Bump pipx from 1.17.5 to 1.17.7

[dependabot]

Bumps pipx from 1.17.5 to 1.17.7.

Release notes

Sourced from pipx's releases.

1.17.7

What's Changed

• fix(run): preserve cache key argument boundaries by @​januththedev in pypa/pipx#2053

New Contributors

• @​januththedev made their first contribution in pypa/pipx#2053

Full Changelog: pypa/pipx@1.17.6...1.17.7

1.17.6

What's Changed

• docs: fix argument order in the combined inject example by @​agammann in pypa/pipx#2044
• docs: fix Git extras install example for current pip by @​saitakarcesme in pypa/pipx#2047
• ci(pre-release): drop unused contents:write permission by @​gaborbernat in pypa/pipx#2050
• 🐛 fix(manifest): make locked tools install on sync by @​gaborbernat in pypa/pipx#2052

New Contributors

• @​agammann made their first contribution in pypa/pipx#2044
• @​saitakarcesme made their first contribution in pypa/pipx#2047

Full Changelog: pypa/pipx@1.17.5...1.17.6

Changelog

Sourced from pipx's changelog.

1.17.7 <https://github.com/pypa/pipx/tree/1.17.7>_ - 2026-09-28

Bugfixes

• Prevent pipx run from sharing cached environments across different requirement lists or argument boundaries. This changes cache keys; run pipx cache purge to remove old entries. (:issue:2053)

1.17.6 <https://github.com/pypa/pipx/tree/1.17.6>_ - 2026-09-22

Bugfixes

• Record each tool's dependency group as its lock's default so pipx manifest sync installs what pipx manifest lock wrote. Run pipx manifest lock again to fix existing locks. (:issue:2049)

Improved Documentation

• Fix the argument order in the combined inject command example. (:issue:2044)
• Use direct URL requirements for the Git install example with extras. (:issue:2045)

Commits

• 8036ea3 Release 1.17.7
• 538bded fix(run): preserve cache key argument boundaries (#2053)
• 260d8a9 Release 1.17.6
• 111e9e9 🐛 fix(manifest): make locked tools install on sync (#2052)
• 48f4761 ci(pre-release): drop unused contents:write permission (#2050)
• ee6811d build(deps): bump the actions group with 2 updates (#2048)
• 3a7643e docs: fix Git extras install example for current pip (#2047)
• e641bac [pre-commit.ci] pre-commit autoupdate (#2046)
• 9151116 docs: fix argument order in the combined inject example (#2044)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)