Build(deps-dev): update tox requirement from >=4.53.0 to >=4.53.1 (#295)

Updates the requirements on [tox](https://github.com/tox-dev/tox) to
permit the latest version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/tox/releases">tox's
releases</a>.</em></p>
<blockquote>
<h2>v4.53.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>🐛 fix(security): harden user-facing logs and untrusted inputs by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/tox-dev/tox/pull/3924">tox-dev/tox#3924</a></li>
<li>🐛 fix(type): correct argparse override signatures for ty 0.0.33 by
<a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a>
in <a
href="https://redirect.github.com/tox-dev/tox/pull/3932">tox-dev/tox#3932</a></li>
<li>fix: allow deps arrays in TOML schema by <a
href="https://github.com/cyphercodes"><code>@​cyphercodes</code></a> in
<a
href="https://redirect.github.com/tox-dev/tox/pull/3931">tox-dev/tox#3931</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/cyphercodes"><code>@​cyphercodes</code></a>
made their first contribution in <a
href="https://redirect.github.com/tox-dev/tox/pull/3931">tox-dev/tox#3931</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tox-dev/tox/compare/4.53.0...4.53.1">https://github.com/tox-dev/tox/compare/4.53.0...4.53.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/tox/blob/main/docs/changelog.rst">tox's
changelog</a>.</em></p>
<blockquote>
<h1>Bug fixes - 4.53.1</h1>
<ul>
<li>
<p>Hardening pass on user-facing logging and config parsing:</p>
<ul>
<li>Mask secret-looking <code>--key=value</code> flag values in command
logs (terminal warnings, <code>.tox/&lt;env&gt;/log/*.log</code>, and
<code>Outcome</code> <code>__repr__</code>) using the same keyword regex
previously applied to environment variable values.</li>
<li>Resolve PEP 723 <code>script</code> paths and reject any that escape
<code>tox_root</code>; cap the script read at 5 MiB so a symlink
to <code>/dev/zero</code> cannot exhaust memory.</li>
<li>Replace <code>eval()</code> of a constructed
<code>Literal[...]</code> string in the CLI parser with a direct
<code>Literal[tuple(action.choices)]</code> subscript.</li>
<li>Pass <code>timeout=30</code> to <code>urlopen</code> when fetching a
remote requirements file so a slow or unresponsive mirror cannot
hang <code>tox</code> indefinitely. (:issue:<code>3924</code>)</li>
</ul>
</li>
<li>
<p>Allow the generated TOML schema to validate array values for
<code>deps</code>. (:issue:<code>3929</code>)</p>
</li>
<li>
<p>Correct type annotations for <code>ArgumentParser.parse_args</code>
and <code>parse_known_args</code> overrides following <code>typeshed PR
[#15613](https://github.com/tox-dev/tox/issues/15613)
&lt;https://github.com/python/typeshed/pull/15613&gt;</code>_, which
widened the <code>args</code> parameter from <code>Sequence[str]</code>
to <code>Iterable[str]</code>. The narrower type in tox's overrides
violated the Liskov substitution principle and caused
<code>invalid-method-override</code> errors with <code>ty</code> 0.0.33.
Also correct the <code>option_spec</code> annotation in
<code>docs/tox_conf.py</code> to <code>ClassVar[dict[str,
Callable[[str], Any]]]</code> matching the docutils stubs type.
(:issue:<code>3932</code>)</p>
</li>
</ul>
<hr />
<p>v4.53.0 (2026-04-14)</p>
<hr />
<h1>Features - 4.53.0</h1>
<ul>
<li>TOML <code>env_list</code> now accepts bare range dicts (<code>{
prefix = &quot;3.&quot;, start = 12, stop = 14 }</code>) and bare
labeled dicts
(<code>{ ecosystem = [&quot;oci&quot;, &quot;python&quot;] }</code>) as
top-level items, removing the <code>{ product = [...] }</code> wrapper
when there is
only a single factor group - by :user:<code>gaborbernat</code>.
(:issue:<code>3923</code>)</li>
</ul>
<h1>Bug fixes - 4.53.0</h1>
<ul>
<li>Nesting a range or labeled dict inside a <code>product</code>
factor-group list now raises a clear error pointing at the
un-nesting fix, instead of silently producing a malformed environment
name - by :user:<code>gaborbernat</code>.
(:issue:<code>3923</code>)</li>
</ul>
<hr />
<p>v4.52.1 (2026-04-09)</p>
<hr />
<h1>Bug fixes - 4.52.1</h1>
<ul>
<li>Changing a resolution-affecting environment variable via
<code>set_env</code> (e.g. <code>PIP_INDEX_URL</code>) now invalidates
the
install cache and triggers a reinstall, rather than incorrectly reusing
the cached environment - by
:user:<code>gaborbernat</code>. (:issue:<code>3917</code>)</li>
<li>Use <code>normalize_isa</code> from <code>python-discovery</code>
for architecture factor matching, supporting aliases like
<code>i686</code> →</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tox-dev/tox/commit/2b177917e4c0208c3e380e43f8d32d507180d82e"><code>2b17791</code></a>
release 4.53.1</li>
<li><a
href="https://github.com/tox-dev/tox/commit/86234dd57fc6a6dbf801aa98a91642cb9daf1dc8"><code>86234dd</code></a>
fix: allow deps arrays in TOML schema (<a
href="https://redirect.github.com/tox-dev/tox/issues/3931">#3931</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/dd305fe8f347c49fcd3bd63d5e56c912e4c428f2"><code>dd305fe</code></a>
🐛 fix(type): correct argparse override signatures for ty 0.0.33 (<a
href="https://redirect.github.com/tox-dev/tox/issues/3932">#3932</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/3aa3cd5d4226dfdb54de3de810cd9367390c6424"><code>3aa3cd5</code></a>
[pre-commit.ci] pre-commit autoupdate</li>
<li><a
href="https://github.com/tox-dev/tox/commit/59b6cd2c5cd7b7ebc44f65646f239ec6f2382f6e"><code>59b6cd2</code></a>
build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 (<a
href="https://redirect.github.com/tox-dev/tox/issues/3928">#3928</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/3765fcd51f62efeac5b948fcf492dcd1d18398ce"><code>3765fcd</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/tox-dev/tox/issues/3927">#3927</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/b76c383d55551c691ca3edda91838ce79b5de82a"><code>b76c383</code></a>
build(deps): bump actions/cache from 5.0.4 to 5.0.5 (<a
href="https://redirect.github.com/tox-dev/tox/issues/3926">#3926</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/7b0ad944ba8ebe4644289333660280fcccf8ab8a"><code>7b0ad94</code></a>
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (<a
href="https://redirect.github.com/tox-dev/tox/issues/3925">#3925</a>)</li>
<li><a
href="https://github.com/tox-dev/tox/commit/4dcde44c0746138421bef38f1c0dac42ee505223"><code>4dcde44</code></a>
🐛 fix(security): harden user-facing logs and untrusted inputs (<a
href="https://redirect.github.com/tox-dev/tox/issues/3924">#3924</a>)</li>
<li>See full diff in <a
href="https://github.com/tox-dev/tox/compare/4.53.0...4.53.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Author: github-actions[bot]

pyproject.toml

@@ -51,7 +51,7 @@ dev = [
     "pytest-xdist[psutil]>=3.8.0",
     "ruff>=0.15.12",
     "sphinx>=9.0.4",
-    "tox>=4.53.0",
+    "tox>=4.53.1",
     "tox-gh-actions>=3.5.0",
 ]