Skip to content

Bump tox from 4.25.0 to 4.59.0 - #51

Merged
bradymholt merged 1 commit into
mainfrom
dependabot/pip/tox-4.59.0
Aug 20, 2026
Merged

Bump tox from 4.25.0 to 4.59.0#51
bradymholt merged 1 commit into
mainfrom
dependabot/pip/tox-4.59.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Contributor

Bumps tox from 4.25.0 to 4.59.0.

Release notes

Sourced from tox's releases.

v4.59.0

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.58.0...4.59.0

v4.58.0

What's Changed

Full Changelog: tox-dev/tox@4.57.2...4.58.0

v4.57.2

What's Changed

Full Changelog: tox-dev/tox@4.57.1...4.57.2

v4.57.1

What's Changed

... (truncated)

Changelog

Sourced from tox's changelog.

Features - 4.59.0

  • The plugin and internal APIs now declare their types, and the code base passes mypy --strict and pyrefly next to ty - by :user:gaborjbernat.

    • :meth:ConfigSet.get <tox.config.sets.ConfigSet.get> returns a configuration value after checking it against its declared type, so plugins can drop cast around conf["key"] reads.
    • The :func:tox_on_install <tox.plugin.spec.tox_on_install> hook and :class:Installer <tox.tox_env.installer.Installer> type their arguments as :data:InstallArguments <tox.tox_env.installer.InstallArguments>; installer subclasses may narrow it through the new second type parameter.
    • :class:Parsed <tox.config.cli.parser.Parsed> declares the CLI option surface, so options.<name> reads type-check.
    • :meth:ConfigSet.add_config <tox.config.sets.ConfigSet.add_config> accepts default=None for optional values and infers the value type from callable defaults.
    • The journal, the environment cache, and execute metadata hold JsonValue content; structured set_env entries match the SetEnvEntry shape. (:issue:4014)

Improved documentation - 4.59.0

  • Mark the INI configuration format as deprecated throughout the documentation - by :user:gaborbernat.

    • The tutorial, the configuration reference, and the migration how-to state that INI keeps working for existing projects but is frozen and receives no new features.
    • Every INI example tab, the configuration discovery diagram, and the man page carry a deprecation marker.
    • The tutorial no longer suggests generating a tox.ini via tox quickstart. (:issue:4017)

Contributor-facing changes - 4.59.0

  • Remove the misc changelog category, and align the changelog filename check with the categories towncrier accepts - by :user:gaborbernat. (:issue:4012)

v4.58.0 (2026-07-21)


Miscellaneous internal changes - 4.58.0

  • Test against Python 3.15 (beta) in CI and declare its classifier - by :user:gaborbernat. (:issue:4001)

v4.57.2 (2026-07-21)


Bug fixes - 4.57.2

... (truncated)

Commits
  • cb7eeca release 4.59.0
  • da75cad 📝 docs: mark the INI configuration format as deprecated (#4017)
  • ef7dc3a ✅ test: raise timeout for missing-interpreter discovery tests (#4018)
  • c76344d [pre-commit.ci] pre-commit autoupdate (#4016)
  • 7be33b8 ✨ feat(plugin): type the plugin and internal API surfaces (#4014)
  • 2e247dc ✅ test: raise timeout for tests hitting real PyPI (#4011)
  • 2c1f86f 🔥 chore: remove the misc changelog category (#4012)
  • 59302d8 build(deps): bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#4008)
  • 08333ee [pre-commit.ci] pre-commit autoupdate (#4010)
  • 0bbe8c4 👷 ci: pin coverage to the ctrace core (#4009)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tox](https://github.com/tox-dev/tox) from 4.25.0 to 4.59.0.
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.25.0...4.59.0)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 20, 2026
@dependabot
dependabot Bot requested a review from bradymholt as a code owner August 20, 2026 17:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 20, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​tox@​4.25.0 ⏵ 4.59.098100100100100

View full report

@bradymholt
bradymholt enabled auto-merge August 20, 2026 19:08
@bradymholt
bradymholt merged commit 31ede58 into main Aug 20, 2026
5 checks passed
@bradymholt
bradymholt deleted the dependabot/pip/tox-4.59.0 branch August 20, 2026 19:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant