chore: Bump the ci group in /.github/workflows with 2 updates

[dependabot]

Bumps the ci group in /.github/workflows with 2 updates: meltano and tox.

Updates meltano from 4.2.2 to 4.3.0

Release notes

Sourced from meltano's releases.

v4.3.0 (2026-09-21)

• Docker Hub 🐋
• PyPI 🐍

Highlights

• New meltano cloud auth login command, and Meltano Hub is now a first-class part of the CLI: once logged in, Hub requests are authenticated with your Meltano Cloud account and read the Hub that Cloud serves, and meltano hub list shows the plugins available on it.
• New meltano state export and meltano state import commands for moving state between backends, and meltano plugin list for the plugins in your project.
• Plugin installs now honour a .python-version file, meltano invoke gained --refresh-catalog, and meltano run --force can be set via MELTANO_RUN_FORCE.
• Logging gained a Google Cloud Logging JSON formatter, structured logs from mapper plugins are now parsed, FORCE_COLOR is honoured, and colour is disabled when stderr isn't a TTY.
• Two things to note when upgrading: meltano config list now shows a subset of settings by default and sorts them by section, and the meltano.__version__ variable has been removed in favour of meltano.core.utils.get_meltano_version.

---

✨ New

• #10335 Read the Hub that Meltano Cloud serves once logged in
• #10333 List plugins available on Meltano Hub with meltano hub list
• #10328 Authenticate Hub requests with a Meltano Cloud account
• #10330 List project plugins with meltano plugin list
• #10283 Support .python-version file for plugin installs -- Thanks @​nanjeshramesh!
• #10243 Add plugin docs to installation errors -- Thanks @​AbrhamYishak!
• #10191 Allow escaping dots in setting names -- Thanks @​sravankumarkunadi!
• #10148 Allow MELTANO_RUN_FORCE environment variable to be used as an alternative meltano run --force flag
• #10181 Add --refresh-catalog option to meltano invoke -- Thanks @​gbadedata!
• #10139 Honor FORCE_COLOR for logging -- Thanks @​gbadedata!
• #10075 Process exception notes in Singer SDK structured logs
• #10058 Add Google Cloud Logging JSON formatter -- Thanks @​DRACULA1729!
• #9994 Show a subset of settings in meltano config list by default -- Thanks @​mahangu!
• #10020 Add meltano state export and meltano state import commands
• #9990 Add s3-compatible providers in docs and update user agent -- Thanks @​goanpeca!
• #9929 Sort settings by section in meltano config list -- Thanks @​mahangu!
• #9950 The meltano run options are now grouped by categories (state, installation, etc.) -- Thanks @​AvinashYerra!

🐛 Fixes

• #10334 Render meltano logs list like other listing commands
• #10319 Ensure systemdb connection is closed in early connectivity test
• #10264 Stop redirecting away from the DataML and Cloud API reference pages
• #10217 Update react monorepo to v19
• #10211 Update minor and patch updates to docs dependencies
• #10182 Prevent include_paths from escaping project root
• #10167 Ensure project .env files are created with 0600 permissions
• #10155 Correctly propagate SIGTERM to plugin subprocesses
• #10131 Allow smart-open 8.x
• #10118 Disable colors when stderr is not a TTY -- Thanks @​gbadedata!
• #10104 Avoid swallowing Pipelinewise plugin logs by setting the level for the root logger
• #10103 Allow structlog to 26.x
• #10100 Ensure stdlib logging extra values are added to the object when the JSON log formatter is used

... (truncated)

Changelog

Sourced from meltano's changelog.

v4.3.0 (2026-09-21)

