dependabot[bot] opened a new pull request, #23027: URL: https://github.com/apache/superset/pull/23027
Bumps [tox](https://github.com/tox-dev/tox) from 3.25.1 to 4.4.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/tox/releases">tox's releases</a>.</em></p> <blockquote> <h2>4.4.5</h2> <h2>What's Changed</h2> <ul> <li>Bump deps and tools by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2913">tox-dev/tox#2913</a></li> <li>Bump deps and tools by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2914">tox-dev/tox#2914</a></li> <li>Ignore labels when provisioning by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2917">tox-dev/tox#2917</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.4...4.4.5">https://github.com/tox-dev/tox/compare/4.4.4...4.4.5</a></p> <h2>4.4.4</h2> <h2>What's Changed</h2> <ul> <li>Forward <code>HOME</code> by default by <a href="https://github.com/gschaffner"><code>@gschaffner</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2907">tox-dev/tox#2907</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.3...4.4.4">https://github.com/tox-dev/tox/compare/4.4.3...4.4.4</a></p> <h2>4.4.3</h2> <h2>What's Changed</h2> <ul> <li>[changelog.rst] typo fix by <a href="https://github.com/sparkiegeek"><code>@sparkiegeek</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2900">tox-dev/tox#2900</a></li> <li>Support recursive extras defined in pyproject.toml by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2905">tox-dev/tox#2905</a></li> <li>fix assertions in test_graph to actually test results by <a href="https://github.com/asottile"><code>@asottile</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2906">tox-dev/tox#2906</a></li> <li>Avoid <code>pre-commit</code> <code>isort</code> crash by <a href="https://github.com/gschaffner"><code>@gschaffner</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2908">tox-dev/tox#2908</a></li> <li>docs/faq.rst: clarify how constrain_package_deps works by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2902">tox-dev/tox#2902</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/sparkiegeek"><code>@sparkiegeek</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2900">tox-dev/tox#2900</a></li> <li><a href="https://github.com/gschaffner"><code>@gschaffner</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2908">tox-dev/tox#2908</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.2...4.4.3">https://github.com/tox-dev/tox/compare/4.4.2...4.4.3</a></p> <h2>4.4.2</h2> <h2>What's Changed</h2> <ul> <li>rename TOX_CONFIG_FILE to TOX_USER_CONFIG_FILE by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2896">tox-dev/tox#2896</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.1...4.4.2">https://github.com/tox-dev/tox/compare/4.4.1...4.4.2</a></p> <h2>4.4.1</h2> <h2>What's Changed</h2> <ul> <li>pip_install: constrain_package_deps is now False by default by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2899">tox-dev/tox#2899</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/4.4.0...4.4.1">https://github.com/tox-dev/tox/compare/4.4.0...4.4.1</a></p> <h2>4.4.0</h2> <h2>What's Changed</h2> <ul> <li>Add more explanation to <code>list_dependencies_command</code> configuration option by <a href="https://github.com/Czaki"><code>@Czaki</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2883">tox-dev/tox#2883</a></li> <li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2889">tox-dev/tox#2889</a></li> <li>Enforce constraints during install_package_deps by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2888">tox-dev/tox#2888</a></li> <li>Windows shlex fix by <a href="https://github.com/masenf"><code>@masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2895">tox-dev/tox#2895</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/tox/blob/main/docs/changelog.rst">tox's changelog</a>.</em></p> <blockquote> <h2>v4.4.5 (2023-02-07)</h2> <p>Bugfixes - 4.4.5</p> <pre><code>- Ignore labels when tox will provision a runtime environment (``.tox``) so that environment configurations which depend on provisioned plugins or specific tox versions are not accessed in the outer tox process where the configuration would be invalid - by :user:`masenf`. (:issue:`2916`) <h2>v4.4.4 (2023-01-31)</h2> <p>Bugfixes - 4.4.4 </code></pre></p> <ul> <li>Forward <code>HOME</code> by default - by :user:<code>gschaffner</code>. (:issue:<code>2702</code>)</li> </ul> <h2>v4.4.3 (2023-01-30)</h2> <p>Bugfixes - 4.4.3</p> <pre><code>- Tox will now expand self-referential extras discovered in package deps to respect local modifications to package metadata. This allows a package extra to explicitly depend on another package extra, which previously only worked with non-static metadata - by :user:`masenf`. (:issue:`2904`) <h2>v4.4.2 (2023-01-25)</h2> <p>Bugfixes - 4.4.2 </code></pre></p> <ul> <li>Allow the user configuration file (default <code><appdir>/tox/config.ini</code>) to be overridden via the <code>TOX_USER_CONFIG_FILE</code> environment variable. Previously tox was looking at the <code>TOX_CONFIG_FILE</code> to override the user configuration, however that environment variable is already used to override the main configuration - by :user:<code>masenf</code>. (:issue:<code>2890</code>)</li> </ul> <h2>v4.4.1 (2023-01-25)</h2> <p>Bugfixes - 4.4.1</p> <pre><code>- In tox 4.4.0 ``constrain_package_deps`` was introduced with a default value of ``True``. This has been changed back to ``False``, which restores the original behavior of tox 4.3.5 - by :user:`masenf`. (:issue:`2897`) <h2>v4.4.0 (2023-01-25)</h2> <p></tr></table> </code></pre></p> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/tox/commit/c698698006904dadc906c59ed5e4875be4c281c7"><code>c698698</code></a> release 4.4.5</li> <li><a href="https://github.com/tox-dev/tox/commit/c01bcf4d28e88673aed8706eff3ec7fbed1f63e4"><code>c01bcf4</code></a> Ignore labels when provisioning (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2917">#2917</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/ae523ef510ff309145bf692869d67bfd474787e7"><code>ae523ef</code></a> Bump deps and tools (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2914">#2914</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/80db13b780212af769e362dd4ad844bdfdc0b67a"><code>80db13b</code></a> Bump deps and tools (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2913">#2913</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/b7fec1e236eeddefec9023f5d6ced94c5c2871cf"><code>b7fec1e</code></a> release 4.4.4</li> <li><a href="https://github.com/tox-dev/tox/commit/f38cc3fc9be94c803765ce91b2b565503e54c772"><code>f38cc3f</code></a> Forward <code>HOME</code> by default (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2907">#2907</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/4408cff65d72d5662e85da632e74154dfc030ef2"><code>4408cff</code></a> release 4.4.3</li> <li><a href="https://github.com/tox-dev/tox/commit/0a7ce8baf48ab51ab8b7ebd5ec5e95fe7713466a"><code>0a7ce8b</code></a> docs/faq.rst: clarify how constrain_package_deps works (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2902">#2902</a>)</li> <li><a href="https://github.com/tox-dev/tox/commit/a77d1376de0c486f709343c37026e006985616b1"><code>a77d137</code></a> Avoid pre-commit isort crash</li> <li><a href="https://github.com/tox-dev/tox/commit/079f839d819f03413939409c58930d14017fd84f"><code>079f839</code></a> fix assertions in test_graph to actually test results (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2906">#2906</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tox-dev/tox/compare/3.25.1...4.4.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
