Bump pipdeptree from 2.35.2 to 4.2.2

[dependabot]

Bumps pipdeptree from 2.35.2 to 4.2.2.

Release notes

Sourced from pipdeptree's releases.

4.2.2

What's Changed

• 🐛 fix(index): adopt nab-project by @​gaborbernat in tox-dev/pipdeptree#683
• 🔧 chore: batch dependency updates weekly on Tuesday by @​gaborbernat in tox-dev/pipdeptree#685
• 👷 ci: derive the wheel toolchain from rust-toolchain.toml by @​gaborbernat in tox-dev/pipdeptree#689
• 👷 ci(release): report a missing release token by @​gaborbernat in tox-dev/pipdeptree#692

Full Changelog: tox-dev/pipdeptree@4.2.1...4.2.2

4.2.1

What's Changed

• 👷 ci(dist): build the wheels beside each other by @​gaborbernat in tox-dev/pipdeptree#648
• 🐛 fix(env): accept git-built interpreter versions by @​gaborbernat in tox-dev/pipdeptree#657
• ci: run Cargo and Rust toolchain Dependabot updates weekly by @​kemzeb in tox-dev/pipdeptree#660
• 📄 docs: publish llms.txt from the docs build by @​gaborbernat in tox-dev/pipdeptree#668
• 🐛 fix(metadata): warn only on real archive search paths by @​gaborbernat in tox-dev/pipdeptree#671
• 👷 ci: retry the Windows Graphviz install by @​gaborbernat in tox-dev/pipdeptree#673

Full Changelog: tox-dev/pipdeptree@4.2.0...4.2.1

4.2.0

What's Changed

• 🐛 fix(rust): derive version tests from VERSION file by @​gaborbernat in tox-dev/pipdeptree#632
• docs: limit supported versions to latest major and minor release by @​kemzeb in tox-dev/pipdeptree#636
• 🐛 ci(dist): build Linux aarch64 wheels by @​gaborbernat in tox-dev/pipdeptree#640
• 🐛 fix(build): allow free-threaded source builds by @​gaborbernat in tox-dev/pipdeptree#643
• 👷 ci(dist): publish free-threaded 3.15t wheels by @​gaborbernat in tox-dev/pipdeptree#644
• 👷 ci(dist): pre-install Rust toolchain for aarch64 wheels by @​gaborbernat in tox-dev/pipdeptree#646
• 👷 ci(release): derive the version from git tags by @​gaborbernat in tox-dev/pipdeptree#647

Full Changelog: tox-dev/pipdeptree@4.1.0...4.2.0

4.1.0

What's Changed

• 📦 pkg: ship a free-threaded wheel by @​gaborbernat in tox-dev/pipdeptree#628
• 👷 ci: run tests against Python 3.15 by @​gaborbernat in tox-dev/pipdeptree#626

Full Changelog: tox-dev/pipdeptree@4.0.0...4.1.0

... (truncated)

Changelog

Sourced from pipdeptree's changelog.

Bug fixes - 4.2.2

• Run under an interpreter built from a git checkout. Such a build reports its version with a trailing plus (3.13.5+), which PEP 440 reads as an empty local segment and rejects, so every run stopped with found a `+` indicating the start of a local component in a version. The trailing plus is now dropped, and a marker value that still fails to parse names the interpreter versions it came from. (:issue:656)
• Stop warning about the console-script launcher on Windows. Python puts the running pipdeptree.exe on sys.path, and every file on the search path counted as an archive, so each run reported unsupported archives on the search path. Only files whose suffix is .egg, .pyz, .pyzw, .whl or .zip are now reported. (:issue:669)
• Replace the removed nab-python dependency with nab-project. (:issue:681)

Packaging updates - 4.2.2

• Build the wheels for each interpreter beside each other in CI, rather than one after another in a single job, and let the macOS builds share one Cargo target directory. The wheel matrix used to hold a pull request for 17 minutes. (:issue:648)

---

4.2.0 (2026-07-31)

---

Features - 4.2.0

• Publish cp315t wheels, so a free-threaded 3.15 installs a wheel instead of compiling the Rust extension. (:issue:644)

Bug fixes - 4.2.0

• Publish Linux aarch64 wheels. 4.1.0 shipped none, so pip and uv fell back to the source distribution on ARM64 hosts, where building the Rust extension needs a local cargo and C toolchain. (:issue:640)
• Build from source on a free-threaded interpreter. The package asked for the limited API unconditionally and meson-python refuses to pair it with a free-threaded CPython, so the source build stopped before it started. (:issue:643)

Packaging updates - 4.2.0

• Take the released version from the git tag rather than from a file in the tree, so a release can no longer ship artifacts labeled with the previous version. 4.1.1 and 4.1.2 were tagged that way and reached no index. (:issue:647)

Releases up to 4.1.0 are recorded on the GitHub releases page <https://github.com/tox-dev/pipdeptree/releases>_.

Commits

• d39803f release 4.2.2
• bb671c8 👷 ci(release): report a missing release token (#692)
• d0421c3 build(deps): bump taiki-e/install-action from 2.86.1 to 2.86.3 in the github-...
• e51a0cc [pre-commit.ci] pre-commit autoupdate (#690)
• 67aea4d 👷 ci: derive the wheel toolchain from rust-toolchain.toml (#689)
• 89d7361 build(deps): bump rust-toolchain from 1.97 to 1.98 in the rust-toolchain grou...
• b313166 build(deps): bump toml from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0 in the cargo...
• 2faf801 build(deps): bump taiki-e/install-action from 2.85.13 to 2.86.1 in the github...
• e72c775 🔧 chore: batch dependency updates weekly on Tuesday (#685)
• 9c32c5d build(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#684)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)