Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PYTHONPATH leaks into "envreport" #2528

Closed
f3flight opened this issue Nov 3, 2022 · 0 comments · Fixed by #2529
Closed

PYTHONPATH leaks into "envreport" #2528

f3flight opened this issue Nov 3, 2022 · 0 comments · Fixed by #2529
Labels
bug:normal affects many people or has quite an impact

Comments

@f3flight
Copy link
Contributor

f3flight commented Nov 3, 2022

Pretty trivial bug.
Even though tox discards PYTHONPATH for pip install, it does not discard it for pip freeze, causing garbage output if PYTHONPATH has any extra packages (i.e. "pip freeze" will see packages from PYTHONPATH, which it should not do).

https://github.com/tox-dev/tox/blob/3.27.0/src/tox/venv.py#L843

Fix is trivial - fetch env and apply ensure_pip_os_environ_ok the same way it is done for pip install, pass env to pcall. I will make a PR.

@f3flight f3flight added the bug:normal affects many people or has quite an impact label Nov 3, 2022
meili-bors bot added a commit to meilisearch/docs-scraper that referenced this issue Dec 1, 2022
277: Bump tox from 3.27.0 to 3.27.1 r=bidoubiwa a=dependabot[bot]

Bumps [tox](https://github.com/tox-dev/tox) from 3.27.0 to 3.27.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/tox-dev/tox/releases">tox's releases</a>.</em></p>
<blockquote>
<h2>3.27.1</h2>
<h2>What's Changed</h2>
<ul>
<li>release 3.27.0 by <a href="https://github.com/gaborbernat"><code>`@​gaborbernat</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2520">tox-dev/tox#2520</a></li>
<li>setup.cfg: Replace deprecated license_file with license_files by <a href="https://github.com/mgorny"><code>`@​mgorny</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2521">tox-dev/tox#2521</a></li>
<li>Fix PYTHONPATH passed to envreport / &quot;pip freeze&quot; by <a href="https://github.com/f3flight"><code>`@​f3flight</code></a>` in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2529">tox-dev/tox#2529</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/mgorny"><code>`@​mgorny</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2521">tox-dev/tox#2521</a></li>
<li><a href="https://github.com/f3flight"><code>`@​f3flight</code></a>` made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2529">tox-dev/tox#2529</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/3.27.0...3.27.1">https://github.com/tox-dev/tox/compare/3.27.0...3.27.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/tox-dev/tox/blob/master/docs/changelog.rst">tox's changelog</a>.</em></p>
<blockquote>
<h2>v3.27.1 (2022-11-13)</h2>
<p>Bugfixes
^^^^^^^^</p>
<ul>
<li>Replaced deprecated <code>license_file</code> key with <code>license_files</code> in <code>setup.cfg</code> -- by :user:<code>mgorny</code>.
<code>[#2521](tox-dev/tox#2521) &lt;https://github.com/tox-dev/tox/issues/2521&gt;</code>_</li>
<li>Add env cleanup to envreport - fix PYTHONPATH leak into &quot;envreport&quot; -- by :user:<code>f3flight</code>.