✨ New

• #10335 Read the Hub that Meltano Cloud serves once logged in
• #10333 List plugins available on Meltano Hub with meltano hub list
• #10328 Authenticate Hub requests with a Meltano Cloud account
• #10330 List project plugins with meltano plugin list
• #10283 Support .python-version file for plugin installs -- Thanks @​nanjeshramesh!
• #10243 Add plugin docs to installation errors -- Thanks @​AbrhamYishak!
• #10191 Allow escaping dots in setting names -- Thanks @​sravankumarkunadi!
• #10148 Allow MELTANO_RUN_FORCE environment variable to be used as an alternative meltano run --force flag
• #10181 Add --refresh-catalog option to meltano invoke -- Thanks @​gbadedata!
• #10139 Honor FORCE_COLOR for logging -- Thanks @​gbadedata!
• #10075 Process exception notes in Singer SDK structured logs
• #10058 Add Google Cloud Logging JSON formatter -- Thanks @​DRACULA1729!
• #9994 Show a subset of settings in meltano config list by default -- Thanks @​mahangu!
• #10020 Add meltano state export and meltano state import commands
• #9990 Add s3-compatible providers in docs and update user agent -- Thanks @​goanpeca!
• #9929 Sort settings by section in meltano config list -- Thanks @​mahangu!
• #9950 The meltano run options are now grouped by categories (state, installation, etc.) -- Thanks @​AvinashYerra!

🐛 Fixes

• #10334 Render meltano logs list like other listing commands
• #10319 Ensure systemdb connection is closed in early connectivity test
• #10264 Stop redirecting away from the DataML and Cloud API reference pages
• #10217 Update react monorepo to v19
• #10211 Update minor and patch updates to docs dependencies
• #10182 Prevent include_paths from escaping project root
• #10167 Ensure project .env files are created with 0600 permissions
• #10155 Correctly propagate SIGTERM to plugin subprocesses
• #10131 Allow smart-open 8.x
• #10118 Disable colors when stderr is not a TTY -- Thanks @​gbadedata!
• #10104 Avoid swallowing Pipelinewise plugin logs by setting the level for the root logger
• #10103 Allow structlog to 26.x
• #10100 Ensure stdlib logging extra values are added to the object when the JSON log formatter is used
• #10089 Output more detailed errors when requests to the Hub API fail
• #10049 Inherit env_override variables from parent plugin settings service -- Thanks @​ChidiebereNjoku!
• #10036 Make logging less noisy when listing state IDs from a filesystem-based state backend
• #10032 Allow Click 8.4.x
• #10029 Ensure custom dotenv file is preserved in project instance and --env-file is honored
• #10013 Check if the stdlib (and not structlog) logger is enabled for DEBUG to log Singer stdout
• #10006 Avoid displaying noisy traceback when passing a bad plugin type
• #10005 Avoid displaying noisy traceback when trying to modify a read-only project
• #9875 Handle non-unicode characters in plugin logs -- Thanks @​toroleapinc!
• #9993 Add a trailing newline character to manifest files produced by meltano compile
• #9992 Parse structured logs coming from mapper plugins
• #9971 Improve meltano config test error message with helpful hint -- Thanks @​Sharanjoo!
• #9958 Bump rich to 15.x

... (truncated)

Commits

• 9629adf chore: Release v4.3.0 (#10338)
• e147741 feat: read the Hub that Meltano Cloud serves once logged in (#10335)
• f8566aa chore(deps): update dependency webpack to ~5.111.0 (#10337)
• c1bcc51 fix: render meltano logs list like other listing commands (#10334)
• b120182 chore(deps): lock file maintenance (#10336)
• f91d2e4 feat: List plugins available on Meltano Hub with meltano hub list (#10333)
• ef514b2 feat: Authenticate Hub requests with a Meltano Cloud account (#10328)
• ad4c1bc chore(deps): update astral-sh/setup-uv action to v10.1.0 (#10332)
• 7cc0e48 feat: List project plugins with meltano plugin list (#10330)
• 4870dea chore: connector documentation refactor (#10329)
• Additional commits viewable in compare view

Updates tox from 4.60.1 to 4.64.1

Release notes

Sourced from tox's releases.

v4.64.1

What's Changed

• 🐛 fix(config): apply overrides to sections the file lacks by @​gaborbernat in tox-dev/tox#4089

