base icon indicating copy to clipboard operation
base copied to clipboard

Published 20 hours ago • verified publisher icon containerbase

test(deps): update dependency poetry to v2 (main)

Open renovate[bot] opened this issue 10 months ago • 1 comments

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
poetry (changelog) 1.8.5 -> 2.1.2 age adoption passing confidence

Release Notes

python-poetry/poetry (poetry)

v2.1.2

Compare Source

Changed
  • Improve performance of locking dependencies (#​10275).
Fixed
  • Fix an issue where markers were not locked correctly (#​10240).
  • Fix an issue where the result of poetry lock was not deterministic (#​10276).
  • Fix an issue where poetry env activate returned the wrong command for tcsh (#​10243).
  • Fix an issue where poetry env activate returned the wrong command for pwsh on Linux (#​10256).
Docs
  • Update basic usage section to reflect new default layout (#​10203).
poetry-core (2.1.2)
  • Improve performance of marker operations (#​851).
  • Fix an issue where incorrect markers were calculated when removing parts covered by the project's Python constraint (#​841, #​846).
  • Fix an issue where extra markers were not simplified (#​842, #​845, #​847).
  • Fix an issue where the intersection and union of markers was not deterministic (#​843).
  • Fix an issue where the intersection of python_version markers was not recognized as empty (#​849).
  • Fix an issue where python_version markers were not simplified (#​848, #​851).
  • Fix an issue where Python constraints on a package were converted into invalid markers (#​853).

v2.1.1

Compare Source

Fixed
  • Fix an issue where poetry env use python does not choose the Python from the PATH (#​10187).
poetry-core (2.1.1)
  • Fix an issue where simplifying a python_version marker resulted in an invalid marker (#​838).

v2.1.0

Compare Source

Added
Changed
Fixed
  • Fix an issue where global options were not handled correctly when positioned after command options (#​10021, #​10067, #​10128).
  • Fix an issue where building a dependency from source failed because of a conflict between build-system dependencies that were not required for the target environment (#​10048).
  • Fix an issue where poetry init was not able to find a package on PyPI while adding dependencies interactively (#​10055).
  • Fix an issue where the @latest descriptor was incorrectly passed to the core requirement parser (#​10069).
  • Fix an issue where Boolean environment variables set to True (in contrast to true) were interpreted as false (#​10080).
  • Fix an issue where poetry env activate reported a misleading error message (#​10087).
  • Fix an issue where adding an optional dependency with poetry add --optional would not correctly update the lock file (#​10076).
  • Fix an issue where pip was not installed/updated before other dependencies resulting in a race condition (#​10102).
  • Fix an issue where Poetry freezes when multiple threads attempt to unlock the keyring simultaneously (#​10062).
  • Fix an issue where markers with extras were not locked correctly (#​10119).
  • Fix an issue where self-referential extras were not resolved correctly (#​10106).
  • Fix an issue where Poetry could not be run from a zipapp (#​10074).
  • Fix an issue where installation failed with a permission error when using the system environment as a user without write access to system site packages (#​9014).
  • Fix an issue where a version of a dependency that is not compatible with the project's python constraint was locked. (#​10141).
  • Fix an issue where Poetry wrongly reported that the current project's supported Python range is not compatible with some of the required packages Python requirement (#​10157).
  • Fix an issue where the requested extras of a dependency were ignored if the same dependency (with same extras) was specified in multiple groups (#​10158).
Docs
  • Sort commands by name in the CLI reference (#​10035).
  • Add missing documentation for env commands (#​10027).
  • Clarify that the name and version fields are always required if the project section is specified (#​10033).
  • Add a note about restarting the shell for tab completion changes to take effect (#​10070).
  • Fix the example for project.gui-scripts #​10121.
  • Explain how to include files as scripts in the project configuration (#​9572, #​10133).
  • Add additional information on specifying required python versions (#​10104).
poetry-core (2.1.0)
  • Fix an issue where inclusive ordering with post releases was inconsistent with PEP 440 (#​379).
  • Fix an issue where invalid URI tokens in PEP 508 requirement strings were silently discarded (#​817).
  • Fix an issue where wrong markers were calculated when removing parts covered by the project's python constraint (#​824).
  • Fix an issue where optional dependencies that are not part of an extra were included in the wheel metadata (#​830).
  • Fix an issue where the __pycache__ directory and *.pyc files were included in sdists and wheels (#​835).

v2.0.1

Compare Source

Added
  • Add support for poetry search in legacy sources (#​9949).
  • Add a message in the poetry source show output when PyPI is implicitly enabled (#​9974).
Changed
  • Improve performance for merging markers from overrides at the end of dependency resolution (#​10018).
Fixed
  • Fix an issue where poetry sync did not remove packages that were not requested (#​9946).
  • Fix an issue where poetry check failed even though there were just warnings and add a --strict option to fail on warnings (#​9983).
  • Fix an issue where poetry update, poetry add and poetry remove with --only uninstalled packages from other groups (#​10014).
  • Fix an issue where poetry update, poetry add and poetry remove uninstalled all extra packages (#​10016).
  • Fix an issue where poetry self update did not recognize Poetry's own environment (#​9995).
  • Fix an issue where read-only system site-packages were not considered when loading an environment with system site-packages (#​9942).
  • Fix an issue where an error message in poetry install started with Warning: instead of Error: (#​9945).
  • Fix an issue where Command.set_poetry, which is used by plugins, was removed (#​9981).
  • Fix an issue where the help text of poetry build --clean showed a malformed short option instead of the description (#​9994).
Docs
  • Add a FAQ entry for the migration from Poetry-specific fields to the project section (#​9996).
  • Fix examples for project.readme and project.urls (#​9948).
  • Add a warning that package sources are a Poetry-specific feature that is not included in core metadata (#​9935).
  • Replace poetry install --sync with poetry sync in the section about synchronizing dependencies (#​9944).
  • Replace poetry shell with poetry env activate in the basic usage section (#​9963).
  • Mention that project.name is always required when the project section is used (#​9989).
  • Fix the constraint of poetry-plugin-export in the section about poetry export (#​9954).
poetry-core (2.0.1)
  • Replace the deprecated core metadata field Home-page with Project-URL: Homepage (#​807).
  • Fix an issue where includes from tool.poetry.packages without a specified format were not initialized with the default value resulting in a KeyError (#​805).
  • Fix an issue where some project.urls entries were not processed correctly resulting in a KeyError (#​807).
  • Fix an issue where dynamic project.dependencies via tool.poetry.dependencies were ignored if project.optional-dependencies were defined (#​811).

