dependabot[bot] opened a new pull request, #22932: URL: https://github.com/apache/superset/pull/22932
Bumps [tox](https://github.com/tox-dev/tox) from 3.25.1 to 4.4.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/tox/releases">tox's releases</a>.</em></p> <blockquote> <h2>4.4.4</h2> <h2>What's Changed</h2> <ul> <li>Forward <code>HOME</code> by default by <a href="https://github.com/gschaffner"><code>@gschaffner</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2907">tox-dev/tox#2907</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.3...4.4.4">https://github.com/tox-dev/tox/compare/4.4.3...4.4.4</a></p> <h2>4.4.3</h2> <h2>What's Changed</h2> <ul> <li>[changelog.rst] typo fix by <a href="https://github.com/sparkiegeek"><code>@sparkiegeek</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2900">tox-dev/tox#2900</a></li> <li>Support recursive extras defined in pyproject.toml by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2905">tox-dev/tox#2905</a></li> <li>fix assertions in test_graph to actually test results by <a href="https://github.com/asottile"><code>@asottile</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2906">tox-dev/tox#2906</a></li> <li>Avoid <code>pre-commit</code> <code>isort</code> crash by <a href="https://github.com/gschaffner"><code>@gschaffner</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2908">tox-dev/tox#2908</a></li> <li>docs/faq.rst: clarify how constrain_package_deps works by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2902">tox-dev/tox#2902</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/sparkiegeek"><code>@sparkiegeek</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2900">tox-dev/tox#2900</a></li> <li><a href="https://github.com/gschaffner"><code>@gschaffner</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2908">tox-dev/tox#2908</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.2...4.4.3">https://github.com/tox-dev/tox/compare/4.4.2...4.4.3</a></p> <h2>4.4.2</h2> <h2>What's Changed</h2> <ul> <li>rename TOX_CONFIG_FILE to TOX_USER_CONFIG_FILE by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2896">tox-dev/tox#2896</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.1...4.4.2">https://github.com/tox-dev/tox/compare/4.4.1...4.4.2</a></p> <h2>4.4.1</h2> <h2>What's Changed</h2> <ul> <li>pip_install: constrain_package_deps is now False by default by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2899">tox-dev/tox#2899</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.0...4.4.1">https://github.com/tox-dev/tox/compare/4.4.0...4.4.1</a></p> <h2>4.4.0</h2> <h2>What's Changed</h2> <ul> <li>Add more explanation to <code>list_dependencies_command</code> configuration option by <a href="https://github.com/Czaki"><code>@Czaki</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2883">tox-dev/tox#2883</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2889">tox-dev/tox#2889</a></li> <li>Enforce constraints during install_package_deps by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2888">tox-dev/tox#2888</a></li> <li>Windows shlex fix by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2895">tox-dev/tox#2895</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Czaki"><code>@Czaki</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2883">tox-dev/tox#2883</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.3.5...4.4.0">https://github.com/tox-dev/tox/compare/4.3.5...4.4.0</a></p> <h2>4.3.5</h2> <h2>What's Changed</h2> <ul> <li>Include WHEEL metadata when using PDM and poetry backends by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2881">tox-dev/tox#2881</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/tox/blob/main/docs/changelog.rst">tox's changelog</a>.</em></p> <blockquote> <h2>v4.4.4 (2023-01-31)</h2> <p>Bugfixes - 4.4.4</p> <pre><code>- Forward ``HOME`` by default - by :user:`gschaffner`. (:issue:`2702`) <h2>v4.4.3 (2023-01-30)</h2> <p>Bugfixes - 4.4.3 </code></pre></p> <ul> <li>Tox will now expand self-referential extras discovered in package deps to respect local modifications to package metadata. This allows a package extra to explicitly depend on another package extra, which previously only worked with non-static metadata - by :user:<code>masenf</code>. (:issue:<code>2904</code>)</li> </ul> <h2>v4.4.2 (2023-01-25)</h2> <p>Bugfixes - 4.4.2</p> <pre><code>- Allow the user configuration file (default ``<appdir>/tox/config.ini``) to be overridden via the ``TOX_USER_CONFIG_FILE`` environment variable. Previously tox was looking at the ``TOX_CONFIG_FILE`` to override the user configuration, however that environment variable is already used to override the main configuration - by :user:`masenf`. (:issue:`2890`) <h2>v4.4.1 (2023-01-25)</h2> <p>Bugfixes - 4.4.1 </code></pre></p> <ul> <li>In tox 4.4.0 <code>constrain_package_deps</code> was introduced with a default value of <code>True</code>. This has been changed back to <code>False</code>, which restores the original behavior of tox 4.3.5 - by :user:<code>masenf</code>. (:issue:<code>2897</code>)</li> </ul> <h2>v4.4.0 (2023-01-25)</h2> <p>Features - 4.4.0</p> <pre><code>- Test environments now recognize boolean config keys ``constrain_package_deps`` (default=true) and ``use_frozen_constraints`` (default=false), which control how tox generates and applies constraints files when performing ``install_package_deps``. <p>If <code>constrain_package_deps</code> is true (default), then tox will write out <code>{env_dir}{/}constraints.txt</code> and pass it to <code>pip</code> during <code>install_package_deps</code>. If <code>use_frozen_constraints</code> is false (default), the constraints will be taken from the specifications listed under <code>deps</code> (and inside any requirements or constraints file referenced in <code>deps</code>). Otherwise, <code>list_dependencies_command</code> (<code>pip freeze</code>) is used to enumerate exact package specifications which will </tr></table> </code></pre></p> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/tox/commit/b7fec1e236eeddefec9023f5d6ced94c5c2871cf"><code>b7fec1e</code></a> release 4.4.4</li> <li><a href="https://github.com/tox-dev/tox/commit/f38cc3fc9be94c803765ce91b2b565503e54c772"><code>f38cc3f</code></a> Forward <code>HOME</code> by default (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2907">#2907</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/4408cff65d72d5662e85da632e74154dfc030ef2"><code>4408cff</code></a> release 4.4.3</li> <li><a href="https://github.com/tox-dev/tox/commit/0a7ce8baf48ab51ab8b7ebd5ec5e95fe7713466a"><code>0a7ce8b</code></a> docs/faq.rst: clarify how constrain_package_deps works (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2902">#2902</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/a77d1376de0c486f709343c37026e006985616b1"><code>a77d137</code></a> Avoid pre-commit isort crash</li> <li><a href="https://github.com/tox-dev/tox/commit/079f839d819f03413939409c58930d14017fd84f"><code>079f839</code></a> fix assertions in test_graph to actually test results (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2906">#2906</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/3295838a51cda058326c7ab29b26d89b7e9e70ac"><code>3295838</code></a> Support recursive extras defined in pyproject.toml (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2905">#2905</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/acadf36d08c5732e36e1547ba716d2c094c525e7"><code>acadf36</code></a> [changelog.rst] typo fix</li> <li><a href="https://github.com/tox-dev/tox/commit/402cf84c05a2ca7a6fd1942808f00d84a3dbd520"><code>402cf84</code></a> release 4.4.2</li> <li><a href="https://github.com/tox-dev/tox/commit/ed39bd77f26e7c8e08c47c9a72a8287cb73289a7"><code>ed39bd7</code></a> rename TOX_CONFIG_FILE to TOX_USER_CONFIG_FILE (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2896">#2896</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tox-dev/tox/compare/3.25.1...4.4.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
