build(deps): bump tox from 4.61.4 to 4.62.0 in /.github/tox

[dependabot]

Bumps tox from 4.61.4 to 4.62.0.

Release notes

Sourced from tox's releases.

v4.62.0

What's Changed

• 🐛 fix(type): pass the latest ty and close Any gaps by @​gaborbernat in tox-dev/tox#4075
• 🐛 fix(config): honor an empty TOX_FACTOR override by @​gaborbernat in tox-dev/tox#4074

Full Changelog: tox-dev/tox@4.61.5...4.62.0

v4.61.5

What's Changed

• chore(type): narrow execute_async cwd for pyrefly 1.3 by @​yuefdev in tox-dev/tox#4069
• docs: fix the parameter list on Loader.build by @​hxperl in tox-dev/tox#4070
• fix(config): reject boolean TOML range bounds by @​yuefdev in tox-dev/tox#4066
• fix(config): accept empty set_env lists by @​yuefdev in tox-dev/tox#4065
• fix: correct coverage startup environment variable by @​yuefdev in tox-dev/tox#4067
• fix(config): let empty factor fallbacks override TOML group defaults by @​glaziermag in tox-dev/tox#4072

New Contributors

• @​yuefdev made their first contribution in tox-dev/tox#4069
• @​hxperl made their first contribution in tox-dev/tox#4070
• @​glaziermag made their first contribution in tox-dev/tox#4072

Full Changelog: tox-dev/tox@4.61.4...4.61.5

Changelog

Sourced from tox's changelog.

Features - 4.62.0

• Plugins can read a configuration value that may be unset through ConfigSet.get_optional, which verifies the value against its declared type and returns None when it is not set - by :user:gaborbernat. (:issue:4075)

Bug fixes - 4.62.0

• Setting TOX_FACTOR_<label> to an empty value now resolves {factor:<label>} to an empty string instead of being ignored - by :user:gaborbernat. (:issue:4073)

Contributor-facing changes - 4.62.0

• Contributors running the type checks get a clean pass again with the latest ty release, and the checks now cover more: configuration values are read through the type-verified accessors instead of as Any, and every method that overrides a parent is marked with @override - by :user:gaborbernat. (:issue:4075)

---

v4.61.5 (2026-09-17)

---

Bug fixes - 4.61.5

• An empty set_env list in TOML no longer fails to load; like an empty table, it clears inherited variables - by :user:yuefdev. (:issue:4065)
• A TOML factor range now rejects true or false as start or stop instead of reading them as 1 and 0 - by :user:yuefdev. (:issue:4066)
• Preserve an explicitly empty {factor:label:} fallback instead of using the declared factor group default. (:issue:4072)

Improved documentation - 4.61.5

• Loader.build documented a future parameter it no longer takes and left factory undocumented, so the plugin API reference listed a parameter that does not exist - by :user:hxperl. (:issue:4070)

Contributor-facing changes - 4.61.5

• Restore COVERAGE_PROCESS_START in the test environments; a mangled key had left it unset since the move to tox.toml - by :user:yuefdev. (:issue:4067)

---

v4.61.4 (2026-09-09)

---

Commits

• 99f4421 release 4.62.0
• 176c68f 🐛 fix(config): honor an empty TOX_FACTOR override (#4074)
• e521d6e 🐛 fix(type): pass the latest ty and close Any gaps (#4075)
• 40a5d2b release 4.61.5
• c504e48 fix(config): let empty factor fallbacks override TOML group defaults (#4072)
• a5a7ce6 fix: correct coverage startup environment variable (#4067)
• 3632978 fix(config): accept empty set_env lists (#4065)
• b429bcc fix(config): reject boolean TOML range bounds (#4066)
• 0975be8 [pre-commit.ci] pre-commit autoupdate (#4068)
• 7b5068b docs: fix the parameter list on Loader.build (#4070)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)