Sourced from tox's releases.

4.27.0

What's Changed

• Feat: include free_threaded flag in result-json by @​robsdedude in tox-dev/tox#3534
• Add security policy by @​jugmac00 in tox-dev/tox#3535
• Fix dependency-group name normalization by @​robsdedude in tox-dev/tox#3540
• Log environment variables sorted by key while redacting values of unsafe ones by @​ssbarnea in tox-dev/tox#3543

Full Changelog: https://github.com/tox-dev/tox/compare/4.26.0...4.27.0

Sourced from tox's changelog.

v4.27.0 (2025-06-17)

Features - 4.27.0

- Add ``free_threaded`` flag to to ``"python"`` entries in json output of ``--result-json``. (:issue:`3534`)
Bugfixes - 4.27.0

• Fix dependency-group name normalization. (:issue:3539)
• Improves logging of environment variables by sorting them by key and redacting the values for the ones that are likely to contain secrets. (:issue:3542)

• 3eb6376 release 4.27.0
• 5077e20 Improve logging of environment variables (#3543)
• e243a3a [pre-commit.ci] pre-commit autoupdate (#3546)
• c5dccb8 Fix dependency-group name normalization (#3540)
• 7ed917b [pre-commit.ci] pre-commit autoupdate (#3541)
• 3ad56f0 [pre-commit.ci] pre-commit autoupdate (#3538)
• 9918775 [pre-commit.ci] pre-commit autoupdate (#3536)
• b244a59 Add security policy (#3535)
• c04567a Feat: include free_threaded flag in result-json (#3534)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)