Bump tox from 4.3.4 to 4.3.5

[dependabot]

Bumps tox from 4.3.4 to 4.3.5.

Release notes

Sourced from tox's releases.

4.3.5

What's Changed

• Include WHEEL metadata when using PDM and poetry backends by @​masenf in tox-dev/tox#2881

Full Changelog: tox-dev/tox@4.3.4...4.3.5

Changelog

Sourced from tox's changelog.

v4.3.5 (2023-01-18)

Bugfixes - 4.3.5

- When building a ``wheel`` or ``editable`` package with a PEP 517 backend, no
  longer pass an empty ``metadata_directory`` to the backend ``build_wheel`` or
  ``build_editable`` endpoint.
Some backends, such as PDM and poetry, will not generate package metadata in
the presence of a metadata_directory, even if it is empty.
Prior to this change, attempting to install a wheel created by tox using PDM or
poetry would return an error like "There is no item named
'my-package.0.1.dist-info/WHEEL' in the archive" - by :user:masenf. (:issue:2880)

Commits

• 7eec025 release 4.3.5
• 8323aaa Include WHEEL metadata when using PDM and poetry backends (#2881)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

Base: 100.00% // Head: 100.00% // No change to project coverage 👍

Coverage data is based on head (eff363b) compared to base (912c0f3).
Patch has no changes to coverable lines.

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #137   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            3         3           
  Lines          111       111           
=========================================
  Hits           111       111           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

[mikelane]

@dependabot merge

…

On Wed, Jan 18, 2023 at 18:02 dependabot[bot] ***@***.***> wrote: Bumps tox <https://github.com/tox-dev/tox> from 4.3.4 to 4.3.5. Release notes *Sourced from tox's releases <https://github.com/tox-dev/tox/releases>.* 4.3.5 What's Changed - Include WHEEL metadata when using PDM and poetry backends by @​masenf <https://github.com/masenf> in tox-dev/tox#2881 <https://github-redirect.dependabot.com/tox-dev/tox/pull/2881> *Full Changelog*: ***@***.*** <tox-dev/tox@4.3.4...4.3.5> Changelog *Sourced from tox's changelog <https://github.com/tox-dev/tox/blob/main/docs/changelog.rst>.* v4.3.5 (2023-01-18) Bugfixes - 4.3.5 - When building a ``wheel`` or ``editable`` package with a PEP 517 backend, no longer pass an empty ``metadata_directory`` to the backend ``build_wheel`` or ``build_editable`` endpoint. Some backends, such as PDM and poetry, will not generate package metadata in the presence of a metadata_directory, even if it is empty. Prior to this change, attempting to install a wheel created by tox using PDM or poetry would return an error like "There is no item named 'my-package.0.1.dist-info/WHEEL' in the archive" - by :user:masenf. (:issue:2880) Commits - 7eec025 <tox-dev/tox@7eec025> release 4.3.5 - 8323aaa <tox-dev/tox@8323aaa> Include WHEEL metadata when using PDM and poetry backends (#2881 <https://github-redirect.dependabot.com/tox-dev/tox/issues/2881>) - See full diff in compare view <tox-dev/tox@4.3.4...4.3.5> [image: Dependabot compatibility score] <https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. ------------------------------ Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - @dependabot rebase will rebase this PR - @dependabot recreate will recreate this PR, overwriting any edits that have been made to it - @dependabot merge will merge this PR after your CI passes on it - @dependabot squash and merge will squash and merge this PR after your CI passes on it - @dependabot cancel merge will cancel a previously requested merge and block automerging - @dependabot reopen will reopen this PR if it is closed - @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) ------------------------------ You can view, comment on, or merge this pull request online at: #137 Commit Summary - eff363b <eff363b> Bump tox from 4.3.4 to 4.3.5 File Changes (1 file <https://github.com/mikelane/reddit-get/pull/137/files>) - *M* poetry.lock <https://github.com/mikelane/reddit-get/pull/137/files#diff-f53a023eedfa3fbf2925ec7dc76eecdc954ea94b7e47065393dbad519613dc89> (14) Patch Links: - https://github.com/mikelane/reddit-get/pull/137.patch - https://github.com/mikelane/reddit-get/pull/137.diff — Reply to this email directly, view it on GitHub <#137>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABR5SYIPAJDRHLWLSVEXFOLWTCOD5ANCNFSM6AAAAAAT7Y6MSE> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>