Full Changelog: tox-dev/tox@4.64.0...4.64.1

v4.64.0

What's Changed

• docs: fix the TOML string substitution example by @​agammann in tox-dev/tox#4081
• fix: ignore broken sphinx-llm release by @​gaborbernat in tox-dev/tox#4083
• chore(type): narrow _emit_conf keys for ty 0.0.83 by @​MohammedAlkindi in tox-dev/tox#4084
• fix(config): read the user config file as UTF-8 by @​MohammedAlkindi in tox-dev/tox#4086
• 🐛 fix(ci): diff coverage against the PR base by @​gaborbernat in tox-dev/tox#4088
• ✨ feat(config): write a PEP 832 .venv redirect file by @​gaborbernat in tox-dev/tox#4013

New Contributors

• @​agammann made their first contribution in tox-dev/tox#4081

Full Changelog: tox-dev/tox@4.63.0...4.64.0

v4.63.0

What's Changed

• 🐛 fix(run): keep package env interrupt logs in parallel by @​gaborbernat in tox-dev/tox#4079
• 🐛 fix(extras): dedupe static extras resolution and other copies by @​gaborbernat in tox-dev/tox#4080

Full Changelog: tox-dev/tox@4.62.1...4.63.0

v4.62.1

What's Changed

• test: skip POSIX-venv wheel-build tests on Windows by @​iam-kira in tox-dev/tox#4078
• fix(config): clear markers overridden by unconditional set_env values by @​jakezwang in tox-dev/tox#4077

New Contributors

• @​iam-kira made their first contribution in tox-dev/tox#4078
• @​jakezwang made their first contribution in tox-dev/tox#4077

Full Changelog: tox-dev/tox@4.62.0...4.62.1

v4.62.0

... (truncated)

Changelog

Sourced from tox's changelog.

Bug fixes - 4.64.1

• Apply -x/--override and TOX_OVERRIDE values that target a section the configuration file does not define, such as tox.skip_missing_interpreters on a tox.ini without a [tox] section, instead of dropping them - by :user:gaborbernat. (:issue:4089)

---

v4.64.0 (2026-09-24)

---

Features - 4.64.0

• Point a :PEP:832 .venv redirect file at a tox environment after each run, so editors such as VS Code or PyCharm pick it as the project interpreter instead of asking you for a path under .tox - by :user:gaborbernat.

  • tox picks an environment named dev, then one installing the project in development mode, then the first of :ref:env_list; set :ref:venv_redirect_env to choose another.
  • tox leaves a .venv directory alone, and a redirect file pointing outside its environments.
  • tox removes the redirect while it recreates the target and writes it back once the run ends.
  • Set :ref:venv_redirect to false to opt out.
  • The feature is provisional while :PEP:832 is a draft: a minor or patch release may change it in backward incompatible ways to follow the PEP. (:issue:4013)

Bug fixes - 4.64.0

• The user configuration file is now read as UTF-8 instead of the platform's locale encoding, so a config holding non-ASCII values is no longer silently discarded on Windows - by :user:MohammedAlkindi. (:issue:4086)

Improved documentation - 4.64.0

• Fix the invalid table header in the TOML string substitution example. (:issue:4081)

---

v4.63.0 (2026-09-19)

---

Features - 4.63.0

• Plugins and test helpers can use tox.execute.api.FinishedExecuteStatus to report a fixed exit code for a command that already finished or never started - by :user:gaborbernat. (:issue:4080)

Bug fixes - 4.63.0

• Interrupting a parallel run with Ctrl-C no longer loses the log lines about stopping the package environment, which

... (truncated)

Commits

• e40e8e6 release 4.64.1
• eacd4e9 🐛 fix(config): apply overrides to sections the file lacks (#4089)
• fff62f6 release 4.64.0
• 5c56ce0 ✨ feat(config): write a PEP 832 .venv redirect file (#4013)
• 551ad34 🐛 fix(ci): diff coverage against the PR base (#4088)
• 8e1967e fix(config): read the user config file as UTF-8 (#4086)
• 12bf3a6 build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-acti...
• a304a7b chore(type): narrow _emit_conf keys for ty 0.0.83 (#4084)
• 02d1f96 fix: ignore broken sphinx-llm release (#4083)
• 20febc5 [pre-commit.ci] pre-commit autoupdate (#4082)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions