[dependabot]

Bumps the pip-dependencies group in /requirements.d with 2 updates: tox and types-pyyaml.

Updates tox from 4.64.10 to 4.65.2

Release notes

Sourced from tox's releases.

v4.65.2

Bug fixes

• A dependency_groups run whose package root has no pyproject.toml now fails with the path it looked at, instead of installing none of the requested groups and reporting success by @​feiiiiii5. (#4142)

🐍 PyPI release

📜 Full Changelog

v4.65.1

Bug fixes

• tox removes read-only files on Windows when it empties an environment's tmp or log directory, or the whole environment on recreate by @​SulimanAbdulrazzaq.
  • A read-only file in the directory itself used to stop every later run with internal error.
  • A read-only file in a sub-directory used to stay behind without a warning. (#4138)

Packaging

• Use Python 3.15 for development and automation. (#4139)
• Include the plugin documentation in source distributions so downstream packagers can run the plugin example tests. (#4140)

🐍 PyPI release

📜 Full Changelog

v4.65.0

Features

• Bump the default maximum CPython minor version to 3.15 in generative environment lists. (#4136)

Bug fixes

• --result-json and tox config -o create the missing parent directory of the output file instead of crashing by @​SulimanAbdulrazzaq. (#4126)
• A set_env env file that is a directory or not UTF-8 fails the environment with a configuration error instead of a traceback, and a leading UTF-8 byte order mark no longer ends up in the first key by @​SulimanAbdulrazzaq. (#4127)
• A reused environment with commands = [] clears env_log_dir at the start of the run instead of keeping logs from the previous run by @​glaziermag. (#4130)

Documentation

... (truncated)

Changelog

Sourced from tox's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

.. _release-4-67-13:

---

4.67.13 (2026-11-06)

---

.. _release-4-67-13-fixed:

Fixed

• Relative {glob:...} and TOML replace = "glob" patterns now match files when :ref:tox_root contains [, * or ?. tox treats those characters in the project path literally while keeping wildcards in the configured pattern (:pr:4389) by :user:qodelicious and :user:gaborbernat.
• When :ref:work_dir or :ref:tox_root contains [, * or ?, tox now treats those characters literally in its own executable paths and in default or relative :ref:package_glob patterns. This lets it run environment commands and find packages built by package = external (:pr:4390) by :user:qodelicious and :user:gaborbernat.

.. _release-4-67-12:

---

4.67.12 (2026-11-05)

---

.. _release-4-67-12-fixed:

Fixed

• A quoted set_env value that ends with a literal backslash and contains a semicolon no longer loses its quote protection, so WINPATH="C:\tools;C:\bin\\" keeps the whole value instead of failing with invalid marker. tox now counts the backslashes in front of a quote: an even number leaves the quote unescaped (:pr:4388) by :user:haigou-web and :user:gaborbernat. (:issue:4387)

.. _release-4-67-11:

---

4.67.11 (2026-11-04)

---

.. _release-4-67-11-fixed:

... (truncated)

Commits

• 71d6dd3 release 4.65.2
• ef19f77 🐛 fix(python): fail a dependency_groups run with no pyproject.toml to read (#...
• 655d771 release 4.65.1
• 4a71f79 fix(packaging): include plugin docs in sdist (#4141)
• 55ee489 feat(python): require 3.11 and default to 3.15 (#4139)
• e1dcb89 🐛 fix(path): remove read-only files when emptying an environment directory (#...
• 21d7b51 release 4.65.0
• fbe1248 feat: bump default maximum Python minor to 3.15 (#4136)
• c6dabc2 📝 docs(plugins): drop @​impl from tox_append_version_info examples (#4135)
• 5cec382 👷 ci: fix the cancelled() check that broke check.yaml (#4134)
• Additional commits viewable in compare view

Updates types-pyyaml from 6.0.12.20261030 to 6.0.12.20261103

Commits

• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
tox	[>= 4.49.dev0, < 4.50]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions