Skip to content

Bump tox from 4.27.0 to 4.28.0 in /core#3650

Merged
freakboy3742 merged 3 commits into
mainfrom
dependabot/pip/core/tox-4.28.0
Jul 22, 2025
Merged

Bump tox from 4.27.0 to 4.28.0 in /core#3650
freakboy3742 merged 3 commits into
mainfrom
dependabot/pip/core/tox-4.28.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2025

Copy link
Copy Markdown
Contributor

Bumps tox from 4.27.0 to 4.28.0.

Release notes

Sourced from tox's releases.

4.28.0

What's Changed

Full Changelog: tox-dev/tox@4.27.0...4.28.0

Changelog

Sourced from tox's changelog.

v4.28.0 (2025-07-20)

Features - 4.28.0

- Added ``constraints`` to allow specifying constraints files for all dependencies. (:issue:`3350`)
- Allow disabling tox plugins via the ``TOX_DISABLED_EXTERNAL_PLUGINS`` environment variable - by :user:`gaborbernat`. (:issue:`3468`)

Improved Documentation - 4.28.0

  • The min_version/minversion config option is deprecated in favor of the requires option. (:issue:3553)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 20, 2025
@HalfWhitt

Copy link
Copy Markdown
Member

I tried rerunning the tests, but it looks like they're still using the CI config from when this was pushed, rather than the updated version from #3655.

@HalfWhitt

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 22, 2025

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@freakboy3742

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [tox](https://github.com/tox-dev/tox) from 4.27.0 to 4.28.0.
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.27.0...4.28.0)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/core/tox-4.28.0 branch from 823470c to 2a87a8b Compare July 22, 2025 06:41
@freakboy3742

Copy link
Copy Markdown
Member

Looks like tox introduces a dependency pin on typing-extensions that conflicts with our hard pin. I've updated our pin.

@freakboy3742 freakboy3742 merged commit 17bd740 into main Jul 22, 2025
53 checks passed
@freakboy3742 freakboy3742 deleted the dependabot/pip/core/tox-4.28.0 branch July 22, 2025 07:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants