Build(deps-dev): bump tox from 4.38.0 to 4.41.0

[dependabot]

Bumps tox from 4.38.0 to 4.41.0.

Release notes

Sourced from tox's releases.

v4.41.0

What's Changed

• Prefer TOML-native config over legacy_tox_ini in pyproject.toml by @​rahuldevikar in tox-dev/tox#3776
• ✨ feat(config): add package = "deps-only" mode by @​gaborbernat in tox-dev/tox#3774

Full Changelog: tox-dev/tox@4.40.0...4.41.0

v4.40.0

What's Changed

• Use positive exit code for multi-env failures by @​rahuldevikar in tox-dev/tox#3768
• ✨ feat(config): add {glob:PATTERN} substitution by @​gaborbernat in tox-dev/tox#3769
• Add package=sdist-wheel package type by @​rahuldevikar in tox-dev/tox#3741
• ✨ feat(config): add conditional replace for TOML by @​gaborbernat in tox-dev/tox#3771
• Create .gitignore in work_dir and info file directories by @​rahuldevikar in tox-dev/tox#3770
• ✨ feat(run): add commands_retry config option by @​gaborbernat in tox-dev/tox#3772
• 🐛 fix(config): set_env override lost after load by @​gaborbernat in tox-dev/tox#3775

Full Changelog: tox-dev/tox@4.39.0...4.40.0

v4.39.0

What's Changed

• 🐛 fix(ci): suppress Pygments DeprecationWarning on Python 3.15 by @​gaborbernat in tox-dev/tox#3733
• 🐛 fix(deps): apply --force-dep to package metadata dependencies by @​gaborbernat in tox-dev/tox#3734
• fix(ci): drop module scope from commonprefix warning filter by @​gaborbernat in tox-dev/tox#3735
• 🐛 fix(config): resolve overrides with alias config keys by @​gaborbernat in tox-dev/tox#3736
• 🐛 fix(config): set_env cross-section substitution loses values by @​gaborbernat in tox-dev/tox#3737
• 🐛 fix(legacy): --parallel-no-spinner no longer suppresses output by @​gaborbernat in tox-dev/tox#3738
• 🐛 fix(config): set_env cross-section substitution precedence by @​gaborbernat in tox-dev/tox#3739
• 🐛 fix(config): set_env file| no longer overrides later values by @​gaborbernat in tox-dev/tox#3740
• 🐛 fix(config): setup.cfg without [tox:tox] no longer blocks discovery by @​gaborbernat in tox-dev/tox#3742
• 🐛 fix(env): posargs with colon no longer crash inactive envs by @​gaborbernat in tox-dev/tox#3744
• 🐛 fix(provision): skip requires with false environment markers by @​gaborbernat in tox-dev/tox#3745
• 🐛 fix(config): env variable substitution in package envs by @​gaborbernat in tox-dev/tox#3746
• 🐛 fix(config): set_env substitution honors skip_missing_interpreters by @​gaborbernat in tox-dev/tox#3747
• 🐛 fix(config): resolve cross-section refs in caller context by @​gaborbernat in tox-dev/tox#3748
• 🐛 fix(config): break changedir/posargs circular dependency by @​gaborbernat in tox-dev/tox#3749
• 🐛 fix(cli): support brace expansion in -e flag by @​gaborbernat in tox-dev/tox#3750
• 🐛 fix(config): factor filter fallback to default value by @​gaborbernat in tox-dev/tox#3751
• 🐛 fix(env): preserve shared pkg env on recreate by @​gaborbernat in tox-dev/tox#3752
• 🐛 fix(env): reject partial testenv section matches by @​gaborbernat in tox-dev/tox#3753
• 🐛 fix(config): support base inherit in TOML format by @​gaborbernat in tox-dev/tox#3754
• 🐛 fix(cli): make multiple -e flags additive by @​gaborbernat in tox-dev/tox#3755

... (truncated)

Changelog

Sourced from tox's changelog.

Features - 4.41.0

• Add package = "deps-only" mode that installs the package's dependencies (including extras) without building or installing the package itself. For projects with static :PEP:621 metadata, dependencies are read directly from pyproject.toml without creating a packaging environment - by :user:gaborbernat. (:issue:2301)
• Prefer TOML-native configuration ([tool.tox]) over legacy_tox_ini when both are present in pyproject.toml, allowing users to include a legacy_tox_ini section with min_version for older tox versions while using native TOML config for newer ones - by :user:rahuldevikar. (:issue:3402)

Bugfixes - 4.41.0

• Fix PEP 517 backend crash detection to handle both ENOENT (missing interpreter) and runtime crashes without hanging, and fix flaky test_provision_install_pkg_pep517 integration test by using a pre-built wheel instead of an sdist to avoid devpi mirror dependency on setuptools - by :user:gaborjbernat. (:issue:3774)

---

v4.40.0 (2026-02-19)

---

Features - 4.40.0

• Add {glob:PATTERN} substitution to expand file system glob/wildcard patterns in configuration values. Supports default values, recursive ** matching, and both INI string syntax and TOML dict syntax ({ replace = "glob", pattern = "..." }) - by :user:gaborbernat. (:issue:1571)
• Add commands_retry configuration option to automatically retry failed commands - by :user:gaborbernat. (:issue:1578)
• Automatically create a .gitignore file containing * in the tox work directory (typically .tox/) and in environment info directories, so that tox-managed files are not tracked by git - by :user:rahuldevikar. (:issue:2530)
• Add conditional value selection via replace = "if" in TOML configuration. Supports a condition expression with env.VAR lookups, ==/!= comparisons, and and/or/not boolean logic to select between then and else values - by :user:gaborbernat. (:issue:3650)
• Add sdist-wheel package type that builds a wheel from a source distribution, ensuring the sdist is complete and the package can be correctly built from it — by :user:rahuldevikar. (:issue:3687)

Bugfixes - 4.40.0

• Use positive exit code (1) instead of -1 when reporting failures across multiple environments. On Windows, cmd.exe's IF ERRORLEVEL 1 only matches exit codes >= 1, so the previous negative exit code was silently treated as success - by :user:radevika. Fixes :issue:2945. (:issue:2945)
• When set_env both inherits via cross-section substitution (e.g., {[testenv]set_env}) and explicitly overrides the same variable, the explicit value was incorrectly replaced by the inherited one because load() moved the key from the raw dict to the materialized dict before the deferred substitution ran, making the protection check ineffective - by :user:gaborjbernat. Fixes :issue:3773. (:issue:3773)

---

... (truncated)

Commits

• 96d25a9 release 4.41.0
• 82629e5 ✨ feat(config): add package = "deps-only" mode (#3774)
• 95d63fb Prefer TOML-native config over legacy_tox_ini in pyproject.toml (#3776)
• db17069 release 4.40.0
• 5929bdb 🐛 fix(config): set_env override lost after load (#3775)
• a310c11 ✨ feat(run): add commands_retry config option (#3772)
• 4e822c5 Create .gitignore in work_dir and info file directories (#3770)
• 421c09c ✨ feat(config): add conditional replace for TOML (#3771)
• 17d3c1e Add package=sdist-wheel package type (#3741)
• 8929382 ✨ feat(config): add {glob:PATTERN} substitution (#3769)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

I'm approving this pull request because it includes a patch or minor update

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud