Skip to content

build(deps): bump tox from 4.38.0 to 4.39.0#512

Merged
firstof9 merged 1 commit intomainfrom
dependabot/pip/tox-4.39.0
Feb 19, 2026
Merged

build(deps): bump tox from 4.38.0 to 4.39.0#512
firstof9 merged 1 commit intomainfrom
dependabot/pip/tox-4.39.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 19, 2026

Bumps tox from 4.38.0 to 4.39.0.

Release notes

Sourced from tox's releases.

v4.39.0

What's Changed

Full Changelog: tox-dev/tox@4.38.0...4.39.0

Changelog

Sourced from tox's changelog.

Features - 4.39.0

  • Create a CACHEDIR.TAG file in the tox work directory (.tox) so that backup and archiving tools (e.g., tar --exclude-caches, Borg, restic) can automatically skip it - by :user:radevika. (:issue:3334)

Bugfixes - 4.39.0

  • On Windows, ANSI color codes from child processes (like pytest, mypy) are now rendered correctly in terminals by enabling VT100 processing mode for subprocess output streams - by :user:gaborbernat. (:issue:2337)
  • Concurrent tox processes no longer corrupt the provision environment (.tox) -- a file lock now serializes provisioning across processes - by :user:gaborbernat. (:issue:2515)
  • Config files (tox.ini, setup.cfg) with unicode characters are now read correctly on Windows when running tox with python -m -I (isolation mode) - by :user:gaborbernat. (:issue:2692)
  • set_env values explicitly defined in a section now take precedence over values inherited via cross-section substitution (e.g., {[testenv]set_env}) - by :user:gaborbernat. (:issue:2831)
  • The -e flag now supports brace expansion (e.g. tox -e 'py{38,39}-pytest{6.x,7.x}') instead of incorrectly splitting on commas inside braces - by :user:gaborbernat. (:issue:2850)
  • Posargs containing colons no longer crash tox when an inactive environment uses {posargs} in path-like configuration values such as env_dir - by :user:gaborbernat. (:issue:2860)
  • set_env values from cross-section substitution (e.g., {[testenv]set_env}) now correctly override default environment variables like PYTHONHASHSEED - by :user:gaborbernat. (:issue:2872)
  • --force-dep now applies to package dependencies from project metadata (e.g. setup.cfg install_requires, pyproject.toml dependencies), not just tox config deps - by :user:gaborbernat. (:issue:2943)
  • Using {posargs} in change_dir no longer causes a RecursionError - by :user:gaborbernat. (:issue:3062)
  • Cross-section substitution (e.g. {[testenv:a]commands}) now resolves environment-specific variables like {envpython}, {envbindir}, {envtmpdir}, and {envsitepackagesdir} in the calling environment's context rather than the referenced environment's context - by :user:gaborbernat. (:issue:3075)
  • Fix ValueError crash when using posargs on Windows with subst drive mappings -- os.path.relpath fails across drive letters, so fall back to absolute paths when the relative path cannot be computed - by :user:gaborbernat. (:issue:3086)
  • TOX_OVERRIDE with += (append) now works correctly when the override key name differs from the config file key name (e.g., overriding pass_env when config uses passenv, or vice versa) - by :user:gaborbernat. (:issue:3127)
  • Fix spurious environment discovery from non-tox sections in setup.cfg -- packages = find: in [options] was incorrectly interpreted as a tox factor marker, creating a phantom find environment - by :user:gaborbernat. (:issue:3134)
  • Requirements in requires with environment markers that evaluate to false (e.g. virtualenv<20.22.0; python_version < "3.8") are now correctly skipped during provisioning instead of causing an infinite provisioning loop - by :user:gaborbernat. (:issue:3136)
  • Running environments with recreate = true no longer destroys shared package environments (e.g. .pkg), which previously caused FileNotFoundError when a subsequent environment tried to use the already-built wheel - by :user:gaborbernat. (:issue:3146)
  • Factor-conditional config values (e.g. base_python = py312: python3.12) now correctly fall back to the default when no factors match the current environment, instead of producing an empty value - by :user:gaborbernat. (:issue:3189)
  • TOX_PARALLEL_NO_SPINNER / --parallel-no-spinner no longer forces parallel mode in the legacy command, fixing output suppression for sequential runs in CI - by :user:gaborbernat. (:issue:3193)
  • Multiple -e flags are now additive (tox r -e a -e b runs both a and b), matching tox 3 behavior - by

... (truncated)

Commits
  • 6e29444 release 4.39.0
  • 87165b6 🧪 test(config): verify unicode support in config files (#3767)
  • b7dcd62 🐛 fix(execute): render ANSI colors from subprocesses on Windows (#3766)
  • 26f93e5 create a cachedir.tag file in the tox work directory (#3763)
  • 3a637f6 🐛 fix(config): preserve colors in provisioned tox on Windows (#3765)
  • 1bbc024 🐛 fix(config): treat backslash-space as path separator on Windows (#3764)
  • 5eda3a1 🐛 fix(config): skip non-tox sections in env discovery (#3761)
  • f104727 🐛 fix(plugin): skip toxfile.py with unknown hooks (#3762)
  • 54f4fda 🐛 fix(config): handle cross-drive posargs on Windows (#3760)
  • 5949e93 🐛 fix(config): defer TOML set_env string substitution (#3759)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tox](https://github.com/tox-dev/tox) from 4.38.0 to 4.39.0.
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.38.0...4.39.0)

---
updated-dependencies:
- dependency-name: tox
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 19, 2026
@firstof9 firstof9 merged commit 56f4967 into main Feb 19, 2026
2 checks passed
@dependabot dependabot bot deleted the dependabot/pip/tox-4.39.0 branch February 19, 2026 13:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant