[dependabot]

Updates the requirements on tox to permit the latest version.

Release notes

Sourced from tox's releases.

v4.65.0

Features

• Bump the default maximum CPython minor version to 3.15 in generative environment lists. (#4136)

Bug fixes

• --result-json and tox config -o create the missing parent directory of the output file instead of crashing by @​SulimanAbdulrazzaq. (#4126)
• A set_env env file that is a directory or not UTF-8 fails the environment with a configuration error instead of a traceback, and a leading UTF-8 byte order mark no longer ends up in the first key by @​SulimanAbdulrazzaq. (#4127)
• A reused environment with commands = [] clears env_log_dir at the start of the run instead of keeping logs from the previous run by @​glaziermag. (#4130)

Documentation

• Drop @impl from the tox_append_version_info plugin doc examples, since it made tox skip the inline plugin by @​Rodrigo-Palma. (#4135)

🐍 PyPI release

📜 Full Changelog

Changelog

Sourced from tox's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

.. _release-4-67-5:

---

4.67.5 (2026-10-31)

---

.. _release-4-67-5-fixed:

Fixed

• A packaging environment whose base_python (or default_base_python) is not installed no longer crashes with KeyError: 'skip_missing_interpreters'. It now fails with the missing interpreter, or skips the run environment when skip_missing_interpreters is true, as tox did before 4.36.0 (:pr:4213) by :user:gaborbernat. (:issue:4212)

• Keep environment markers when a package extra refers to another extra of the same package.

  For example, demo[dev]; python_version < '3.10' keeps the version condition on dependencies from dev (:pr:4216) by :user:ericdelorefice and :user:gaborbernat.

• A pylock.toml or a tox user configuration file (TOX_USER_CONFIG_FILE) saved with a UTF-8 byte order mark, as some Windows editors do, is now read instead of failing with a TOML decode error or being ignored with failed to read config file (:pr:4217) by :user:pcbeingused333.

• With args_are_paths enabled, a positional argument naming an existing file whose rewritten path relative to change_dir starts with - (for example tests/--config=evil.cfg) is now prefixed with ./ so the command still receives a path instead of an option (:pr:4317) by :user:rahuldevikar and :user:gaborbernat. (:issue:4218)

• An extending TOML replace table with a nonempty marker now raises an error instead of adding its internal value and marker keys to :ref:deps or :ref:requires. Markers on set_env values remain supported (:pr:4320) by :user:rahuldevikar and :user:gaborbernat. (:issue:4220)

• A TOML type mismatch no longer includes an expanded string or container value. A malformed commands setting with {env:...} reports its type instead of the substituted text (:pr:4327) by :user:rahuldevikar and :user:gaborbernat. (:issue:4221)

• Keep artifacts supplied with --installpkg out of tox's provisioning environment while installing them in the requested test environments (:pr:4304) by :user:Pratham2511 and :user:gaborbernat. (:issue:4222)

• A file: URI passed to --installpkg is now percent-decoded once instead of twice, so a path containing a literal % sequence, such as a directory named feature%2Flogin, selects the package the user named (:pr:4300) by :user:pcbeingused333 and :user:gaborbernat. (:issue:4223)

• A relative TOX_INSTALL_PKG or user configuration install_pkg path is now resolved against the invocation directory, as --installpkg already was, so tox inspects and installs from the same path (:pr:4333) by :user:rahuldevikar and :user:gaborbernat. (:issue:4224)

• tox refuses a symlink or Windows junction at meta_dir because the build frontend empties that directory during

... (truncated)

Commits

• 21d7b51 release 4.65.0
• fbe1248 feat: bump default maximum Python minor to 3.15 (#4136)
• c6dabc2 📝 docs(plugins): drop @​impl from tox_append_version_info examples (#4135)
• 5cec382 👷 ci: fix the cancelled() check that broke check.yaml (#4134)
• 96f52d2 🐛 fix(env): reset env_log_dir when a run executes no commands (#4133)
• 691ff93 ✅ test(exec): make the no_capture check actually assert (#4131)
• 2316fa4 👷 ci: upload each test job's JUnit report as an artifact (#4132)
• 023395c 🐛 fix(set_env): report unreadable env files and strip a UTF-8 BOM (#4127)
• 0bb658c ✅ test: prune duplicate tests and fold lookup tables (#4129)
• 9c6b900 🐛 fix(output): create missing parent dirs for --result-json and config -o (#4...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)