<code>[#2528](tox-dev/tox#2528) &lt;https://github.com/tox-dev/tox/issues/2528&gt;</code>_</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/tox-dev/tox/commit/1d5d3b8df20d3911b47b696aa4f78207f843db28"><code>1d5d3b8</code></a> release 3.27.1</li>
<li><a href="https://github.com/tox-dev/tox/commit/b61e7808bf0e7dd0cd5337ab66a714dc7af296b4"><code>b61e780</code></a> Fix changelog</li>
<li><a href="https://github.com/tox-dev/tox/commit/64732211da05f98df940032ab4651c4bbf88aab3"><code>6473221</code></a> Fix PYTHONPATH passed to envreport / &quot;pip freeze&quot; (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2529">#2529</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/0f0c505244f82b85b4c73f5f7ba33bc499b5e163"><code>0f0c505</code></a> Simplify docs conf</li>
<li><a href="https://github.com/tox-dev/tox/commit/95e7124eb8ecb249fb96c7ffe23785575b372fa3"><code>95e7124</code></a> Update check.yml</li>
<li><a href="https://github.com/tox-dev/tox/commit/b123cdbd78700b119edc0b459c24fa686c209769"><code>b123cdb</code></a> setup.cfg: Replace deprecated license_file with license_files (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2521">#2521</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/d0be3c6cc4b93aa53bcf2c7929b4d0fd4b7d063a"><code>d0be3c6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2520">#2520</a> from tox-dev/release-3.27.0</li>
<li>See full diff in <a href="https://github.com/tox-dev/tox/compare/3.27.0...3.27.1">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tox&package-manager=pip&previous-version=3.27.0&new-version=3.27.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
github-actions bot pushed a commit to ryankanno/cookiecutter-py that referenced this issue Dec 5, 2022
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [tox](https://github.com/tox-dev/tox) from 3.25.1 to 3.27.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/tox-dev/tox/releases">tox's releases</a>.</em></p>
<blockquote>
<h2>3.27.1</h2>
<h2>What's Changed</h2>
<ul>
<li>release 3.27.0 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2520">tox-dev/tox#2520</a></li>
<li>setup.cfg: Replace deprecated license_file with license_files by <a href="https://github.com/mgorny"><code>@​mgorny</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2521">tox-dev/tox#2521</a></li>
<li>Fix PYTHONPATH passed to envreport / &quot;pip freeze&quot; by <a href="https://github.com/f3flight"><code>@​f3flight</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2529">tox-dev/tox#2529</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/mgorny"><code>@​mgorny</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2521">tox-dev/tox#2521</a></li>
<li><a href="https://github.com/f3flight"><code>@​f3flight</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2529">tox-dev/tox#2529</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/3.27.0...3.27.1">https://github.com/tox-dev/tox/compare/3.27.0...3.27.1</a></p>
<h2>3.27.0</h2>
<h2>What's Changed</h2>
<ul>
<li>release 3.26.0 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2490">tox-dev/tox#2490</a></li>
<li>Drop --build-option flag from isolated build script by <a href="https://github.com/adamchainz"><code>@​adamchainz</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2497">tox-dev/tox#2497</a></li>
<li>Remove read-only files upon cleanup by <a href="https://github.com/robgom"><code>@​robgom</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2501">tox-dev/tox#2501</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2503">tox-dev/tox#2503</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2505">tox-dev/tox#2505</a></li>
<li>Clearly state that <code>install_command</code> only takes one command by <a href="https://github.com/jugmac00"><code>@​jugmac00</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2509">tox-dev/tox#2509</a></li>
<li>Document problems with plugin and provision env (refs <a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2469">#2469</a>) by <a href="https://github.com/ziima"><code>@​ziima</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2511">tox-dev/tox#2511</a></li>
<li>Provision lock by <a href="https://github.com/masenf"><code>@​masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2516">tox-dev/tox#2516</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/robgom"><code>@​robgom</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2501">tox-dev/tox#2501</a></li>
<li><a href="https://github.com/masenf"><code>@​masenf</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2516">tox-dev/tox#2516</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/3.26.0...3.27.0">https://github.com/tox-dev/tox/compare/3.26.0...3.27.0</a></p>
<h2>3.26.0</h2>
<h2>What's Changed</h2>
<ul>
<li>release 3.25.1 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2451">tox-dev/tox#2451</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2454">tox-dev/tox#2454</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2465">tox-dev/tox#2465</a></li>
<li>Check 3.11 support v3 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2468">tox-dev/tox#2468</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2471">tox-dev/tox#2471</a></li>
<li>Update CODEOWNERS by <a href="https://github.com/jugmac00"><code>@​jugmac00</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2472">tox-dev/tox#2472</a></li>
<li>Fix fallback to &quot;python&quot; environment when &quot;isolated_build = true&quot; is set by <a href="https://github.com/Unrud"><code>@​Unrud</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2475">tox-dev/tox#2475</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2477">tox-dev/tox#2477</a></li>
<li>Use tomllib from the standard library on Python 3.11+ by <a href="https://github.com/hroncok"><code>@​hroncok</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2463">tox-dev/tox#2463</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2485">tox-dev/tox#2485</a></li>
<li>Fix SetuptoolsDeprecationWarning about using --global-option by <a href="https://github.com/adamchainz"><code>@​adamchainz</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2487">tox-dev/tox#2487</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Unrud"><code>@​Unrud</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2475">tox-dev/tox#2475</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/3.25.1...3.26.0">https://github.com/tox-dev/tox/compare/3.25.1...3.26.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/tox-dev/tox/blob/3.27.1/docs/changelog.rst">tox's changelog</a>.</em></p>
<blockquote>
<h2>v3.27.1 (2022-11-13)</h2>
<p>Bugfixes
^^^^^^^^</p>
<ul>
<li>Replaced deprecated <code>license_file</code> key with <code>license_files</code> in <code>setup.cfg</code> -- by :user:<code>mgorny</code>.
<code>[#2521](tox-dev/tox#2521) &lt;https://github.com/tox-dev/tox/issues/2521&gt;</code>_</li>
<li>Add env cleanup to envreport - fix PYTHONPATH leak into &quot;envreport&quot; -- by :user:<code>f3flight</code>.
<code>[#2528](tox-dev/tox#2528) &lt;https://github.com/tox-dev/tox/issues/2528&gt;</code>_</li>
</ul>
<h2>v3.27.0 (2022-10-25)</h2>
<p>Bugfixes
^^^^^^^^</p>
<ul>
<li>Dropped <code>--build-option</code> in isolated builds, an alternative fix for the <code>SetuptoolsDeprecationWarning</code> about using <code>--global-option</code> -- by :user:<code>adamchainz</code>
<code>[#2497](tox-dev/tox#2497) &lt;https://github.com/tox-dev/tox/issues/2497&gt;</code>_</li>
<li>Remove read-only files in <code>ensure_empty_dir</code>.
<code>[#2498](tox-dev/tox#2498) &lt;https://github.com/tox-dev/tox/issues/2498&gt;</code>_</li>
<li>Multiple tox instances no longer clobber the <code>.tox</code> directory when
<code>provision_tox_env</code> is used. - by :user:<code>masenf</code>
<code>[#2515](tox-dev/tox#2515) &lt;https://github.com/tox-dev/tox/issues/2515&gt;</code>_</li>
</ul>
<p>Documentation
^^^^^^^^^^^^^</p>
<ul>
<li>Clarify that <code>install_command</code> only takes one command - by :user:<code>jugmac00</code>
<code>[#2433](tox-dev/tox#2433) &lt;https://github.com/tox-dev/tox/issues/2433&gt;</code>_</li>
<li>Documented problems with plugin and provision env - by :user:<code>ziima</code>.
<code>[#2469](tox-dev/tox#2469) &lt;https://github.com/tox-dev/tox/issues/2469&gt;</code>_</li>
</ul>
<h2>v3.26.0 (2022-09-07)</h2>
<p>Bugfixes
^^^^^^^^</p>
<ul>
<li>Fix fallback to <code>python</code> environment when <code>isolated_build = true</code> is set -- by :user:<code>Unrud</code>
<code>[#2474](tox-dev/tox#2474) &lt;https://github.com/tox-dev/tox/issues/2474&gt;</code>_</li>
<li>Fixed <code>SetuptoolsDeprecationWarning</code> about using <code>--global-option</code> -- by :user:<code>adamchainz</code>
<code>[#2478](tox-dev/tox#2478) &lt;https://github.com/tox-dev/tox/issues/2478&gt;</code>_</li>
</ul>
<p>Features
^^^^^^^^</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/tox-dev/tox/commit/1d5d3b8df20d3911b47b696aa4f78207f843db28"><code>1d5d3b8</code></a> release 3.27.1</li>
<li><a href="https://github.com/tox-dev/tox/commit/b61e7808bf0e7dd0cd5337ab66a714dc7af296b4"><code>b61e780</code></a> Fix changelog</li>
<li><a href="https://github.com/tox-dev/tox/commit/64732211da05f98df940032ab4651c4bbf88aab3"><code>6473221</code></a> Fix PYTHONPATH passed to envreport / &quot;pip freeze&quot; (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2529">#2529</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/0f0c505244f82b85b4c73f5f7ba33bc499b5e163"><code>0f0c505</code></a> Simplify docs conf</li>
<li><a href="https://github.com/tox-dev/tox/commit/95e7124eb8ecb249fb96c7ffe23785575b372fa3"><code>95e7124</code></a> Update check.yml</li>
<li><a href="https://github.com/tox-dev/tox/commit/b123cdbd78700b119edc0b459c24fa686c209769"><code>b123cdb</code></a> setup.cfg: Replace deprecated license_file with license_files (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2521">#2521</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/d0be3c6cc4b93aa53bcf2c7929b4d0fd4b7d063a"><code>d0be3c6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2520">#2520</a> from tox-dev/release-3.27.0</li>
<li><a href="https://github.com/tox-dev/tox/commit/96ff2c97e980866e5f5a668da6cd59eb490a1424"><code>96ff2c9</code></a> release 3.27.0</li>
<li><a href="https://github.com/tox-dev/tox/commit/e378131e14e7db4c7e16a06628fa06c5f73c4ecd"><code>e378131</code></a> Provision lock (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2516">#2516</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/d41bd622ea27b4a591be7aaf8f55560f5037b84f"><code>d41bd62</code></a> Document problems with plugin and provision env (refs <a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2469">#2469</a>) (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2511">#2511</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/tox-dev/tox/compare/3.25.1...3.27.1">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tox&package-manager=pip&previous-version=3.25.1&new-version=3.27.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
github-actions bot pushed a commit to ryankanno/cookiecutter-py that referenced this issue Dec 5, 2022
…ckage_name}}

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [tox](https://github.com/tox-dev/tox) from 3.25.1 to 3.27.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/tox-dev/tox/releases">tox's releases</a>.</em></p>
<blockquote>
<h2>3.27.1</h2>
<h2>What's Changed</h2>
<ul>
<li>release 3.27.0 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2520">tox-dev/tox#2520</a></li>
<li>setup.cfg: Replace deprecated license_file with license_files by <a href="https://github.com/mgorny"><code>@​mgorny</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2521">tox-dev/tox#2521</a></li>
<li>Fix PYTHONPATH passed to envreport / &quot;pip freeze&quot; by <a href="https://github.com/f3flight"><code>@​f3flight</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2529">tox-dev/tox#2529</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/mgorny"><code>@​mgorny</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2521">tox-dev/tox#2521</a></li>
<li><a href="https://github.com/f3flight"><code>@​f3flight</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2529">tox-dev/tox#2529</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/3.27.0...3.27.1">https://github.com/tox-dev/tox/compare/3.27.0...3.27.1</a></p>
<h2>3.27.0</h2>
<h2>What's Changed</h2>
<ul>
<li>release 3.26.0 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2490">tox-dev/tox#2490</a></li>
<li>Drop --build-option flag from isolated build script by <a href="https://github.com/adamchainz"><code>@​adamchainz</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2497">tox-dev/tox#2497</a></li>
<li>Remove read-only files upon cleanup by <a href="https://github.com/robgom"><code>@​robgom</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2501">tox-dev/tox#2501</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2503">tox-dev/tox#2503</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2505">tox-dev/tox#2505</a></li>
<li>Clearly state that <code>install_command</code> only takes one command by <a href="https://github.com/jugmac00"><code>@​jugmac00</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2509">tox-dev/tox#2509</a></li>
<li>Document problems with plugin and provision env (refs <a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2469">#2469</a>) by <a href="https://github.com/ziima"><code>@​ziima</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2511">tox-dev/tox#2511</a></li>
<li>Provision lock by <a href="https://github.com/masenf"><code>@​masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2516">tox-dev/tox#2516</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/robgom"><code>@​robgom</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2501">tox-dev/tox#2501</a></li>
<li><a href="https://github.com/masenf"><code>@​masenf</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2516">tox-dev/tox#2516</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/3.26.0...3.27.0">https://github.com/tox-dev/tox/compare/3.26.0...3.27.0</a></p>
<h2>3.26.0</h2>
<h2>What's Changed</h2>
<ul>
<li>release 3.25.1 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2451">tox-dev/tox#2451</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2454">tox-dev/tox#2454</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2465">tox-dev/tox#2465</a></li>
<li>Check 3.11 support v3 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2468">tox-dev/tox#2468</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2471">tox-dev/tox#2471</a></li>
<li>Update CODEOWNERS by <a href="https://github.com/jugmac00"><code>@​jugmac00</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2472">tox-dev/tox#2472</a></li>
<li>Fix fallback to &quot;python&quot; environment when &quot;isolated_build = true&quot; is set by <a href="https://github.com/Unrud"><code>@​Unrud</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2475">tox-dev/tox#2475</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2477">tox-dev/tox#2477</a></li>
<li>Use tomllib from the standard library on Python 3.11+ by <a href="https://github.com/hroncok"><code>@​hroncok</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2463">tox-dev/tox#2463</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2485">tox-dev/tox#2485</a></li>
<li>Fix SetuptoolsDeprecationWarning about using --global-option by <a href="https://github.com/adamchainz"><code>@​adamchainz</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2487">tox-dev/tox#2487</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Unrud"><code>@​Unrud</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2475">tox-dev/tox#2475</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/3.25.1...3.26.0">https://github.com/tox-dev/tox/compare/3.25.1...3.26.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/tox-dev/tox/blob/3.27.1/docs/changelog.rst">tox's changelog</a>.</em></p>
<blockquote>
<h2>v3.27.1 (2022-11-13)</h2>
<p>Bugfixes
^^^^^^^^</p>
<ul>
<li>Replaced deprecated <code>license_file</code> key with <code>license_files</code> in <code>setup.cfg</code> -- by :user:<code>mgorny</code>.
<code>[#2521](tox-dev/tox#2521) &lt;https://github.com/tox-dev/tox/issues/2521&gt;</code>_</li>
<li>Add env cleanup to envreport - fix PYTHONPATH leak into &quot;envreport&quot; -- by :user:<code>f3flight</code>.
<code>[#2528](tox-dev/tox#2528) &lt;https://github.com/tox-dev/tox/issues/2528&gt;</code>_</li>
</ul>
<h2>v3.27.0 (2022-10-25)</h2>
<p>Bugfixes
^^^^^^^^</p>
<ul>
<li>Dropped <code>--build-option</code> in isolated builds, an alternative fix for the <code>SetuptoolsDeprecationWarning</code> about using <code>--global-option</code> -- by :user:<code>adamchainz</code>
<code>[#2497](tox-dev/tox#2497) &lt;https://github.com/tox-dev/tox/issues/2497&gt;</code>_</li>
<li>Remove read-only files in <code>ensure_empty_dir</code>.
<code>[#2498](tox-dev/tox#2498) &lt;https://github.com/tox-dev/tox/issues/2498&gt;</code>_</li>
<li>Multiple tox instances no longer clobber the <code>.tox</code> directory when
<code>provision_tox_env</code> is used. - by :user:<code>masenf</code>
<code>[#2515](tox-dev/tox#2515) &lt;https://github.com/tox-dev/tox/issues/2515&gt;</code>_</li>
</ul>
<p>Documentation
^^^^^^^^^^^^^</p>
<ul>
<li>Clarify that <code>install_command</code> only takes one command - by :user:<code>jugmac00</code>
<code>[#2433](tox-dev/tox#2433) &lt;https://github.com/tox-dev/tox/issues/2433&gt;</code>_</li>
<li>Documented problems with plugin and provision env - by :user:<code>ziima</code>.
<code>[#2469](tox-dev/tox#2469) &lt;https://github.com/tox-dev/tox/issues/2469&gt;</code>_</li>
</ul>
<h2>v3.26.0 (2022-09-07)</h2>
<p>Bugfixes
^^^^^^^^</p>
<ul>
<li>Fix fallback to <code>python</code> environment when <code>isolated_build = true</code> is set -- by :user:<code>Unrud</code>
<code>[#2474](tox-dev/tox#2474) &lt;https://github.com/tox-dev/tox/issues/2474&gt;</code>_</li>
<li>Fixed <code>SetuptoolsDeprecationWarning</code> about using <code>--global-option</code> -- by :user:<code>adamchainz</code>
<code>[#2478](tox-dev/tox#2478) &lt;https://github.com/tox-dev/tox/issues/2478&gt;</code>_</li>
</ul>
<p>Features
^^^^^^^^</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/tox-dev/tox/commit/1d5d3b8df20d3911b47b696aa4f78207f843db28"><code>1d5d3b8</code></a> release 3.27.1</li>
<li><a href="https://github.com/tox-dev/tox/commit/b61e7808bf0e7dd0cd5337ab66a714dc7af296b4"><code>b61e780</code></a> Fix changelog</li>
<li><a href="https://github.com/tox-dev/tox/commit/64732211da05f98df940032ab4651c4bbf88aab3"><code>6473221</code></a> Fix PYTHONPATH passed to envreport / &quot;pip freeze&quot; (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2529">#2529</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/0f0c505244f82b85b4c73f5f7ba33bc499b5e163"><code>0f0c505</code></a> Simplify docs conf</li>
<li><a href="https://github.com/tox-dev/tox/commit/95e7124eb8ecb249fb96c7ffe23785575b372fa3"><code>95e7124</code></a> Update check.yml</li>
<li><a href="https://github.com/tox-dev/tox/commit/b123cdbd78700b119edc0b459c24fa686c209769"><code>b123cdb</code></a> setup.cfg: Replace deprecated license_file with license_files (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2521">#2521</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/d0be3c6cc4b93aa53bcf2c7929b4d0fd4b7d063a"><code>d0be3c6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2520">#2520</a> from tox-dev/release-3.27.0</li>
<li><a href="https://github.com/tox-dev/tox/commit/96ff2c97e980866e5f5a668da6cd59eb490a1424"><code>96ff2c9</code></a> release 3.27.0</li>
<li><a href="https://github.com/tox-dev/tox/commit/e378131e14e7db4c7e16a06628fa06c5f73c4ecd"><code>e378131</code></a> Provision lock (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2516">#2516</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/d41bd622ea27b4a591be7aaf8f55560f5037b84f"><code>d41bd62</code></a> Document problems with plugin and provision env (refs <a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2469">#2469</a>) (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2511">#2511</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/tox-dev/tox/compare/3.25.1...3.27.1">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tox&package-manager=pip&previous-version=3.25.1&new-version=3.27.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
github-actions bot pushed a commit to ryankanno/py-golf-games that referenced this issue Dec 6, 2022
Bumps [tox](https://github.com/tox-dev/tox) from 3.25.1 to 3.27.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/tox-dev/tox/releases">tox's releases</a>.</em></p>
<blockquote>
<h2>3.27.1</h2>
<h2>What's Changed</h2>
<ul>
<li>release 3.27.0 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2520">tox-dev/tox#2520</a></li>
<li>setup.cfg: Replace deprecated license_file with license_files by <a href="https://github.com/mgorny"><code>@​mgorny</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2521">tox-dev/tox#2521</a></li>
<li>Fix PYTHONPATH passed to envreport / &quot;pip freeze&quot; by <a href="https://github.com/f3flight"><code>@​f3flight</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2529">tox-dev/tox#2529</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/mgorny"><code>@​mgorny</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2521">tox-dev/tox#2521</a></li>
<li><a href="https://github.com/f3flight"><code>@​f3flight</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2529">tox-dev/tox#2529</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/3.27.0...3.27.1">https://github.com/tox-dev/tox/compare/3.27.0...3.27.1</a></p>
<h2>3.27.0</h2>
<h2>What's Changed</h2>
<ul>
<li>release 3.26.0 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2490">tox-dev/tox#2490</a></li>
<li>Drop --build-option flag from isolated build script by <a href="https://github.com/adamchainz"><code>@​adamchainz</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2497">tox-dev/tox#2497</a></li>
<li>Remove read-only files upon cleanup by <a href="https://github.com/robgom"><code>@​robgom</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2501">tox-dev/tox#2501</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2503">tox-dev/tox#2503</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2505">tox-dev/tox#2505</a></li>
<li>Clearly state that <code>install_command</code> only takes one command by <a href="https://github.com/jugmac00"><code>@​jugmac00</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2509">tox-dev/tox#2509</a></li>
<li>Document problems with plugin and provision env (refs <a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2469">#2469</a>) by <a href="https://github.com/ziima"><code>@​ziima</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2511">tox-dev/tox#2511</a></li>
<li>Provision lock by <a href="https://github.com/masenf"><code>@​masenf</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2516">tox-dev/tox#2516</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/robgom"><code>@​robgom</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2501">tox-dev/tox#2501</a></li>
<li><a href="https://github.com/masenf"><code>@​masenf</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2516">tox-dev/tox#2516</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/3.26.0...3.27.0">https://github.com/tox-dev/tox/compare/3.26.0...3.27.0</a></p>
<h2>3.26.0</h2>
<h2>What's Changed</h2>
<ul>
<li>release 3.25.1 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2451">tox-dev/tox#2451</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2454">tox-dev/tox#2454</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2465">tox-dev/tox#2465</a></li>
<li>Check 3.11 support v3 by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2468">tox-dev/tox#2468</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2471">tox-dev/tox#2471</a></li>
<li>Update CODEOWNERS by <a href="https://github.com/jugmac00"><code>@​jugmac00</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2472">tox-dev/tox#2472</a></li>
<li>Fix fallback to &quot;python&quot; environment when &quot;isolated_build = true&quot; is set by <a href="https://github.com/Unrud"><code>@​Unrud</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2475">tox-dev/tox#2475</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2477">tox-dev/tox#2477</a></li>
<li>Use tomllib from the standard library on Python 3.11+ by <a href="https://github.com/hroncok"><code>@​hroncok</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2463">tox-dev/tox#2463</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2485">tox-dev/tox#2485</a></li>
<li>Fix SetuptoolsDeprecationWarning about using --global-option by <a href="https://github.com/adamchainz"><code>@​adamchainz</code></a> in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2487">tox-dev/tox#2487</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Unrud"><code>@​Unrud</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/tox-dev/tox/pull/2475">tox-dev/tox#2475</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/tox/compare/3.25.1...3.26.0">https://github.com/tox-dev/tox/compare/3.25.1...3.26.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/tox-dev/tox/blob/3.27.1/docs/changelog.rst">tox's changelog</a>.</em></p>
<blockquote>
<h2>v3.27.1 (2022-11-13)</h2>
<p>Bugfixes
^^^^^^^^</p>
<ul>
<li>Replaced deprecated <code>license_file</code> key with <code>license_files</code> in <code>setup.cfg</code> -- by :user:<code>mgorny</code>.
<code>[#2521](tox-dev/tox#2521) &lt;https://github.com/tox-dev/tox/issues/2521&gt;</code>_</li>
<li>Add env cleanup to envreport - fix PYTHONPATH leak into &quot;envreport&quot; -- by :user:<code>f3flight</code>.
<code>[#2528](tox-dev/tox#2528) &lt;https://github.com/tox-dev/tox/issues/2528&gt;</code>_</li>
</ul>
<h2>v3.27.0 (2022-10-25)</h2>
<p>Bugfixes
^^^^^^^^</p>
<ul>
<li>Dropped <code>--build-option</code> in isolated builds, an alternative fix for the <code>SetuptoolsDeprecationWarning</code> about using <code>--global-option</code> -- by :user:<code>adamchainz</code>
<code>[#2497](tox-dev/tox#2497) &lt;https://github.com/tox-dev/tox/issues/2497&gt;</code>_</li>
<li>Remove read-only files in <code>ensure_empty_dir</code>.
<code>[#2498](tox-dev/tox#2498) &lt;https://github.com/tox-dev/tox/issues/2498&gt;</code>_</li>
<li>Multiple tox instances no longer clobber the <code>.tox</code> directory when
<code>provision_tox_env</code> is used. - by :user:<code>masenf</code>
<code>[#2515](tox-dev/tox#2515) &lt;https://github.com/tox-dev/tox/issues/2515&gt;</code>_</li>
</ul>
<p>Documentation
^^^^^^^^^^^^^</p>
<ul>
<li>Clarify that <code>install_command</code> only takes one command - by :user:<code>jugmac00</code>
<code>[#2433](tox-dev/tox#2433) &lt;https://github.com/tox-dev/tox/issues/2433&gt;</code>_</li>
<li>Documented problems with plugin and provision env - by :user:<code>ziima</code>.
<code>[#2469](tox-dev/tox#2469) &lt;https://github.com/tox-dev/tox/issues/2469&gt;</code>_</li>
</ul>
<h2>v3.26.0 (2022-09-07)</h2>
<p>Bugfixes
^^^^^^^^</p>
<ul>
<li>Fix fallback to <code>python</code> environment when <code>isolated_build = true</code> is set -- by :user:<code>Unrud</code>
<code>[#2474](tox-dev/tox#2474) &lt;https://github.com/tox-dev/tox/issues/2474&gt;</code>_</li>
<li>Fixed <code>SetuptoolsDeprecationWarning</code> about using <code>--global-option</code> -- by :user:<code>adamchainz</code>
<code>[#2478](tox-dev/tox#2478) &lt;https://github.com/tox-dev/tox/issues/2478&gt;</code>_</li>
</ul>
<p>Features
^^^^^^^^</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/tox-dev/tox/commit/1d5d3b8df20d3911b47b696aa4f78207f843db28"><code>1d5d3b8</code></a> release 3.27.1</li>
<li><a href="https://github.com/tox-dev/tox/commit/b61e7808bf0e7dd0cd5337ab66a714dc7af296b4"><code>b61e780</code></a> Fix changelog</li>
<li><a href="https://github.com/tox-dev/tox/commit/64732211da05f98df940032ab4651c4bbf88aab3"><code>6473221</code></a> Fix PYTHONPATH passed to envreport / &quot;pip freeze&quot; (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2529">#2529</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/0f0c505244f82b85b4c73f5f7ba33bc499b5e163"><code>0f0c505</code></a> Simplify docs conf</li>
<li><a href="https://github.com/tox-dev/tox/commit/95e7124eb8ecb249fb96c7ffe23785575b372fa3"><code>95e7124</code></a> Update check.yml</li>
<li><a href="https://github.com/tox-dev/tox/commit/b123cdbd78700b119edc0b459c24fa686c209769"><code>b123cdb</code></a> setup.cfg: Replace deprecated license_file with license_files (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2521">#2521</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/d0be3c6cc4b93aa53bcf2c7929b4d0fd4b7d063a"><code>d0be3c6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2520">#2520</a> from tox-dev/release-3.27.0</li>
<li><a href="https://github.com/tox-dev/tox/commit/96ff2c97e980866e5f5a668da6cd59eb490a1424"><code>96ff2c9</code></a> release 3.27.0</li>
<li><a href="https://github.com/tox-dev/tox/commit/e378131e14e7db4c7e16a06628fa06c5f73c4ecd"><code>e378131</code></a> Provision lock (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2516">#2516</a>)</li>
<li><a href="https://github.com/tox-dev/tox/commit/d41bd622ea27b4a591be7aaf8f55560f5037b84f"><code>d41bd62</code></a> Document problems with plugin and provision env (refs <a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2469">#2469</a>) (<a href="https://github-redirect.dependabot.com/tox-dev/tox/issues/2511">#2511</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/tox-dev/tox/compare/3.25.1...3.27.1">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tox&package-manager=pip&previous-version=3.25.1&new-version=3.27.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug:normal affects many people or has quite an impact
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant