669: Bump tox from 4.2.6 to 4.4.4 r=alallema a=dependabot[bot] Bumps [tox](https://github.com/tox-dev/tox) from 4.2.6 to 4.4.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/tox/releases">tox's releases</a>.</em></p> <blockquote> <h2>4.4.4</h2> <h2>What's Changed</h2> <ul> <li>Forward <code>HOME</code> by default by <a href="https://github.com/gschaffner"><code>`@gschaffner</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2907">tox-dev/tox#2907</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.3...4.4.4">https://github.com/tox-dev/tox/compare/4.4.3...4.4.4</a></p> <h2>4.4.3</h2> <h2>What's Changed</h2> <ul> <li>[changelog.rst] typo fix by <a href="https://github.com/sparkiegeek"><code>`@sparkiegeek</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2900">tox-dev/tox#2900</a></li> <li>Support recursive extras defined in pyproject.toml by <a href="https://github.com/masenf"><code>`@masenf</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2905">tox-dev/tox#2905</a></li> <li>fix assertions in test_graph to actually test results by <a href="https://github.com/asottile"><code>`@asottile</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2906">tox-dev/tox#2906</a></li> <li>Avoid <code>pre-commit</code> <code>isort</code> crash by <a href="https://github.com/gschaffner"><code>`@gschaffner</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2908">tox-dev/tox#2908</a></li> <li>docs/faq.rst: clarify how constrain_package_deps works by <a href="https://github.com/masenf"><code>`@masenf</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2902">tox-dev/tox#2902</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/sparkiegeek"><code>`@sparkiegeek</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2900">tox-dev/tox#2900</a></li> <li><a href="https://github.com/gschaffner"><code>`@gschaffner</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2908">tox-dev/tox#2908</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.2...4.4.3">https://github.com/tox-dev/tox/compare/4.4.2...4.4.3</a></p> <h2>4.4.2</h2> <h2>What's Changed</h2> <ul> <li>rename TOX_CONFIG_FILE to TOX_USER_CONFIG_FILE by <a href="https://github.com/masenf"><code>`@masenf</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2896">tox-dev/tox#2896</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.1...4.4.2">https://github.com/tox-dev/tox/compare/4.4.1...4.4.2</a></p> <h2>4.4.1</h2> <h2>What's Changed</h2> <ul> <li>pip_install: constrain_package_deps is now False by default by <a href="https://github.com/masenf"><code>`@masenf</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2899">tox-dev/tox#2899</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.0...4.4.1">https://github.com/tox-dev/tox/compare/4.4.0...4.4.1</a></p> <h2>4.4.0</h2> <h2>What's Changed</h2> <ul> <li>Add more explanation to <code>list_dependencies_command</code> configuration option by <a href="https://github.com/Czaki"><code>`@Czaki</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2883">tox-dev/tox#2883</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>`@pre-commit-ci</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2889">tox-dev/tox#2889</a></li> <li>Enforce constraints during install_package_deps by <a href="https://github.com/masenf"><code>`@masenf</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2888">tox-dev/tox#2888</a></li> <li>Windows shlex fix by <a href="https://github.com/masenf"><code>`@masenf</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2895">tox-dev/tox#2895</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Czaki"><code>`@Czaki</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2883">tox-dev/tox#2883</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.3.5...4.4.0">https://github.com/tox-dev/tox/compare/4.3.5...4.4.0</a></p> <h2>4.3.5</h2> <h2>What's Changed</h2> <ul> <li>Include WHEEL metadata when using PDM and poetry backends by <a href="https://github.com/masenf"><code>`@masenf</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2881">tox-dev/tox#2881</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/tox/blob/main/docs/changelog.rst">tox's changelog</a>.