Bump tox from 4.58.0 to 4.59.0 in /.github

[dependabot]

Bumps tox from 4.58.0 to 4.59.0.

Release notes

Sourced from tox's releases.

v4.59.0

What's Changed

• 🐛 fix(type): cast set value in _render_options by @​gaborbernat in tox-dev/tox#4003
• docs: fix typo 'set the the' -> 'set then the' in config reference by @​LaRoyBot in tox-dev/tox#4002
• 👷 ci: pin coverage to the ctrace core by @​gaborbernat in tox-dev/tox#4009
• 🔥 chore: remove the misc changelog category by @​gaborbernat in tox-dev/tox#4012
• ✅ test: seed the virtualenv wheel image up front by @​gaborbernat in tox-dev/tox#4011
• ✨ feat(plugin): type the plugin and internal API surfaces by @​gaborbernat in tox-dev/tox#4014
• ✅ test: raise timeout for missing-interpreter discovery tests by @​gaborbernat in tox-dev/tox#4018
• 📝 docs: mark the INI configuration format as deprecated by @​gaborbernat in tox-dev/tox#4017

New Contributors

• @​LaRoyBot made their first contribution in tox-dev/tox#4002

Full Changelog: tox-dev/tox@4.58.0...4.59.0

Changelog

Sourced from tox's changelog.

Features - 4.59.0

• The plugin and internal APIs now declare their types, and the code base passes mypy --strict and pyrefly next to ty - by :user:gaborjbernat.

  • :meth:ConfigSet.get <tox.config.sets.ConfigSet.get> returns a configuration value after checking it against its declared type, so plugins can drop cast around conf["key"] reads.
  • The :func:tox_on_install <tox.plugin.spec.tox_on_install> hook and :class:Installer <tox.tox_env.installer.Installer> type their arguments as :data:InstallArguments <tox.tox_env.installer.InstallArguments>; installer subclasses may narrow it through the new second type parameter.
  • :class:Parsed <tox.config.cli.parser.Parsed> declares the CLI option surface, so options.<name> reads type-check.
  • :meth:ConfigSet.add_config <tox.config.sets.ConfigSet.add_config> accepts default=None for optional values and infers the value type from callable defaults.
  • The journal, the environment cache, and execute metadata hold JsonValue content; structured set_env entries match the SetEnvEntry shape. (:issue:4014)

Improved documentation - 4.59.0

• Mark the INI configuration format as deprecated throughout the documentation - by :user:gaborbernat.

  • The tutorial, the configuration reference, and the migration how-to state that INI keeps working for existing projects but is frozen and receives no new features.
  • Every INI example tab, the configuration discovery diagram, and the man page carry a deprecation marker.
  • The tutorial no longer suggests generating a tox.ini via tox quickstart. (:issue:4017)

Contributor-facing changes - 4.59.0

• Remove the misc changelog category, and align the changelog filename check with the categories towncrier accepts - by :user:gaborbernat. (:issue:4012)

---

v4.58.0 (2026-07-21)

---

Commits

• cb7eeca release 4.59.0
• da75cad 📝 docs: mark the INI configuration format as deprecated (#4017)
• ef7dc3a ✅ test: raise timeout for missing-interpreter discovery tests (#4018)
• c76344d [pre-commit.ci] pre-commit autoupdate (#4016)
• 7be33b8 ✨ feat(plugin): type the plugin and internal API surfaces (#4014)
• 2e247dc ✅ test: raise timeout for tests hitting real PyPI (#4011)
• 2c1f86f 🔥 chore: remove the misc changelog category (#4012)
• 59302d8 build(deps): bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#4008)
• 08333ee [pre-commit.ci] pre-commit autoupdate (#4010)
• 0bbe8c4 👷 ci: pin coverage to the ctrace core (#4009)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)