build(deps-dev): update tox requirement from 4.48.1 to 4.49.0

[dependabot]

Updates the requirements on tox to permit the latest version.

Release notes

Sourced from tox's releases.

v4.49.0

What's Changed

• ✨ feat(config): add {factor:label} substitution for TOML by @​gaborbernat in tox-dev/tox#3865
• 🐛 fix(legacy): initialize config_format and output_file for --showconfig by @​rares985 in tox-dev/tox#3867

New Contributors

• @​rares985 made their first contribution in tox-dev/tox#3867

Full Changelog: tox-dev/tox@4.48.1...4.49.0

Changelog

Sourced from tox's changelog.

Features - 4.49.0

• Add {factor:label} substitution for TOML configs -- factor groups in product matrices and env_base factors can now be labeled with single-key dicts (e.g., {ecosystem = ["oci", "python"]}), enabling {factor:ecosystem} in any string value (descriptions, commands, etc.) to resolve to the active factor. Plain lists automatically get positional labels ({factor:0}, {factor:1}, ...) - by :user:gaborbernat. (:issue:3860) (:issue:3860)

Bug fixes - 4.49.0

• Fix --showconfig and --help-ini legacy flags raising AttributeError after config format options were added
  • by :user:rares985 (:issue:3866)

---

v4.48.1 (2026-03-06)

---

Bug fixes - 4.48.1

• Command-type configuration values like list_dependencies_command can now be referenced in TOML using the structured {replace = "ref"} syntax. The reference automatically extracts the command's argument list for compatibility with TOML's list[list[str]] structure - by :user:gaborbernat. (:issue:3830)

Improved documentation - 4.48.1

• Replace archived 31z4/tox Docker image recommendation with instructions for building your own image using the official Python base image and uv - by :user:rahuldevikar. (:issue:3855)

---

v4.48.0 (2026-03-05)

---

Features - 4.48.0

• Add --format flag (ini, json, toml) and -o/--output-file to the config command for machine-readable output with native types. JSON and TOML use the same key structure as tox.toml (env.<name> for environments, tox for core) and get syntax-highlighted on stdout - by :user:gaborbernat. (:issue:3854)

Improved documentation - 4.48.0

• Add fail_fast to the configuration reference documentation - by :user:rahuldevikar. (:issue:578)

---

v4.47.3 (2026-03-04)

---

... (truncated)

Commits

• 6c452bb release 4.49.0
• 1c59d54 🐛 fix(legacy): initialize config_format and output_file for --showconfig (#3867)
• 2382601 ✨ feat(config): add {factor:label} substitution for TOML (#3865)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)