</em></p> <blockquote> <h2>v4.4.4 (2023-01-31)</h2> <p>Bugfixes - 4.4.4</p> <pre><code>- Forward ``HOME`` by default - by :user:`gschaffner`. (:issue:`2702`) <h2>v4.4.3 (2023-01-30)</h2> <p>Bugfixes - 4.4.3 </code></pre></p> <ul> <li>Tox will now expand self-referential extras discovered in package deps to respect local modifications to package metadata. This allows a package extra to explicitly depend on another package extra, which previously only worked with non-static metadata - by :user:<code>masenf</code>. (:issue:<code>2904</code>)</li> </ul> <h2>v4.4.2 (2023-01-25)</h2> <p>Bugfixes - 4.4.2</p> <pre><code>- Allow the user configuration file (default ``<appdir>/tox/config.ini``) to be overridden via the ``TOX_USER_CONFIG_FILE`` environment variable. Previously tox was looking at the ``TOX_CONFIG_FILE`` to override the user configuration, however that environment variable is already used to override the main configuration - by :user:`masenf`. (:issue:`2890`) <h2>v4.4.1 (2023-01-25)</h2> <p>Bugfixes - 4.4.1 </code></pre></p> <ul> <li>In tox 4.4.0 <code>constrain_package_deps</code> was introduced with a default value of <code>True</code>. This has been changed back to <code>False</code>, which restores the original behavior of tox 4.3.5 - by :user:<code>masenf</code>. (:issue:<code>2897</code>)</li> </ul> <h2>v4.4.0 (2023-01-25)</h2> <p>Features - 4.4.0</p> <pre><code>- Test environments now recognize boolean config keys ``constrain_package_deps`` (default=true) and ``use_frozen_constraints`` (default=false), which control how tox generates and applies constraints files when performing ``install_package_deps``. <p>If <code>constrain_package_deps</code> is true (default), then tox will write out <code>{env_dir}{/}constraints.txt</code> and pass it to <code>pip</code> during <code>install_package_deps</code>. If <code>use_frozen_constraints</code> is false (default), the constraints will be taken from the specifications listed under <code>deps</code> (and inside any requirements or constraints file referenced in <code>deps</code>). Otherwise, <code>list_dependencies_command</code> (<code>pip freeze</code>) is used to enumerate exact package specifications which will </tr></table> </code></pre></p> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/tox/commit/b7fec1e236eeddefec9023f5d6ced94c5c2871cf"><code>b7fec1e</code></a> release 4.4.4</li> <li><a href="https://github.com/tox-dev/tox/commit/f38cc3fc9be94c803765ce91b2b565503e54c772"><code>f38cc3f</code></a> Forward <code>HOME</code> by default (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2907">#2907</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/4408cff65d72d5662e85da632e74154dfc030ef2"><code>4408cff</code></a> release 4.4.3</li> <li><a href="https://github.com/tox-dev/tox/commit/0a7ce8baf48ab51ab8b7ebd5ec5e95fe7713466a"><code>0a7ce8b</code></a> docs/faq.rst: clarify how constrain_package_deps works (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2902">#2902</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/a77d1376de0c486f709343c37026e006985616b1"><code>a77d137</code></a> Avoid pre-commit isort crash</li> <li><a href="https://github.com/tox-dev/tox/commit/079f839d819f03413939409c58930d14017fd84f"><code>079f839</code></a> fix assertions in test_graph to actually test results (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2906">#2906</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/3295838a51cda058326c7ab29b26d89b7e9e70ac"><code>3295838</code></a> Support recursive extras defined in pyproject.toml (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2905">#2905</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/acadf36d08c5732e36e1547ba716d2c094c525e7"><code>acadf36</code></a> [changelog.rst] typo fix</li> <li><a href="https://github.com/tox-dev/tox/commit/402cf84c05a2ca7a6fd1942808f00d84a3dbd520"><code>402cf84</code></a> release 4.4.2</li> <li><a href="https://github.com/tox-dev/tox/commit/ed39bd77f26e7c8e08c47c9a72a8287cb73289a7"><code>ed39bd7</code></a> rename TOX_CONFIG_FILE to TOX_USER_CONFIG_FILE (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2896">#2896</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tox-dev/tox/compare/4.2.6...4.4.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tox&package-manager=pip&previous-version=4.2.6&new-version=4.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting ``@dependabot` rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - ``@dependabot` rebase` will rebase this PR - ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it - ``@dependabot` merge` will merge this PR after your CI passes on it - ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it - ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging - ``@dependabot` reopen` will reopen this PR if it is closed - ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>