chore(deps): update dependency tox to v4.49.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
tox (changelog)	4.47.0 → 4.49.0

---

Release Notes

tox-dev/tox (tox)

v4.49.0

Compare Source

What's Changed

• ✨ feat(config): add {factor:label} substitution for TOML by @​gaborbernat in #​3865
• 🐛 fix(legacy): initialize config_format and output_file for --showconfig by @​rares985 in #​3867

New Contributors

• @​rares985 made their first contribution in #​3867

Full Changelog: tox-dev/tox@4.48.1...4.49.0

v4.48.1

Compare Source

What's Changed

• Replace archived 31z4/tox Docker image with build-your-own guide by @​rahuldevikar in #​3864
• 🐛 fix(toml): extract args from Command in ref replacement by @​gaborbernat in #​3863

Full Changelog: tox-dev/tox@4.48.0...4.48.1

v4.48.0

Compare Source

What's Changed

• Add fail_fast to config reference docs by @​rahuldevikar in #​3853
• ✨ feat(config): add --format json/toml and -o to config command by @​gaborbernat in #​3857

Full Changelog: tox-dev/tox@4.47.3...4.48.0

v4.47.3

Compare Source

What's Changed

• Fix SchemaStore workflow creating empty PRs by @​gaborbernat in #​3848
• Add .mailmap to consolidate author identities by @​yarikoptic in #​3849
• 🐛 fix(config): honor ignore_base_python_conflict for factor conflicts by @​gaborbernat in #​3851

Full Changelog: tox-dev/tox@4.47.2...4.47.3

v4.47.2

Compare Source

What's Changed

• fix: handle OSError in pos_args path existence check by @​yarikoptic in #​3847

New Contributors

• @​yarikoptic made their first contribution in #​3847

Full Changelog: tox-dev/tox@4.47.1...4.47.2

v4.47.1

Compare Source

What's Changed

• 🐛 fix(config): resolve base_python from new-style version factors by @​gaborbernat in #​3846

Full Changelog: tox-dev/tox@4.47.0...4.47.1

---

Configuration

📅 Schedule: Branch creation - Only on Sunday ( * * * * 0 ) in timezone US/Central, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pyproject.toml

Artifact update for tox resolved to version 4.50.3, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 4.49.0
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

[github-actions]

Test Results

    48 files  ±0      48 suites  ±0   1h 18m 32s ⏱️ +25s
 3 209 tests ±0   2 556 ✅ ±0     653 💤 ±0  0 ❌ ±0 
62 228 runs  ±0  49 398 ✅ ±0  12 830 💤 ±0  0 ❌ ±0 

Results for commit ad59a37. ± Comparison against base commit 6c6ecde.

[bkeryan]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pyproject.toml

Artifact update for tox resolved to version 4.50.3, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 4.49.0
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

FYI @zhindes @mshafer-NI It's good that Renovate warns about this now, but I don't like the suggested solution because it basically turns pyproject.toml into a lock file that gets updated whenever new dependency versions are released.

[zhindes]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.
♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pyproject.toml

Artifact update for tox resolved to version 4.50.3, which is a pending version that has not yet passed the Minimum Release Age threshold.
Renovate was attempting to update to 4.49.0
This is (likely) not a bug in Renovate, but due to the way your project pins dependencies, _and_ how Renovate calls your package manager to update them.
Until Renovate supports specifying an exact update to your package manager (https://github.com/renovatebot/renovate/issues/41624), it is recommended to directly pin your dependencies (with `rangeStrategy=pin` for apps, or `rangeStrategy=widen` for libraries)
See also: https://docs.renovatebot.com/dependency-pinning/

FYI @zhindes @mshafer-NI It's good that Renovate warns about this now, but I don't like the suggested solution because it basically turns pyproject.toml into a lock file that gets updated whenever new dependency versions are released.

Wow... I somehow totally missed this when I approved and merged that this morning. My workflow was to look at the description, the diff of the lock, and then the results:

[mshafer-NI]

FYI @zhindes @mshafer-NI It's good that Renovate warns about this now, but I don't like the suggested solution because it basically turns pyproject.toml into a lock file that gets updated whenever new dependency versions are released.

I explicitly want our configs to be set to "widen" dep range. For the same reason that we have historically used ">="

[bkeryan]

FYI @zhindes @mshafer-NI It's good that Renovate warns about this now, but I don't like the suggested solution because it basically turns pyproject.toml into a lock file that gets updated whenever new dependency versions are released.

I explicitly want our configs to be set to "widen" dep range. For the same reason that we have historically used ">="

My interpretation of Renovate's suggestion is that we should put upper bounds in pyproject.toml like click = ">=8.0.0, <8.3.1" and I think that will have the following results:

• Renovate edits pyproject.toml whenever any dependency is updated, causing pyproject.toml to have as much churn & merge conflicts as a lock file
• When a new dependency version is released, customers cannot use it until we release a new version of nidaqmx. For example, when click 8.3.2 is released, customers cannot upgrade to it until Renovate widens the range in nidaqmx's pyproject.toml to click = ">=8.0.0, <8.3.2" and NI releases a new nidaqmx version.