build(deps): update tox requirement from >=4.11 to >=4.67.2 - #809

Sourced from tox's releases.

v4.67.2

Packaging

• Releases now run on the shared tox-dev/github-workflows pipeline, with a locked release toolchain and generated GitHub Release notes (#4202) by @​gaborbernat.

🐍 PyPI release

📜 Full Changelog

Sourced from tox's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

.. _release-4-67-4:

---

4.67.4 (2026-10-28)

---

.. _release-4-67-4-fixed:

Fixed

• A dependency group entry that refers to the project's own extra with an environment marker, such as demo[dev]; python_version < "3.10", now keeps that marker on the extra's requirements instead of installing them on every interpreter (:pr:4211) by :user:ericdelorefice and :user:gaborbernat.

.. _release-4-67-3:

---

4.67.3 (2026-10-28)

---

.. _release-4-67-3-fixed:

Fixed

• An open-ended factor range whose explicit bound sits outside the supported CPython window no longer expands to nothing. An INI env_list such as py3{16-} used to fail with ValueError: py3{}, and a TOML range dict expanded to an empty axis, dropping that dimension from the matrix (:pr:4176) by :user:HyperionBurn and :user:gaborbernat.
• A TOML replace = "glob" table now substitutes its pattern and default, matching the INI {glob:PATTERN:DEFAULT} form, so pattern = "{env_name}/*.whl" matches files instead of a literal {env_name} directory (:pr:4180) by :user:ag3ntsc4rn and :user:gaborbernat. (:issue:4178)
• --force-dep now matches dependency names after :PEP:503 normalization, so --force-dep typing-extensions==4.9.0 replaces Typing_Extensions==4.12.2 in deps instead of passing both pins to pip, and replaces a Typing_Extensions requirement from the package metadata, where tox used to drop the forced pin (:pr:4181) by :user:ag3ntsc4rn and :user:gaborbernat. (:issue:4179)
• {glob:PATTERN:DEFAULT} with a single-letter pattern and an absolute default, such as {glob:z:/fallback}, no longer expands to an empty string on POSIX: tox now looks for a Windows drive letter in the pattern only on Windows (:pr:4183) by :user:JingHao-Leon and :user:gaborbernat. (:issue:4182)
• A TOML { replace = "env" } table in set_env whose default ends in a backslash now resolves to the variable or the default, instead of the literal {env:...} text (:pr:4185) by :user:JingHao-Leon and

... (truncated)

• afdaa00 release 4.67.2
• 4a24b6a 📦 build(release): note the shared release pipeline (#4202)
• 2aedb3d 👷 ci(release): run releases on shared github-workflows (#4193)
• d7ea3f5 [pre-commit.ci] pre-commit autoupdate (#4186)
• 7988418 🔧 chore: remove Chronographer config (#4177)
• 894b71e 👷 ci(release): require changelog entries (#4175)
• 129a377 release 4.67.1
• 21d01be fix(config): resolve factor labels per env_base (#4174)
• 7a77f76 🐛 fix(pylock): use default-groups when no dependency group is selected (#4173)
• 59d3c99 fix(config): keep exit-code prefixes on TOML command references (#4172)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)