v2.0.0

Compare Source

Added
  • Add support for the project section in the pyproject.toml file according to PEP 621 (#​9135, #​9917).
  • Add support for defining Poetry plugins that are required by the project and automatically installed if not present (#​9547).
  • Lock resulting markers and groups and add a installer.re-resolve option (default: true) to allow installation without re-resolving (#​9427).
  • Add a --local-version option to poetry build (#​9064).
  • Add a --clean option to poetry build (#​9067).
  • Add FIPS support for poetry publish (#​9101).
  • Add the option to use poetry new interactively and configure more fields (#​9101).
  • Add a config option installer.only-binary to enforce the use of binary distribution formats (#​9150).
  • Add backend support for legacy repository search (#​9132).
  • Add support to resume downloads from connection resets (#​9422).
  • Add the option to define a constraint for the required Poetry version to manage the project (#​9547).
  • Add an --all-groups option to poetry install (#​9744).
  • Add an poetry env activate command as replacement of poetry shell (#​9763).
  • Add a --markers option to poetry add to add a dependency with markers (#​9814).
  • Add a --migrate option to poetry config to migrate outdated configs (#​9830).
  • Add a --project option to search the pyproject.toml file in another directory without switching the directory (#​9831).
  • Add support for shortened hashes to define git dependencies (#​9748).
  • Add partial support for conflicting extras (#​9553).
  • Add a poetry sync command as replacement of poetry install --sync (#​9801).
Changed
  • Change the default behavior of poetry lock to --no-update and introduce a --regenerate option for the old default behavior (#​9327).
  • Remove the dependency on poetry-plugin-export so that poetry export is not included per default (#​5980).
  • Outsource poetry shell into poetry-plugin-shell (#​9763).
  • Change the interface of poetry add --optional to require an extra the optional dependency is added to (#​9135).
  • Actually switch the directory when using --directory/-C (#​9831).
  • Drop support for Python 3.8 (#​9692).
  • Rename experimental.system-git-client to experimental.system-git (#​9787, #​9795).
  • Replace virtualenvs.prefer-active-python by the inverse setting virtualenvs.use-poetry-python and prefer the active Python by default (#​9786).
  • Deprecate several fields in the tool.poetry section in favor of the respective fields in the project section in the pyproject.toml file (#​9135).
  • Deprecate poetry install --sync in favor of poetry sync (#​9801).
  • Upgrade the warning if the current project cannot be installed to an error (#​9333).
  • Remove special handling for platformdirs 2.0 macOS config directory (#​8916).
  • Tweak PEP 517 builds (#​9094).
  • Use Poetry instead of pip to manage dependencies in isolated build environments (#​9168, #​9227).
  • Trust empty Requires-Dist with modern metadata (#​9078).
  • Do PEP 517 builds instead of parsing setup.py to determine dependencies (#​9099).
  • Drop support for reading lock files prior version 1.0 (created with Poetry prior 1.1) (#​9345).
  • Default to >= instead of ^ for the Python requirement when initializing a new project (#​9558).
  • Limit build-system to the current major version of poetry-core when initializing a new project (#​9812).
  • Remove pip-based installation, i.e. installer.modern-installation = false (#​9392).
  • Remove virtualenvs.options.no-setuptools config option and never include setuptools per default (#​9331).
  • Rename exceptions to have an Error suffix (#​9705).
  • Remove deprecated CLI options and methods and revoke the deprecation of --dev (#​9732).
  • Ignore installed packages during dependency resolution (#​9851).
  • Improve the error message on upload failure (#​9701).
  • Improve the error message if the current project cannot be installed to include another root cause (#​9651).
  • Improve the output of poetry show <package> (#​9750).
  • Improve the error message for build errors (#​9870).
  • Improve the error message when trying to remove a package from a project without any dependencies (#​9918).
  • Drop the direct dependency on crashtest (#​9108).
  • Require keyring>=23.3.1 (#​9167).
  • Require build>=1.2.1 (#​9283).
  • Require dulwich>=0.22.6 (#​9748).
Fixed
  • Fix an issue where git dependencies with extras could only be cloned if a branch was specified explicitly (#​7028).
  • Fix an issue where poetry env remove failed if virtualenvs.in-project was set to true (#​9118).
  • Fix an issue where locking packages with a digit at the end of the name and non-standard sdist names failed (#​9189).
  • Fix an issue where credentials where not passed when trying to download an URL dependency (#​9202).
  • Fix an issue where using uncommon group names with poetry add resulted in a broken pyproject.toml (#​9277).
  • Fix an issue where an inconsistent entry regarding the patch version of Python was kept in envs.toml (#​9286).
  • Fix an issue where relative paths were not resolved properly when using poetry build --directory (#​9433).
  • Fix an issue where unrequested extras were not uninstalled when running poetry install without an existing lock file (#​9345).
  • Fix an issue where the poetry-check pre-commit hook did not trigger if only poetry.lock has changed (#​9504).
  • Fix an issue where files (rather than directories) could not be added as single page source (#​9166).
  • Fix an issue where invalid constraints were generated when adding a package with a local version specifier (#​9603).
  • Fix several encoding warnings (#​8893).
  • Fix an issue where virtualenvs.prefer-active-python was not respected (#​9278).
  • Fix an issue where the line endings of the lock file were changed (#​9468).
  • Fix an issue where installing multiple dependencies from the same git repository failed sporadically due to a race condition (#​9658).
  • Fix an issue where installing multiple dependencies from forked monorepos failed sporadically due to a race condition (#​9723).
  • Fix an issue where an extra package was not installed if it is required by multiple extras (#​9700).
  • Fix an issue where a direct_url.json with vcs URLs not compliant with PEP 610 was written (#​9007).
  • Fix an issue where other files than wheels were recognized as wheels (#​9770).
  • Fix an issue where installer.max-workers was ignored for the implicit PyPI source (#​9815).
  • Fix an issue where local settings (from poetry.toml) were ignored for the implicit PyPI source (#​9816).
  • Fix an issue where different dulwich versions resulted in different hashes for a git dependency from a tag (#​9849).
  • Fix an issue where installing a yanked package with no dependencies failed with an IndexError (#​9505).
  • Fix an issue where a package could not be added from a source that required an empty password (#​9850).
  • Fix an issue where setting allow-prereleases = false still allowed pre-releases if no other solution was found (#​9798).
  • Fix an issue where the wrong environment was used for checking if an installed package is from system site packages (#​9861).
  • Fix an issue where build errors from builds to retrieve metadata information were hidden (#​9870).
  • Fix an issue where poetry check falsely reported that an invalid source "pypi" is referenced in dependencies (#​9475).
  • Fix an issue where poetry install --sync tried to uninstall system site packages if the virtual environment was created with virtualenvs.options.system-site-packages = true (#​9863).
  • Fix an issue where HTTP streaming requests were not closed properly when not completely consumed (#​9899).
Docs
  • Add information about getting test coverage in the contribution guide (#​9726).
  • Mention pre-commit-update as an alternative to pre-commit autoupdate (#​9716).
  • Improve the explanation of exclude and include (#​9734).
  • Add information about compatible release requirements, i.e. ~= (#​9783).
  • Add documentation for using a build script to build extension modules (#​9864).
poetry-core (2.0.0)
  • Add support for non PEP440 compliant version in the platform_release marker (#​722).
  • Add support for string comparisons with in / not in in generic constraints (#​722).
  • Add support for script files that are generated by a build script (#​710).
  • Add support for SOURCE_DATE_EPOCH when building packages (#​766, #​781).
  • Create METADATA files with version 2.3 instead of 2.2 (#​707).
  • Remove support for x in version constraints (#​770).
  • Remove support for scripts with extras (#​708).
  • Remove deprecated features and interfaces (#​702, #​769).
  • Deprecate tool.poetry.dev-dependencies in favor of tool.poetry.group.dev.dependencies (#​754).
  • Fix an issue where the platlib directory of the wrong Python was used (#​726).
  • Fix an issue where building a wheel in a nested output directory results in an error (#​762).
  • Fix an issue where + was not allowed in git URL paths (#​765).
  • Fix an issue where the temporary directory was not cleaned up on error (#​775).
  • Fix an issue where the regular expression for author names was too restrictive (#​517).
  • Fix an issue where basic auth http(s) credentials could not be parsed (#​791).

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • [ ] If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] avatar Jan 05 '25 14:01 renovate[bot]

needs test updates

https://github.com/containerbase/base/actions/runs/12710660920/job/35432717311#step:7:428

@rarkins poetry v2 should work in general but we should add more detection to renovate to not automatically update to a v2 lockfile

Hi, I stumbled on this PR + comment while trying to fix a blocker on some of my repos. Basically, we are in the opposite scenario where we are trying to enforce everyone (developers, CI/CD, and renovate) to fully migrate to poetry v2 and use a v2 lock file. Right now, renovate is changing our lock file back to v1 which causes stuff to break.

Just to avoid spending time on unnecessary workarounds - once this PR is merged, will renovate be able to detect from somewhere (maybe the comment at the top of poetry.lock This file is automatically @generated by Poetry 2.0.1) and know to continue using v2 lock files when creating new PRs?

dekim24 avatar Apr 01 '25 04:04 dekim24

No, and wrong repo

rarkins avatar May 04 '25 16:05 rarkins

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate[bot] avatar Aug 12 '25 15:08 renovate[bot]