report a malformed ini as a handled error instead of a traceback by @​VXNCXNX in tox-dev/tox#4027
• Handle unreadable configuration files by @​SirHegel in tox-dev/tox#4035
• fix: a semicolon truncates a value read from a set_env file by @​VXNCXNX in tox-dev/tox#4030
• fix: report an invalid --skip-env regex as a handled error by @​VXNCXNX in tox-dev/tox#4029
• docs: drop the claim that tox -e py skips tests with missing dependencies by @​MohammedAlkindi in tox-dev/tox#4036
• 🔧 chore: drop the now-unused ty ignore directive by @​gaborbernat in tox-dev/tox#4039
• 🔧 chore: batch dependency updates weekly on Tuesday by @​gaborbernat in tox-dev/tox#4038
• Report a bad ini core value as a handled error by @​VXNCXNX in tox-dev/tox#4028
• Report an empty TOML command value as a handled error by @​dylanpulver in tox-dev/tox#4041

New Contributors

• @​VXNCXNX made their first contribution in tox-dev/tox#4027
• @​SirHegel made their first contribution in tox-dev/tox#4035
• @​MohammedAlkindi made their first contribution in tox-dev/tox#4036
• @​dylanpulver made their first contribution in tox-dev/tox#4041

Full Changelog: tox-dev/tox@4.60.0...4.60.1

Changelog

Sourced from tox's changelog.

Bug fixes - 4.60.1

• Report a malformed tox.ini or setup.cfg as a handled error during config discovery instead of raising an unhandled :class:configparser.Error traceback - by :user:VXNCXNX (:issue:4027)
• Report an invalid value in the ini [tox] core section (such as min_version, requires or env_list) as a handled error instead of an unhandled traceback, matching the existing TOML loader behavior - by :user:VXNCXNX (:issue:4028)
• Report an invalid --skip-env/TOX_SKIP_ENV regular expression as a handled error instead of raising an unhandled re.error traceback - by :user:VXNCXNX (:issue:4029)
• Keep ; inside values read from a set_env environment file (file|.env). Environment file lines are plain KEY=VALUE pairs and were incorrectly parsed with the PEP-508 marker splitter, which truncated values such as DATABASE_URL=postgresql://host/db?opt=1;sslmode=require at the first semicolon - by :user:VXNCXNX (:issue:4030)
• Report a handled configuration error instead of leaking a traceback when the selected configuration file exists but cannot be read - by :user:SirHegel. (:issue:4031)
• Report an empty install_command or list_dependencies_command in a TOML configuration as a handled error instead of an unhandled traceback - by :user:dylanpulver (:issue:4041)

Contributor-facing changes - 4.60.1

• Pre-seed the setuptools wheel image alongside pip before the test session and give integration tests a 240s budget on Windows, so pytest-timeout no longer kills Windows CI workers - by :user:gaborbernat. (:issue:4026)

---

v4.60.0 (2026-08-13)

---

Commits

• e91ca3b release 4.60.1
• 59e984f Report an empty TOML command value as a handled error (#4041)
• fcb513e [pre-commit.ci] pre-commit autoupdate (#4040)
• e753137 Report a bad ini core value as a handled error (#4028)
• 79a45b4 🔧 chore: batch dependency updates weekly on Tuesday (#4038)
• e388aeb 🔧 chore: drop the now-unused ty ignore directive (#4039)
• 76baa0a docs: drop the claim that tox -e py skips tests with missing dependencies (#4...
• 0250664 build(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#4037)
• 8527c61 fix: report an invalid --skip-env regex as a handled error (#4029)
• fb859dc fix: a semicolon truncates a value read from a set_env file (#4030)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

I'm approving this pull request because it includes a patch or minor update