Commit 4329869
authored
Build(deps-dev): update tox requirement from >=4.53.1 to >=4.54.0 (#308)
Updates the requirements on [tox](https://github.com/tox-dev/tox) to
permit the latest version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/tox/releases">tox's
releases</a>.</em></p>
<blockquote>
<h2>v4.54.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>🧪 test(conftest): strip broken nspkg.pth files under py3.15 by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/tox-dev/tox/pull/3937">tox-dev/tox#3937</a></li>
<li>✨ feat(packaging): declare tox.pytest deps via a testing extra by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/tox-dev/tox/pull/3940">tox-dev/tox#3940</a></li>
<li>🐛 fix(schema): cover every replace form in the TOML schema by <a
href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in
<a
href="https://redirect.github.com/tox-dev/tox/pull/3941">tox-dev/tox#3941</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tox-dev/tox/compare/4.53.1...4.54.0">https://github.com/tox-dev/tox/compare/4.53.1...4.54.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/tox/blob/main/docs/changelog.rst">tox's
changelog</a>.</em></p>
<blockquote>
<h1>Features - 4.54.0</h1>
<ul>
<li>Declare the runtime dependencies of the <code>tox.pytest</code>
plugin (<code>pytest</code>, <code>devpi-process</code> and
<code>pytest-mock</code>)
under a new <code>testing</code> extra, so plugin authors can pull them
in via <code>tox[testing]</code> - by :user:<code>gaborbernat</code>.
(:issue:<code>3938</code>, :issue:<code>3940</code>)</li>
</ul>
<h1>Bug fixes - 4.54.0</h1>
<ul>
<li>Extend the generated TOML schema to cover every <code>replace</code>
table form (<code>env</code>, <code>ref</code>, <code>posargs</code>,
<code>glob</code>,
<code>if</code>), including conditional replacements used inside
<code>commands</code>. A guard test asserts the schema stays in sync
with the loader implementation so future replace types cannot be added
without a corresponding schema entry.
(:issue:<code>3939</code>)</li>
</ul>
<hr />
<p>v4.53.1 (2026-05-02)</p>
<hr />
<h1>Bug fixes - 4.53.1</h1>
<ul>
<li>
<p>Hardening pass on user-facing logging and config parsing:</p>
<ul>
<li>Mask secret-looking <code>--key=value</code> flag values in command
logs (terminal warnings, <code>.tox/<env>/log/*.log</code>, and
<code>Outcome</code> <code>__repr__</code>) using the same keyword regex
previously applied to environment variable values.</li>
<li>Resolve PEP 723 <code>script</code> paths and reject any that escape
<code>tox_root</code>; cap the script read at 5 MiB so a symlink
to <code>/dev/zero</code> cannot exhaust memory.</li>
<li>Replace <code>eval()</code> of a constructed
<code>Literal[...]</code> string in the CLI parser with a direct
<code>Literal[tuple(action.choices)]</code> subscript.</li>
<li>Pass <code>timeout=30</code> to <code>urlopen</code> when fetching a
remote requirements file so a slow or unresponsive mirror cannot
hang <code>tox</code> indefinitely. (:issue:<code>3924</code>)</li>
</ul>
</li>
<li>
<p>Allow the generated TOML schema to validate array values for
<code>deps</code>. (:issue:<code>3929</code>)</p>
</li>
<li>
<p>Correct type annotations for <code>ArgumentParser.parse_args</code>
and <code>parse_known_args</code> overrides following <code>typeshed PR
[#15613](https://github.com/tox-dev/tox/issues/15613)
<https://github.com/python/typeshed/pull/15613></code>_, which
widened the <code>args</code> parameter from <code>Sequence[str]</code>
to <code>Iterable[str]</code>. The narrower type in tox's overrides
violated the Liskov substitution principle and caused
<code>invalid-method-override</code> errors with <code>ty</code> 0.0.33.
Also correct the <code>option_spec</code> annotation in
<code>docs/tox_conf.py</code> to <code>ClassVar[dict[str,
Callable[[str], Any]]]</code> matching the docutils stubs type.
(:issue:<code>3932</code>)</p>
</li>
</ul>
<hr />
<p>v4.53.0 (2026-04-14)</p>
<hr />
<h1>Features - 4.53.0</h1>
<ul>
<li>TOML <code>env_list</code> now accepts bare range dicts (<code>{
prefix = "3.", start = 12, stop = 14 }</code>) and bare
labeled dicts
(<code>{ ecosystem = ["oci", "python"] }</code>) as
top-level items, removing the <code>{ product = [...] }</code> wrapper
when there is</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tox-dev/tox/commit/1f1fcc7a53665a827d8a304190696c6926ebb2eb"><code>1f1fcc7</code></a>
release 4.54.0</li>
<li><a
href="https://github.com/tox-dev/tox/commit/b35c8eedaf94906ed0e7938c7526dced550e6fa0"><code>b35c8ee</code></a>
🐛 fix(schema): cover every replace form in the TOML schema (<a
href="https://redirect.github.com/tox-dev/tox/issues/3941">#3941</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/6eb5c4f5eec439b3924d6adb3d9d16ea7fc88a20"><code>6eb5c4f</code></a>
✨ feat(packaging): declare tox.pytest deps via a testing extra (<a
href="https://redirect.github.com/tox-dev/tox/issues/3940">#3940</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/1ad47ddaab21c891f136a9627d1c6cdb6ea655d7"><code>1ad47dd</code></a>
🧪 test(conftest): strip broken nspkg.pth files under py3.15 (<a
href="https://redirect.github.com/tox-dev/tox/issues/3937">#3937</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/dfba9661b10aa5148daf7267b80fec50f4faa9d2"><code>dfba966</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/tox-dev/tox/issues/3936">#3936</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/21069af5f5b93774f88c271d5deb1389cd2caf12"><code>21069af</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/tox-dev/tox/issues/3933">#3933</a>)</li>
<li>See full diff in <a
href="https://github.com/tox-dev/tox/compare/4.53.1...4.54.0">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
50 | 50 | | |
51 | 51 | | |
52 | 52 | | |
53 | | - | |
| 53 | + | |
54 | 54 | | |
55 | 55 | | |
56 | 56 | | |
| |||
0 commit comments