chore(deps): update dependency poetry to v2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
poetry (changelog)	1.8.4 → 2.3.2

---

Release Notes

python-poetry/poetry (poetry)

v2.3.2

Compare Source

Changed

• Allow dulwich>=1.0 (#​10701).

poetry-core (2.3.1)

• Fix an issue where platform_release could not be parsed on Windows Server (#​911).

v2.3.1

Compare Source

Fixed

• Fix an issue where cached information about each package was always considered outdated (#​10699).

Docs

• Document SHELL_VERBOSITY environment variable (#​10678).

v2.3.0

Compare Source

Added

• Add support for exporting pylock.toml files with poetry-plugin-export (#​10677).
• Add support for specifying build constraints for dependencies (#​10388).
• Add support for publishing artifacts whose version is determined dynamically by the build-backend (#​10644).
• Add support for editable project plugins (#​10661).
• Check requires-poetry before any other validation (#​10593).
• Validate the content of project.readme when running poetry check (#​10604).
• Add the option to clear all caches by making the cache name in poetry cache clear optional (#​10627).
• Automatically update the cache for packages where the locked files differ from cached files (#​10657).
• Suggest to clear the cache if running a command with --no-cache solves an issue (#​10585).
• Propose poetry init when trying poetry new for an existing directory (#​10563).
• Add support for poetry publish --skip-existing for new Nexus OSS versions (#​10603).
• Show Poetry's own Python's path in poetry debug info (#​10588).

Changed

• Drop support for Python 3.9 (#​10634).
• Change the default of installer.re-resolve from true to false (#​10622).
• PEP 735 dependency groups are considered in the lock file hash (#​10621).
• Deprecate poetry.utils._compat.metadata, which is sometimes used in plugins, in favor of importlib.metadata (#​10634).
• Improve managing free-threaded Python versions with poetry python (#​10606).
• Prefer JSON API to HTML API in legacy repositories (#​10672).
• When running poetry init, only add the readme field in the pyproject.toml if the readme file exists (#​10679).
• Raise an error if no hash can be determined for any distribution link of a package (#​10673).
• Require dulwich>=0.25.0 (#​10674).

Fixed

• Fix an issue where poetry remove did not work for PEP 735 dependency groups with include-group items (#​10587).
• Fix an issue where poetry remove caused dangling include-group references in PEP 735 dependency groups (#​10590).
• Fix an issue where poetry add did not work for PEP 735 dependency groups with include-group items (#​10636).
• Fix an issue where PEP 735 dependency groups were not considered in the lock file hash (#​10621).
• Fix an issue where wrong markers were locked for a dependency that was required by several groups with different markers (#​10613).
• Fix an issue where non-deterministic markers were created in a method used by poetry-plugin-export (#​10667).
• Fix an issue where wrong wheels were chosen for installation in free-threaded Python environments if Poetry itself was not installed with free-threaded Python (#​10614).
• Fix an issue where poetry publish used the metadata of the project instead of the metadata of the build artifact (#​10624).
• Fix an issue where poetry env use just used another Python version instead of failing when the requested version was not supported by the project (#​10685).
• Fix an issue where poetry env activate returned the wrong command for dash (#​10696).
• Fix an issue where data-dir and python.installation-dir could not be set (#​10595).
• Fix an issue where Python and pip executables were not correctly detected on Windows (#​10645).
• Fix an issue where invalid template variables in virtualenvs.prompt caused an incomprehensible error message (#​10648).

Docs

• Add a warning about ~/.netrc for Poetry credential configuration (#​10630).
• Clarify that the local configuration takes precedence over the global configuration (#​10676).
• Add an explanation in which cases packages are automatically detected (#​10680).

poetry-core (2.3.0)

• Normalize versions (#​893).
• Fix an issue where unsatisfiable requirements did not raise an error (#​891).
• Fix an issue where the implicit main group did not exist if it was explicitly declared as not having any dependencies (#​892).
• Fix an issue where python_full_version markers with pre-release versions were parsed incorrectly (#​893).

v2.2.1

Compare Source

Fixed

• Fix an issue where poetry self show failed with a message about an invalid output format (#​10560).

Docs

• Remove outdated statements about dependency groups (#​10561).

poetry-core (2.2.1)

• Fix an issue where it was not possible to declare a PEP 735 dependency group as optional (#​888).

v2.2.0

Compare Source

Added

• Add support for nesting dependency groups (#​10166).
• Add support for PEP 735 dependency groups (#​10130).
• Add support for PEP 639 license clarity (#​10413).
• Add a --format option to poetry show to alternatively output json format (#​10487).
• Add official support for Python 3.14 (#​10514).

Changed

• Normalize dependency group names (#​10387).
• Change installer.no-binary and installer.only-binary so that explicit package names will take precedence over :all: (#​10278).
• Improve log output during poetry install when a wheel is built from source (#​10404).
• Improve error message in case a file lock could not be acquired while cloning a git repository (#​10535).
• Require dulwich>=0.24.0 (#​10492).
• Allow virtualenv>=20.33 again (#​10506).
• Allow findpython>=0.7 (#​10510).
• Allow importlib-metadata>=8.7 (#​10511).

Fixed

• Fix an issue where poetry new did not create the project structure in an existing empty directory (#​10431).
• Fix an issue where a dependency that was required for a specific Python version was not installed into an environment of a pre-release Python version (#​10516).

poetry-core (2.2.0)

• Deprecate table values and values that are not valid SPDX expressions for [project.license] (#​870).
• Fix an issue where explicitly included files that are in .gitignore were not included in the distribution (#​874).
• Fix an issue where marker operations could result in invalid markers (#​875).

v2.1.4

Compare Source

Changed

• Require virtualenv<20.33 to work around an issue where Poetry uses the wrong Python version (#​10491).
• Improve the error messages for the validation of the pyproject.toml file (#​10471).

Fixed

• Fix an issue where project plugins were installed even though poetry install was called with --no-plugins (#​10405).
• Fix an issue where dependency resolution failed for self-referential extras with duplicate dependencies (#​10488).

Docs

• Clarify how to include files that were automatically excluded via VCS ignore settings (#​10442).
• Clarify the behavior of poetry add if no version constraint is explicitly specified (#​10445).

v2.1.3

Compare Source

Changed

• Require importlib-metadata<8.7 for Python 3.9 because of a breaking change in importlib-metadata 8.7 (#​10374).

Fixed

• Fix an issue where re-locking failed for incomplete multiple-constraints dependencies with explicit sources (#​10324).
• Fix an issue where the --directory option did not work if a plugin, which accesses the poetry instance during its activation, was installed (#​10352).
• Fix an issue where poetry env activate -v printed additional information to stdout instead of stderr so that the output could not be used as designed (#​10353).
• Fix an issue where the original error was not printed if building a git dependency failed (#​10366).
• Fix an issue where wheels for the wrong platform were installed in rare cases. (#​10361).

poetry-core (2.1.3)

• Fix an issue where the union of specific inverse or partially inverse markers was not simplified (#​858).
• Fix an issue where optional dependencies defined in the project section were treated as non-optional when a source was defined for them in the tool.poetry section (#​857).
• Fix an issue where markers with === were not parsed correctly (#​860).
• Fix an issue where local versions with upper case letters caused an error (#​859).
• Fix an issue where extra markers with a value starting with "in" were not validated correctly (#​862).

v2.1.2

Compare Source

Changed

• Improve performance of locking dependencies (#​10275).

Fixed

• Fix an issue where markers were not locked correctly (#​10240).
• Fix an issue where the result of poetry lock was not deterministic (#​10276).
• Fix an issue where poetry env activate returned the wrong command for tcsh (#​10243).
• Fix an issue where poetry env activate returned the wrong command for pwsh on Linux (#​10256).

Docs

• Update basic usage section to reflect new default layout (#​10203).

poetry-core (2.1.2)

• Improve performance of marker operations (#​851).
• Fix an issue where incorrect markers were calculated when removing parts covered by the project's Python constraint (#​841,
  #​846).
• Fix an issue where extra markers were not simplified (#​842,
  #​845,
  #​847).
• Fix an issue where the intersection and union of markers was not deterministic (#​843).
• Fix an issue where the intersection of python_version markers was not recognized as empty (#​849).
• Fix an issue where python_version markers were not simplified (#​848,
  #​851).
• Fix an issue where Python constraints on a package were converted into invalid markers (#​853).

v2.1.1

Compare Source

Fixed

• Fix an issue where poetry env use python does not choose the Python from the PATH (#​10187).

poetry-core (2.1.1)

• Fix an issue where simplifying a python_version marker resulted in an invalid marker (#​838).

v2.1.0

Compare Source

Added

• Make build command build-system agnostic (#​10059,
  #​10092).
• Add a --config-settings option to poetry build (#​10059).
• Add support for defining config-settings when building dependencies (#​10129).
• Add (experimental) commands to manage Python installations (#​10112).
• Use findpython to find the Python interpreters (#​10097).
• Add a --no-truncate option to poetry show (#​9580).
• Re-add support for passwords with empty usernames (#​10088).
• Add better error messages (#​10053,
  #​10065,
  #​10126,
  #​10127,
  #​10132).

Changed

• poetry new defaults to "src" layout by default (#​10135).
• Improve performance of locking dependencies (#​10111,
  #​10114,
  #​10138,
  #​10146).
• Deprecate adding sources without specifying --priority (#​10134).

Fixed

• Fix an issue where global options were not handled correctly when positioned after command options (#​10021,
  #​10067,
  #​10128).
• Fix an issue where building a dependency from source failed because of a conflict between build-system dependencies that were not required for the target environment (#​10048).
• Fix an issue where poetry init was not able to find a package on PyPI while adding dependencies interactively (#​10055).
• Fix an issue where the @latest descriptor was incorrectly passed to the core requirement parser (#​10069).
• Fix an issue where Boolean environment variables set to True (in contrast to true) were interpreted as false (#​10080).
• Fix an issue where poetry env activate reported a misleading error message (#​10087).
• Fix an issue where adding an optional dependency with poetry add --optional would not correctly update the lock file (#​10076).
• Fix an issue where pip was not installed/updated before other dependencies resulting in a race condition (#​10102).
• Fix an issue where Poetry freezes when multiple threads attempt to unlock the keyring simultaneously (#​10062).
• Fix an issue where markers with extras were not locked correctly (#​10119).
• Fix an issue where self-referential extras were not resolved correctly (#​10106).
• Fix an issue where Poetry could not be run from a zipapp (#​10074).
• Fix an issue where installation failed with a permission error when using the system environment as a user without write access to system site packages (#​9014).
• Fix an issue where a version of a dependency that is not compatible with the project's python constraint was locked. (#​10141).
• Fix an issue where Poetry wrongly reported that the current project's supported Python range is not compatible with some of the required packages Python requirement (#​10157).
• Fix an issue where the requested extras of a dependency were ignored if the same dependency (with same extras) was specified in multiple groups (#​10158).

Docs

• Sort commands by name in the CLI reference (#​10035).
• Add missing documentation for env commands (#​10027).
• Clarify that the name and version fields are always required if the project section is specified (#​10033).
• Add a note about restarting the shell for tab completion changes to take effect (#​10070).
• Fix the example for project.gui-scripts #​10121.
• Explain how to include files as scripts in the project configuration (#​9572,
  #​10133).
• Add additional information on specifying required python versions (#​10104).

poetry-core (2.1.0)

• Fix an issue where inclusive ordering with post releases was inconsistent with PEP 440 (#​379).
• Fix an issue where invalid URI tokens in PEP 508 requirement strings were silently discarded (#​817).
• Fix an issue where wrong markers were calculated when removing parts covered by the project's python constraint (#​824).
• Fix an issue where optional dependencies that are not part of an extra were included in the wheel metadata (#​830).
• Fix an issue where the __pycache__ directory and *.pyc files were included in sdists and wheels (#​835).

v2.0.1

Compare Source

Added

• Add support for poetry search in legacy sources (#​9949).
• Add a message in the poetry source show output when PyPI is implicitly enabled (#​9974).

Changed

• Improve performance for merging markers from overrides at the end of dependency resolution (#​10018).

Fixed

• Fix an issue where poetry sync did not remove packages that were not requested (#​9946).
• Fix an issue where poetry check failed even though there were just warnings and add a --strict option to fail on warnings (#​9983).
• Fix an issue where poetry update, poetry add and poetry remove with --only uninstalled packages from other groups (#​10014).
• Fix an issue where poetry update, poetry add and poetry remove uninstalled all extra packages (#​10016).
• Fix an issue where poetry self update did not recognize Poetry's own environment (#​9995).
• Fix an issue where read-only system site-packages were not considered when loading an environment with system site-packages (#​9942).
• Fix an issue where an error message in poetry install started with Warning: instead of Error: (#​9945).
• Fix an issue where Command.set_poetry, which is used by plugins, was removed (#​9981).
• Fix an issue where the help text of poetry build --clean showed a malformed short option instead of the description (#​9994).

Docs

• Add a FAQ entry for the migration from Poetry-specific fields to the project section (#​9996).
• Fix examples for project.readme and project.urls (#​9948).
• Add a warning that package sources are a Poetry-specific feature that is not included in core metadata (#​9935).
• Replace poetry install --sync with poetry sync in the section about synchronizing dependencies (#​9944).
• Replace poetry shell with poetry env activate in the basic usage section (#​9963).
• Mention that project.name is always required when the project section is used (#​9989).
• Fix the constraint of poetry-plugin-export in the section about poetry export (#​9954).

poetry-core (2.0.1)

• Replace the deprecated core metadata field Home-page with Project-URL: Homepage (#​807).
• Fix an issue where includes from tool.poetry.packages without a specified format were not initialized with the default value resulting in a KeyError (#​805).
• Fix an issue where some project.urls entries were not processed correctly resulting in a KeyError (#​807).
• Fix an issue where dynamic project.dependencies via tool.poetry.dependencies were ignored if project.optional-dependencies were defined (#​811).

v2.0.0

Compare Source

Added

• Add support for the project section in the pyproject.toml file according to PEP 621 (#​9135,
  #​9917).
• Add support for defining Poetry plugins that are required by the project and automatically installed if not present (#​9547).
• Lock resulting markers and groups and add a installer.re-resolve option (default: true) to allow installation without re-resolving (#​9427).
• Add a --local-version option to poetry build (#​9064).
• Add a --clean option to poetry build (#​9067).
• Add FIPS support for poetry publish (#​9101).
• Add the option to use poetry new interactively and configure more fields (#​9101).
• Add a config option installer.only-binary to enforce the use of binary distribution formats (#​9150).
• Add backend support for legacy repository search (#​9132).
• Add support to resume downloads from connection resets (#​9422).
• Add the option to define a constraint for the required Poetry version to manage the project (#​9547).
• Add an --all-groups option to poetry install (#​9744).
• Add an poetry env activate command as replacement of poetry shell (#​9763).
• Add a --markers option to poetry add to add a dependency with markers (#​9814).
• Add a --migrate option to poetry config to migrate outdated configs (#​9830).
• Add a --project option to search the pyproject.toml file in another directory without switching the directory (#​9831).
• Add support for shortened hashes to define git dependencies (#​9748).
• Add partial support for conflicting extras (#​9553).
• Add a poetry sync command as replacement of poetry install --sync (#​9801).

Changed

• Change the default behavior of poetry lock to --no-update and introduce a --regenerate option for the old default behavior (#​9327).
• Remove the dependency on poetry-plugin-export so that poetry export is not included per default (#​5980).
• Outsource poetry shell into poetry-plugin-shell (#​9763).
• Change the interface of poetry add --optional to require an extra the optional dependency is added to (#​9135).
• Actually switch the directory when using --directory/-C (#​9831).
• Drop support for Python 3.8 (#​9692).
• Rename experimental.system-git-client to experimental.system-git (#​9787, #​9795).
• Replace virtualenvs.prefer-active-python by the inverse setting virtualenvs.use-poetry-python and prefer the active Python by default (#​9786).
• Deprecate several fields in the tool.poetry section in favor of the respective fields in the project section in the pyproject.toml file (#​9135).
• Deprecate poetry install --sync in favor of poetry sync (#​9801).
• Upgrade the warning if the current project cannot be installed to an error (#​9333).
• Remove special handling for platformdirs 2.0 macOS config directory (#​8916).
• Tweak PEP 517 builds (#​9094).
• Use Poetry instead of pip to manage dependencies in isolated build environments (#​9168,
  #​9227).
• Trust empty Requires-Dist with modern metadata (#​9078).
• Do PEP 517 builds instead of parsing setup.py to determine dependencies (#​9099).
• Drop support for reading lock files prior version 1.0 (created with Poetry prior 1.1) (#​9345).
• Default to >= instead of ^ for the Python requirement when initializing a new project (#​9558).
• Limit build-system to the current major version of poetry-core when initializing a new project (#​9812).
• Remove pip-based installation, i.e. installer.modern-installation = false (#​9392).
• Remove virtualenvs.options.no-setuptools config option and never include setuptools per default (#​9331).
• Rename exceptions to have an Error suffix (#​9705).
• Remove deprecated CLI options and methods and revoke the deprecation of --dev (#​9732).
• Ignore installed packages during dependency resolution (#​9851).
• Improve the error message on upload failure (#​9701).
• Improve the error message if the current project cannot be installed to include another root cause (#​9651).
• Improve the output of poetry show <package> (#​9750).
• Improve the error message for build errors (#​9870).
• Improve the error message when trying to remove a package from a project without any dependencies (#​9918).
• Drop the direct dependency on crashtest (#​9108).
• Require keyring>=23.3.1 (#​9167).
• Require build>=1.2.1 (#​9283).
• Require dulwich>=0.22.6 (#​9748).

Fixed

• Fix an issue where git dependencies with extras could only be cloned if a branch was specified explicitly (#​7028).
• Fix an issue where poetry env remove failed if virtualenvs.in-project was set to true (#​9118).
• Fix an issue where locking packages with a digit at the end of the name and non-standard sdist names failed (#​9189).
• Fix an issue where credentials where not passed when trying to download an URL dependency (#​9202).
• Fix an issue where using uncommon group names with poetry add resulted in a broken pyproject.toml (#​9277).
• Fix an issue where an inconsistent entry regarding the patch version of Python was kept in envs.toml (#​9286).
• Fix an issue where relative paths were not resolved properly when using poetry build --directory (#​9433).
• Fix an issue where unrequested extras were not uninstalled when running poetry install without an existing lock file (#​9345).
• Fix an issue where the poetry-check pre-commit hook did not trigger if only poetry.lock has changed (#​9504).
• Fix an issue where files (rather than directories) could not be added as single page source (#​9166).
• Fix an issue where invalid constraints were generated when adding a package with a local version specifier (#​9603).
• Fix several encoding warnings (#​8893).
• Fix an issue where virtualenvs.prefer-active-python was not respected (#​9278).
• Fix an issue where the line endings of the lock file were changed (#​9468).
• Fix an issue where installing multiple dependencies from the same git repository failed sporadically due to a race condition (#​9658).
• Fix an issue where installing multiple dependencies from forked monorepos failed sporadically due to a race condition (#​9723).
• Fix an issue where an extra package was not installed if it is required by multiple extras (#​9700).
• Fix an issue where a direct_url.json with vcs URLs not compliant with PEP 610 was written (#​9007).
• Fix an issue where other files than wheels were recognized as wheels (#​9770).
• Fix an issue where installer.max-workers was ignored for the implicit PyPI source (#​9815).
• Fix an issue where local settings (from poetry.toml) were ignored for the implicit PyPI source (#​9816).
• Fix an issue where different dulwich versions resulted in different hashes for a git dependency from a tag (#​9849).
• Fix an issue where installing a yanked package with no dependencies failed with an IndexError (#​9505).
• Fix an issue where a package could not be added from a source that required an empty password (#​9850).
• Fix an issue where setting allow-prereleases = false still allowed pre-releases if no other solution was found (#​9798).
• Fix an issue where the wrong environment was used for checking if an installed package is from system site packages (#​9861).
• Fix an issue where build errors from builds to retrieve metadata information were hidden (#​9870).
• Fix an issue where poetry check falsely reported that an invalid source "pypi" is referenced in dependencies (#​9475).
• Fix an issue where poetry install --sync tried to uninstall system site packages if the virtual environment was created with virtualenvs.options.system-site-packages = true (#​9863).
• Fix an issue where HTTP streaming requests were not closed properly when not completely consumed (#​9899).

Docs

• Add information about getting test coverage in the contribution guide (#​9726).
• Mention pre-commit-update as an alternative to pre-commit autoupdate (#​9716).
• Improve the explanation of exclude and include (#​9734).
• Add information about compatible release requirements, i.e. ~= (#​9783).
• Add documentation for using a build script to build extension modules (#​9864).

poetry-core (2.0.0)

• Add support for non PEP440 compliant version in the platform_release marker (#​722).
• Add support for string comparisons with in / not in in generic constraints (#​722).
• Add support for script files that are generated by a build script (#​710).
• Add support for SOURCE_DATE_EPOCH when building packages (#​766,
  #​781).
• Create METADATA files with version 2.3 instead of 2.2 (#​707).
• Remove support for x in version constraints (#​770).
• Remove support for scripts with extras (#​708).
• Remove deprecated features and interfaces (#​702,
  #​769).
• Deprecate tool.poetry.dev-dependencies in favor of tool.poetry.group.dev.dependencies (#​754).
• Fix an issue where the platlib directory of the wrong Python was used (#​726).
• Fix an issue where building a wheel in a nested output directory results in an error (#​762).
• Fix an issue where + was not allowed in git URL paths (#​765).
• Fix an issue where the temporary directory was not cleaned up on error (#​775).
• Fix an issue where the regular expression for author names was too restrictive (#​517).
• Fix an issue where basic auth http(s) credentials could not be parsed (#​791).

v1.8.5

Compare Source

Changed

• Require pkginfo>=1.12 to fix an issue with an unknown metadata version 2.4 (#​9888).
• Do not fail if the unknown metadata version is only a minor version update (#​9888).

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: BUILD-8449

[sonarqubecloud]

🤖 Pull Request summary

Updates Poetry version in project configuration.

• Upgrades Poetry from version 1.8.4 to 2.1.3 in mise.toml

Review focus: This is a major version bump - verify compatibility with existing pyproject.toml configuration and ensure all team members can handle Poetry 2.x syntax changes.

💬 Please send your feedback

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud