build(deps-dev): bump tox from 4.60.0 to 4.60.1 in the patch-and-minor group

[dependabot]

Bumps the patch-and-minor group with 1 update: tox.

Updates tox from 4.60.0 to 4.60.1

Release notes

Sourced from tox's releases.

v4.60.1

What's Changed

• Stop Windows pytest-timeout kills in CI by @​gaborbernat in tox-dev/tox#4026
• fix(config): report a malformed ini as a handled error instead of a traceback by @​VXNCXNX in tox-dev/tox#4027
• Handle unreadable configuration files by @​SirHegel in tox-dev/tox#4035
• fix: a semicolon truncates a value read from a set_env file by @​VXNCXNX in tox-dev/tox#4030
• fix: report an invalid --skip-env regex as a handled error by @​VXNCXNX in tox-dev/tox#4029
• docs: drop the claim that tox -e py skips tests with missing dependencies by @​MohammedAlkindi in tox-dev/tox#4036
• 🔧 chore: drop the now-unused ty ignore directive by @​gaborbernat in tox-dev/tox#4039
• 🔧 chore: batch dependency updates weekly on Tuesday by @​gaborbernat in tox-dev/tox#4038
• Report a bad ini core value as a handled error by @​VXNCXNX in tox-dev/tox#4028
• Report an empty TOML command value as a handled error by @​dylanpulver in tox-dev/tox#4041

New Contributors

• @​VXNCXNX made their first contribution in tox-dev/tox#4027
• @​SirHegel made their first contribution in tox-dev/tox#4035
• @​MohammedAlkindi made their first contribution in tox-dev/tox#4036
• @​dylanpulver made their first contribution in tox-dev/tox#4041

Full Changelog: tox-dev/tox@4.60.0...4.60.1

Changelog

Sourced from tox's changelog.

Bug fixes - 4.60.1

• Report a malformed tox.ini or setup.cfg as a handled error during config discovery instead of raising an unhandled :class:configparser.Error traceback - by :user:VXNCXNX (:issue:4027)
• Report an invalid value in the ini [tox] core section (such as min_version, requires or env_list) as a handled error instead of an unhandled traceback, matching the existing TOML loader behavior - by :user:VXNCXNX (:issue:4028)
• Report an invalid --skip-env/TOX_SKIP_ENV regular expression as a handled error instead of raising an unhandled re.error traceback - by :user:VXNCXNX (:issue:4029)
• Keep ; inside values read from a set_env environment file (file|.env). Environment file lines are plain KEY=VALUE pairs and were incorrectly parsed with the PEP-508 marker splitter, which truncated values such as DATABASE_URL=postgresql://host/db?opt=1;sslmode=require at the first semicolon - by :user:VXNCXNX (:issue:4030)
• Report a handled configuration error instead of leaking a traceback when the selected configuration file exists but cannot be read - by :user:SirHegel. (:issue:4031)
• Report an empty install_command or list_dependencies_command in a TOML configuration as a handled error instead of an unhandled traceback - by :user:dylanpulver (:issue:4041)

Contributor-facing changes - 4.60.1

• Pre-seed the setuptools wheel image alongside pip before the test session and give integration tests a 240s budget on Windows, so pytest-timeout no longer kills Windows CI workers - by :user:gaborbernat. (:issue:4026)

---

v4.60.0 (2026-08-13)

---

Commits

• e91ca3b release 4.60.1
• 59e984f Report an empty TOML command value as a handled error (#4041)
• fcb513e [pre-commit.ci] pre-commit autoupdate (#4040)
• e753137 Report a bad ini core value as a handled error (#4028)
• 79a45b4 🔧 chore: batch dependency updates weekly on Tuesday (#4038)
• e388aeb 🔧 chore: drop the now-unused ty ignore directive (#4039)
• 76baa0a docs: drop the claim that tox -e py skips tests with missing dependencies (#4...
• 0250664 build(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#4037)
• 8527c61 fix: report an invalid --skip-env regex as a handled error (#4029)
• fb859dc fix: a semicolon truncates a value read from a set_env file (#4030)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

☂️ Code Coverage

current status: ✅

Overall Coverage

Statements	Covered	Coverage	Threshold	Status
680	556	82%	70%	🟢

New Files

No new covered files...

Modified Files

No covered modified files...

updated for commit: 01f96d0 by action🐍

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud