Bump tox from 4.27.0 to 4.28.4

[dependabot]

Bumps tox from 4.27.0 to 4.28.4.

Release notes

Sourced from tox's releases.

4.28.4

What's Changed

• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/tox#3570
• Pass ssh-agent variables by default by @​daniilgankov in tox-dev/tox#3572

New Contributors

• @​daniilgankov made their first contribution in tox-dev/tox#3572

Full Changelog: tox-dev/tox@4.28.3...4.28.4

4.28.3

What's Changed

• Fix typo on cmd_build filter check expression by @​gaborbernat in tox-dev/tox#3569

Full Changelog: tox-dev/tox@4.28.2...4.28.3

4.28.2

What's Changed

• Don't pass in the filter argument to tar.extractall on old Python versions by @​gaborbernat in tox-dev/tox#3568

Full Changelog: tox-dev/tox@4.28.1...4.28.2

4.28.1

What's Changed

• Fix an issue number typo in changelog by @​hroncok in tox-dev/tox#3563
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/tox#3564
• Only use tarfile.data_filter when it's available by @​gaborbernat in tox-dev/tox#3566

Full Changelog: tox-dev/tox@4.28.0...4.28.1

4.28.0

What's Changed

• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/tox#3548
• [docs] Document how to require a plugin by @​stephenfin in tox-dev/tox#3552
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/tox#3554
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/tox#3558
• Add [testenv] constraints option by @​stephenfin in tox-dev/tox#3556

... (truncated)

Changelog

Sourced from tox's changelog.

v4.28.4 (2025-07-31)

Features - 4.28.4

- Pass ssh-agent variables ``SSH_AGENT_PID`` and ``SSH_AUTH_SOCK`` in ``pass_env`` by default.
  - by :user:`daniilgankov` (:issue:`3572`)
v4.28.3 (2025-07-25)
No significant changes.
v4.28.2 (2025-07-25)
Bugfixes - 4.28.2

• Don't pass in the filter argument to tar.extractall on old Python versions - by :user:gaborbernat. (:issue:3568)

v4.28.1 (2025-07-22)

Bugfixes - 4.28.1

- Use `tarfile.data_filter <https://docs.python.org/3/library/tarfile.html#tarfile.data_filter>`_ with ``extractall``
  only on supported Python versions:

&gt;= 3.11.4
&gt;= 3.10.12 and &lt; 3.11
&gt;= 3.9.17 and &lt; 3.10

by :user:gaborbernat. (:issue:3565)
v4.28.0 (2025-07-20)
Features - 4.28.0

• Added constraints to allow specifying constraints files for all dependencies. (:issue:3550)
• Allow disabling tox plugins via the TOX_DISABLED_EXTERNAL_PLUGINS environment variable - by :user:gaborbernat. (:issue:3468)

Improved Documentation - 4.28.0

- The ``min_version``/``minversion`` config option is deprecated in favor of the ``requires`` option. (:issue:`3553`)

Commits

• 611b751 release 4.28.4
• 9f2db71 Pass ssh-agent variables by default (#3572)
• c28c4b1 [pre-commit.ci] pre-commit autoupdate (#3570)
• 815ca31 release 4.28.3
• 8a59b92 Fix type on expression (#3569)
• ebfaab6 release 4.28.2
• ae930db Don't pass in hte filter argument to tar.extractall on old Python versions (#...
• c836ab2 release 4.28.1
• c343b26 Only use tarfile.data_filter when it's available (#3566)
• 753dd62 [pre-commit.ci] pre-commit autoupdate (#3564)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.