Yelp / detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.
Apache License 2.0
3.58k stars 449 forks source link

Bump tox from 4.11.4 to 4.15.0 #815

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Bumps tox from 4.11.4 to 4.15.0.

Release notes

Sourced from tox's releases.

4.15.0

What's Changed

New Contributors

Full Changelog: https://github.com/tox-dev/tox/compare/4.14.2...4.15.0

4.14.2

What's Changed

New Contributors

Full Changelog: https://github.com/tox-dev/tox/compare/4.14.1...4.14.2

4.14.1

What's Changed

Full Changelog: https://github.com/tox-dev/tox/compare/4.14.0...4.14.1

4.14.0

What's Changed

... (truncated)

Changelog

Sourced from tox's changelog.

v4.15.0 (2024-04-26)

Features - 4.15.0

- Add support for multiple appending override options (-x, --override) on command line - by :user:`amitschang`. (:issue:`3261`)
- Add support for inverting exit code success criteria using bang (!) (:issue:`3271`)

Bugfixes - 4.15.0

  • Fix issue that the leading character c was dropped from packages in constraints files - by :user:jugmac00. (:issue:3247)
  • Allow appending to deps with --override testenv.deps+=foo - by :user:stefanor. (:issue:3256)
  • Fix non-existing branch rewrite in the documentation to main. (:issue:3257)
  • Update test typing for build 1.2.0, which has an explicit Distribution type - by :user:stefanor. (:issue:3260)
  • Fix broken input parsing for --discover flag. - by :user:mimre25 (:issue:3272)

Improved Documentation - 4.15.0

- Rephrase ``--discover`` flag's description to avoid confusion between paths and executables. - by :user:`mimre25` (:issue:`3274`)

v4.14.2 (2024-03-22)

Bugfixes - 4.14.2

- Add provision arguments to ToxParser to fix crash when provisioning new tox environment without list-dependencies by :user:`seyidaniels` (:issue:`3190`)

Improved Documentation - 4.14.2
</code></pre>
<ul>
<li>Removed unused line from the 'fresh_subprocess' documentation. (:issue:<code>3241</code>)</li>
</ul>
<h2>v4.14.1 (2024-03-06)</h2>
<p>Bugfixes - 4.14.1</p>
<pre><code>- Fix crash with fresh subprocess, if the build backend is setuptools automatically enable fresh subprocesses for
  build backend calls - by :user:`gaborbernat`. (:issue:`3235`)

v4.14.0 (2024-03-05)
--------------------

Features - 4.14.0
</code></pre>
<ul>
<li>Support enabling fresh subprocess for packaging build backends via :ref:<code>fresh_subprocess</code> - by :user:<code>gaborbernat</code>. (:issue:<code>3227</code>)</li>
<li>Allow plugins attaching additional information to <code>--version</code> via <code>tox_append_version_info</code> method in the plugin
module - by :user:<code>gaborbernat</code>. (:issue:<code>3234</code>)</li>
</ul>
<h2>v4.13.0 (2024-02-16)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>

<ul>
<li><a href="https://github.com/tox-dev/tox/commit/261b4ca55686059489b1314c440f0e2fca21aca5"><code>261b4ca</code></a> release 4.15.0</li>
<li><a href="https://github.com/tox-dev/tox/commit/c54dfbd9ad4aad9f0ef5503b7dff2558cdf64208"><code>c54dfbd</code></a> fix(parser): Fix --discover parsed incorrectly from env (<a href="https://redirect.github.com/tox-dev/tox/issues/3274">#3274</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/809e10f9871e75cf7b07063f47393f9c10861174"><code>809e10f</code></a> Add bang to invert exit code (<a href="https://redirect.github.com/tox-dev/tox/issues/3271">#3271</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/822c9d07699aa090fb8d37cb94247ea0d085125b"><code>822c9d0</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/tox/issues/3267">#3267</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/0e5a3dbb9a1c7eb1df56421cc4bca5e187626ccd"><code>0e5a3db</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/tox/issues/3265">#3265</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/f5850c0d3a893cbb6d9de192fe8e6e857573499b"><code>f5850c0</code></a> Support multiple override appends (<a href="https://redirect.github.com/tox-dev/tox/issues/3261">#3261</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/c2be62972e7f7b3e79260e5c96e4fe5bf76f5929"><code>c2be629</code></a> Allow appending to deps with the command line (<a href="https://redirect.github.com/tox-dev/tox/issues/3259">#3259</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/d28a9ee0ea28b2356b24a0d0e0ed70c0141d41cc"><code>d28a9ee</code></a> Update installation.rst (<a href="https://redirect.github.com/tox-dev/tox/issues/3257">#3257</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/a19a9467cfae5a0fc2c1b6faf1845d412898c693"><code>a19a946</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/tox/issues/3258">#3258</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/a22fe8ffce73acdfc2aefd70228ede0337aac19b"><code>a22fe8f</code></a> Fix type-checking (<a href="https://redirect.github.com/tox-dev/tox/issues/3260">#3260</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/tox-dev/tox/compare/4.11.4...4.15.0">compare view</a></li>
</ul>
</details>

<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tox&package-manager=pip&previous-version=4.11.4&new-version=4.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)