[dependabot]

Bumps tox from 4.66.0 to 4.67.1.

Release notes

Sourced from tox's releases.

v4.67.1

Bug fixes - 4.67.1

• Preserve ignore (-) and invert (!) exit code prefixes on commands when referenced via TOML { replace = "ref", ... }. (#4169)
• Installing from a pylock.toml with no dependency_groups selected now uses the lock file's default-groups, as 751 specifies. Previously packages marked 'default' in dependency_groups (as written by pdm export -f pylock) were skipped - by pcbeingused333. (#4173)
• A positional {factor:N} label in an env_base now resolves against that table's own factors, so with several env_base tables or an env_list product it no longer expands to an empty string. (#4174)

PyPI release

Full Changelog: tox-dev/tox@4.67.0...4.67.1

v4.67.0

Features - 4.67.0

• Allow opting in to tox substitutions within TOML positional arguments with substitute = true. (#4165)

Bug fixes - 4.67.0

• Keep capturing the output of the packaging backend with --no-capture, so tox --no-capture no longer hangs at started backend while waiting for the backend's reply. (#4163)
• A leading UTF-8 byte order mark in tox.ini, setup.cfg, tox.toml or a TOML pyproject.toml no longer stops the configuration from loading - editors on Windows may add one. (#4166)
• tox --no-provision <command> no longer treats the command as the JSON output path: a global option placed before a subcommand now keeps it, so tox --no-provision list lists the environments instead of writing a file named list. (#4168)

Improved documentation - 4.67.0

• Link overridden argparse methods and logging.Handler.name in the plugin API reference. (#4170)

PyPI release

Full Changelog: tox-dev/tox@4.66.0...4.67.0

Changelog

Sourced from tox's changelog.

Bug fixes - 4.67.1

• Preserve ignore (-) and invert (!) exit code prefixes on commands when referenced via TOML { replace = "ref", ... }. (:issue:4169)
• Installing from a pylock.toml with no :ref:dependency_groups selected now uses the lock file's default-groups, as :PEP:751 specifies. Previously packages marked 'default' in dependency_groups (as written by pdm export -f pylock) were skipped - by :user:pcbeingused333. (:issue:4173)
• A positional {factor:N} label in an env_base now resolves against that table's own factors, so with several env_base tables or an env_list product it no longer expands to an empty string. (:issue:4174)

---

v4.67.0 (2026-10-17)

---

Features - 4.67.0

• Allow opting in to tox substitutions within TOML positional arguments with substitute = true. (:issue:4165)

Bug fixes - 4.67.0

• Keep capturing the output of the packaging backend with --no-capture, so tox --no-capture no longer hangs at started backend while waiting for the backend's reply. (:issue:4163)
• A leading UTF-8 byte order mark in tox.ini, setup.cfg, tox.toml or a TOML pyproject.toml no longer stops the configuration from loading - editors on Windows may add one. (:issue:4166)
• tox --no-provision <command> no longer treats the command as the JSON output path: a global option placed before a subcommand now keeps it, so tox --no-provision list lists the environments instead of writing a file named list. (:issue:4168)

Improved documentation - 4.67.0

• Link overridden argparse methods and logging.Handler.name in the plugin API reference. (:issue:4170)

---

v4.66.0 (2026-10-16)

---

Commits

• 129a377 release 4.67.1
• 21d01be fix(config): resolve factor labels per env_base (#4174)
• 7a77f76 🐛 fix(pylock): use default-groups when no dependency group is selected (#4173)
• 59d3c99 fix(config): keep exit-code prefixes on TOML command references (#4172)
• 1de497f release 4.67.0
• 375a807 fix(config): read a UTF-8 BOM in the ini and TOML config sources (#4166)
• ba393c1 Allow opt-in substitution of TOML positional arguments (#4167)
• fa16bde fix(cli): --no-provision swallows the subcommand that follows it (#4168)
• e352fbe ♻️ refactor(docs): use public Sphinx hooks (#4171)
• 1d054ab 📝 docs(api): link overridden stdlib members (#4170)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)