chore: Bump tox from 4.58.0 to 4.60.1 in /.github/workflows in the ci group

[dependabot]

Bumps the ci group in /.github/workflows with 1 update: tox.

Updates tox from 4.58.0 to 4.60.1

Release notes

Sourced from tox's releases.

v4.60.1

What's Changed

• Stop Windows pytest-timeout kills in CI by @​gaborbernat in tox-dev/tox#4026
• fix(config): report a malformed ini as a handled error instead of a traceback by @​VXNCXNX in tox-dev/tox#4027
• Handle unreadable configuration files by @​SirHegel in tox-dev/tox#4035
• fix: a semicolon truncates a value read from a set_env file by @​VXNCXNX in tox-dev/tox#4030
• fix: report an invalid --skip-env regex as a handled error by @​VXNCXNX in tox-dev/tox#4029
• docs: drop the claim that tox -e py skips tests with missing dependencies by @​MohammedAlkindi in tox-dev/tox#4036
• 🔧 chore: drop the now-unused ty ignore directive by @​gaborbernat in tox-dev/tox#4039
• 🔧 chore: batch dependency updates weekly on Tuesday by @​gaborbernat in tox-dev/tox#4038
• Report a bad ini core value as a handled error by @​VXNCXNX in tox-dev/tox#4028
• Report an empty TOML command value as a handled error by @​dylanpulver in tox-dev/tox#4041

New Contributors

• @​VXNCXNX made their first contribution in tox-dev/tox#4027
• @​SirHegel made their first contribution in tox-dev/tox#4035
• @​MohammedAlkindi made their first contribution in tox-dev/tox#4036
• @​dylanpulver made their first contribution in tox-dev/tox#4041

Full Changelog: tox-dev/tox@4.60.0...4.60.1

v4.60.0

What's Changed

• 📄 docs: publish llms.txt from the docs build by @​gaborbernat in tox-dev/tox#4023
• Provision before loading env_list by @​CAOShurong in tox-dev/tox#4022
• docs: repoint nine dead source links in the onboarding guide by @​Yusuf-Gadelrab in tox-dev/tox#4025
• Add {home} and {tox_root_name} substitutions by @​WhyNotHugo in tox-dev/tox#4020

New Contributors

• @​CAOShurong made their first contribution in tox-dev/tox#4022
• @​Yusuf-Gadelrab made their first contribution in tox-dev/tox#4025
• @​WhyNotHugo made their first contribution in tox-dev/tox#4020

Full Changelog: tox-dev/tox@4.59.0...4.60.0

v4.59.0

What's Changed

• 🐛 fix(type): cast set value in _render_options by @​gaborbernat in tox-dev/tox#4003
• docs: fix typo 'set the the' -> 'set then the' in config reference by @​LaRoyBot in tox-dev/tox#4002
• 👷 ci: pin coverage to the ctrace core by @​gaborbernat in tox-dev/tox#4009
• 🔥 chore: remove the misc changelog category by @​gaborbernat in tox-dev/tox#4012
• ✅ test: seed the virtualenv wheel image up front by @​gaborbernat in tox-dev/tox#4011
• ✨ feat(plugin): type the plugin and internal API surfaces by @​gaborbernat in tox-dev/tox#4014
• ✅ test: raise timeout for missing-interpreter discovery tests by @​gaborbernat in tox-dev/tox#4018

... (truncated)

Changelog

Sourced from tox's changelog.

Bug fixes - 4.60.1

• Report a malformed tox.ini or setup.cfg as a handled error during config discovery instead of raising an unhandled :class:configparser.Error traceback - by :user:VXNCXNX (:issue:4027)
• Report an invalid value in the ini [tox] core section (such as min_version, requires or env_list) as a handled error instead of an unhandled traceback, matching the existing TOML loader behavior - by :user:VXNCXNX (:issue:4028)
• Report an invalid --skip-env/TOX_SKIP_ENV regular expression as a handled error instead of raising an unhandled re.error traceback - by :user:VXNCXNX (:issue:4029)
• Keep ; inside values read from a set_env environment file (file|.env). Environment file lines are plain KEY=VALUE pairs and were incorrectly parsed with the PEP-508 marker splitter, which truncated values such as DATABASE_URL=postgresql://host/db?opt=1;sslmode=require at the first semicolon - by :user:VXNCXNX (:issue:4030)
• Report a handled configuration error instead of leaking a traceback when the selected configuration file exists but cannot be read - by :user:SirHegel. (:issue:4031)
• Report an empty install_command or list_dependencies_command in a TOML configuration as a handled error instead of an unhandled traceback - by :user:dylanpulver (:issue:4041)

Contributor-facing changes - 4.60.1

• Pre-seed the setuptools wheel image alongside pip before the test session and give integration tests a 240s budget on Windows, so pytest-timeout no longer kills Windows CI workers - by :user:gaborbernat. (:issue:4026)

---

v4.60.0 (2026-08-13)

---

Features - 4.60.0

• Add {home} and {tox_root_name} substitutions; set :ref:work_dir to e.g. "{home}/.local/state/tox/{tox_root_name}" to keep environments outside of the project tree - by :user:WhyNotHugo. (:issue:4020)

Bug fixes - 4.60.0

• Provision the requested tox version before reading env_list, allowing configuration syntax introduced by that version - by :user:CAOShurong (:issue:4021)

Improved documentation - 4.60.0

• Fix nine source-code links in the onboarding guide that pointed at paths which no longer exist, and correct the class names of the TOML configuration sources and loaders they refer to - by :user:Yusuf-Gadelrab. (:issue:4024)

---

v4.59.0 (2026-08-10)

... (truncated)

Commits

• e91ca3b release 4.60.1
• 59e984f Report an empty TOML command value as a handled error (#4041)
• fcb513e [pre-commit.ci] pre-commit autoupdate (#4040)
• e753137 Report a bad ini core value as a handled error (#4028)
• 79a45b4 🔧 chore: batch dependency updates weekly on Tuesday (#4038)
• e388aeb 🔧 chore: drop the now-unused ty ignore directive (#4039)
• 76baa0a docs: drop the claim that tox -e py skips tests with missing dependencies (#4...
• 0250664 build(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#4037)
• 8527c61 fix: report an invalid --skip-env regex as a handled error (#4029)
• fb859dc fix: a semicolon truncates a value read from a set_env file (#4030)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions