Skip to content

Build(deps-dev): Update tox requirement from >=4.54.0 to >=4.55.0 - #317

Merged
Diapolo10 merged 3 commits into
mainfrom
dependabot/pip/tox-gte-4.55.0
Jun 1, 2026
Merged

Build(deps-dev): Update tox requirement from >=4.54.0 to >=4.55.0#317
Diapolo10 merged 3 commits into
mainfrom
dependabot/pip/tox-gte-4.55.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 29, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on tox to permit the latest version.

Release notes

Sourced from tox's releases.

v4.55.0

What's Changed

Full Changelog: tox-dev/tox@4.54.0...4.55.0

Changelog

Sourced from tox's changelog.

Features - 4.55.0

  • Automatically pass the TERMINFO environment variable to tox subprocesses if the output is a TTY. This variable is used by Ghostty to communicate terminal capabilities to programs. (:issue:3946)

Bug fixes - 4.55.0

  • When the constraints configuration option is set, constrain_package_deps and use_frozen_constraints are now ignored. Previously, both the user-provided constraints file and the auto-generated constraints file were passed to pip during install_package_deps, which could cause resolver conflicts when the same package appeared in both files - by :user:gaborbernat. (:issue:3945) (:issue:3945)

v4.54.0 (2026-05-12)


Features - 4.54.0

  • Declare the runtime dependencies of the tox.pytest plugin (pytest, devpi-process and pytest-mock) under a new testing extra, so plugin authors can pull them in via tox[testing] - by :user:gaborbernat. (:issue:3938, :issue:3940)

Bug fixes - 4.54.0

  • Extend the generated TOML schema to cover every replace table form (env, ref, posargs, glob, if), including conditional replacements used inside commands. A guard test asserts the schema stays in sync with the loader implementation so future replace types cannot be added without a corresponding schema entry. (:issue:3939)

v4.53.1 (2026-05-02)


Bug fixes - 4.53.1

  • Hardening pass on user-facing logging and config parsing:

    • Mask secret-looking --key=value flag values in command logs (terminal warnings, .tox/<env>/log/*.log, and Outcome __repr__) using the same keyword regex previously applied to environment variable values.
    • Resolve PEP 723 script paths and reject any that escape tox_root; cap the script read at 5 MiB so a symlink to /dev/zero cannot exhaust memory.
    • Replace eval() of a constructed Literal[...] string in the CLI parser with a direct Literal[tuple(action.choices)] subscript.
    • Pass timeout=30 to urlopen when fetching a remote requirements file so a slow or unresponsive mirror cannot hang tox indefinitely. (:issue:3924)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [tox](https://github.com/tox-dev/tox) to permit the latest version.
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.54.0...4.55.0)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.55.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 29, 2026
@dependabot
dependabot Bot requested a review from Diapolo10 as a code owner May 29, 2026 02:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 29, 2026
@github-actions
github-actions Bot enabled auto-merge May 29, 2026 02:44

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this pull request because it includes a patch or minor update

dependabot Bot and others added 2 commits May 29, 2026 02:45
There appear to be some python formatting errors in
cbfe993.
This pull request uses the Ruff formatter to fix some of these issues.
@Diapolo10
Diapolo10 disabled auto-merge June 1, 2026 18:18
@Diapolo10
Diapolo10 merged commit 3b4109f into main Jun 1, 2026
3 of 13 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/tox-gte-4.55.0 branch June 1, 2026 18:19

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this pull request because it includes a patch or minor update

github-actions Bot added a commit that referenced this pull request Aug 27, 2026
Bumps [pytest-benchmark](https://github.com/ionelmc/pytest-benchmark)
from 5.2.3 to 5.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ionelmc/pytest-benchmark/releases">pytest-benchmark's
releases</a>.</em></p>
<blockquote>
<h2>v5.3.0</h2>
<ul>
<li>Added --benchmark-precision and --benchmark-confidence: instead of a
fixed number of rounds, stop once the mean's relative margin of error
falls below the given fraction. Contributed by Aarni Koskela in <a
href="https://redirect.github.com/ionelmc/pytest-benchmark/pull/318">ionelmc/pytest-benchmark#318</a>.</li>
<li>Added compare --between mode. Example: pytest-benchmark compare
--between=min 0001 0002. Contributed by Aarni Koskela in <a
href="https://redirect.github.com/ionelmc/pytest-benchmark/pull/302">ionelmc/pytest-benchmark#302</a>.</li>
<li>Modernized the CI/linting and added spellchecking. Contributed by
Aarni Koskela in <a
href="https://redirect.github.com/ionelmc/pytest-benchmark/pull/304">ionelmc/pytest-benchmark#304</a>,
<a
href="https://redirect.github.com/ionelmc/pytest-benchmark/pull/306">ionelmc/pytest-benchmark#306</a>
and <a
href="https://redirect.github.com/ionelmc/pytest-benchmark/pull/319">ionelmc/pytest-benchmark#319</a>.</li>
<li>Defer the xdist auto-disable warning until a benchmark fixture is
collected. Contributed by xlyyddy in <a
href="https://redirect.github.com/ionelmc/pytest-benchmark/pull/317">ionelmc/pytest-benchmark#317</a>
(fixes <a
href="https://redirect.github.com/ionelmc/pytest-benchmark/issues/65">ionelmc/pytest-benchmark#65</a>).</li>
<li>Replaced deprecated argparse.FileType. Contributed by Sophia
Castellarin in <a
href="https://redirect.github.com/ionelmc/pytest-benchmark/pull/310">ionelmc/pytest-benchmark#310</a>.</li>
<li>Fixed various spelling/typos. Contributed by Daniel Holth and Hugo
van Kemenade in <a
href="https://redirect.github.com/ionelmc/pytest-benchmark/pull/297">ionelmc/pytest-benchmark#297</a>
and <a
href="https://redirect.github.com/ionelmc/pytest-benchmark/pull/299">ionelmc/pytest-benchmark#299</a>.</li>
<li>Cleaned up various dead code. Contributed by Hugo van Kemenade in <a
href="https://redirect.github.com/ionelmc/pytest-benchmark/pull/300">ionelmc/pytest-benchmark#300</a>
and <a
href="https://redirect.github.com/ionelmc/pytest-benchmark/pull/301">ionelmc/pytest-benchmark#301</a>.</li>
<li>CI now tests only with latest Pytest (now 9.1.1), Python 3.10-3.14
and PyPy 3.11.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ionelmc/pytest-benchmark/blob/master/CHANGELOG.rst">pytest-benchmark's
changelog</a>.</em></p>
<blockquote>
<h2>v5.3.0 (2026-08-23)</h2>
<ul>
<li>Added <code>--benchmark-precision</code> and
<code>--benchmark-confidence</code>:
instead of a fixed number of rounds, stop once the mean's relative
margin of error falls below the given fraction.
Contributed by Aarni Koskela in
<code>[#318](ionelmc/pytest-benchmark#318)
&lt;https://github.com/ionelmc/pytest-benchmark/pull/318&gt;</code>_.</li>
<li>Added <code>compare --between</code> mode. Example:
<code>pytest-benchmark compare --between=min 0001 0002</code>.
Contributed by Aarni Koskela in
<code>[#302](ionelmc/pytest-benchmark#302)
&lt;https://github.com/ionelmc/pytest-benchmark/pull/302&gt;</code>_.</li>
<li>Modernized the CI/linting and added spellchecking.
Contributed by Aarni Koskela in
<code>[#304](ionelmc/pytest-benchmark#304)
&lt;https://github.com/ionelmc/pytest-benchmark/pull/304&gt;</code><em>,
<code>[#306](ionelmc/pytest-benchmark#306)
&lt;https://github.com/ionelmc/pytest-benchmark/pull/306&gt;</code></em>
and
<code>[#319](ionelmc/pytest-benchmark#319)
&lt;https://github.com/ionelmc/pytest-benchmark/pull/319&gt;</code>_.</li>
<li>Defer the xdist auto-disable warning until a benchmark fixture is
collected.
Contributed by xlyyddy in
<code>[#317](ionelmc/pytest-benchmark#317)
&lt;https://github.com/ionelmc/pytest-benchmark/pull/317&gt;</code>_
(fixes
<code>[#65](ionelmc/pytest-benchmark#65)
&lt;https://github.com/ionelmc/pytest-benchmark/issues/65&gt;</code>_).</li>
<li>Replaced deprecated argparse.FileType.
Contributed by Sophia Castellarin in
<code>[#310](ionelmc/pytest-benchmark#310)
&lt;https://github.com/ionelmc/pytest-benchmark/pull/310&gt;</code>_.</li>
<li>Fixed various spelling/typos.
Contributed by Daniel Holth and Hugo van Kemenade in
<code>[#297](ionelmc/pytest-benchmark#297)
&lt;https://github.com/ionelmc/pytest-benchmark/pull/297&gt;</code>_ and
<code>[#299](ionelmc/pytest-benchmark#299)
&lt;https://github.com/ionelmc/pytest-benchmark/pull/299&gt;</code>_.</li>
<li>Cleaned up various dead code.
Contributed by Hugo van Kemenade in
<code>[#300](ionelmc/pytest-benchmark#300)
&lt;https://github.com/ionelmc/pytest-benchmark/pull/300&gt;</code>_ and
<code>[#301](ionelmc/pytest-benchmark#301)
&lt;https://github.com/ionelmc/pytest-benchmark/pull/301&gt;</code>_.</li>
<li>CI now tests only with latest Pytest (now 9.1.1), Python 3.10-3.14
and PyPy 3.11.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ionelmc/pytest-benchmark/commit/07d519672687402e6c3fac1a543fbefd810d1e5b"><code>07d5196</code></a>
Bump version: 5.2.3 → 5.3.0</li>
<li><a
href="https://github.com/ionelmc/pytest-benchmark/commit/accf7331e22c0ede38ffa72081c38f3469e0c9b5"><code>accf733</code></a>
Add some details on <a
href="https://redirect.github.com/ionelmc/pytest-benchmark/issues/304">#304</a>.</li>
<li><a
href="https://github.com/ionelmc/pytest-benchmark/commit/417dd9fa275e8b9d62c469e676cdb7546d2c4b8f"><code>417dd9f</code></a>
Really update the changelog.</li>
<li><a
href="https://github.com/ionelmc/pytest-benchmark/commit/898acb34430c99ad877e94c52c8b90256a3bb4a8"><code>898acb3</code></a>
Update changelog and plan release.</li>
<li><a
href="https://github.com/ionelmc/pytest-benchmark/commit/9cc7ef0bb1ad3785a46834b24660562dd48e4a0b"><code>9cc7ef0</code></a>
Defer xdist warning until benchmark collection (<a
href="https://redirect.github.com/ionelmc/pytest-benchmark/issues/65">#65</a>)</li>
<li><a
href="https://github.com/ionelmc/pytest-benchmark/commit/ef485506f04d5510831fdbdee5be7014f4726a93"><code>ef48550</code></a>
Some minor skel updates: test only against latest pytest; bump
linting/format...</li>
<li><a
href="https://github.com/ionelmc/pytest-benchmark/commit/88eaea957d1685f604a5835555d2ce5dbec1ac29"><code>88eaea9</code></a>
Add --benchmark-precision for adaptive rounds (opt-in)</li>
<li><a
href="https://github.com/ionelmc/pytest-benchmark/commit/3b83d127127de74d9f71a3a78e5f661fac044950"><code>3b83d12</code></a>
Update and freeze GHA actions</li>
<li><a
href="https://github.com/ionelmc/pytest-benchmark/commit/4b7662fbfba046eb92dd183e005e8708ac81e6cd"><code>4b7662f</code></a>
Fix ruff complaints</li>
<li><a
href="https://github.com/ionelmc/pytest-benchmark/commit/26b011361d2c41f529a73833e1be8d3a565600fa"><code>26b0113</code></a>
Remove Taplo lint (unmaintained)</li>
<li>Additional commits viewable in <a
href="https://github.com/ionelmc/pytest-benchmark/compare/v5.2.3...v5.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pytest-benchmark&package-manager=uv&previous-version=5.2.3&new-version=5.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant