build(deps): bump poetry from 1.4.0 to 1.7.0 in /.github/workflows

[dependabot[bot]]

Bumps poetry from 1.4.0 to 1.7.0.

Release notes

Sourced from poetry's releases.

1.7.0

Added

• Add official support for Python 3.12 (#7803, #8544).
• Print a future warning that poetry-plugin-export will not be installed by default anymore (#8562).
• Add poetry-install pre-commit hook (#8327).
• Add --next-phase option to poetry version (#8089).
• Print a warning when overwriting files from another package at installation (#8386).
• Print a warning if the current project cannot be installed (#8369).
• Report more details on build backend exceptions (#8464).

Changed

• Set Poetry as user-agent for all HTTP requests (#8394).
• Do not install setuptools per default in Python 3.12 (#7803).
• Do not install wheel per default (#7803).
• Remove setuptools and wheel when running poetry install --sync if they are not required by the project (#8600).
• Improve error message about PEP-517 support (#8463).
• Improve keyring handling (#8227).
• Read the description field when extracting metadata from setup.py files (#8545).

Fixed

• Fix an issue where dependencies of inactive extras were locked and installed (#8399).
• Fix an issue where build requirements were not installed due to a race condition in the artifact cache (#8517).
• Fix an issue where packages included in the system site packages were installed even though virtualenvs.options.system-site-packages was set (#8359).
• Fix an issue where git dependencies' submodules with relative URLs were handled incorrectly (#8020).
• Fix an issue where a failed installation of build dependencies was not noticed directly (#8479).
• Fix an issue where poetry shell did not work completely with nushell (#8478).
• Fix an issue where a confusing error messages was displayed when running poetry config pypi-token.pypi without a value (#8502).
• Fix an issue where a cryptic error message is printed if there is no metadata entry in the lockfile (#8523).
• Fix an issue with the encoding with special characters in the virtualenv's path (#8565).
• Fix an issue where the connection pool size was not adjusted to the number of workers (#8559).

Docs

• Improve the wording regarding a project's supported Python range (#8423).
• Make pipx the preferred (first mentioned) installation method (#8090).
• Add a warning about poetry self on Windows (#8090).
• Fix example for poetry add with a git dependency (#8438).
• Add information about auto-included files in wheels and sdist (#8555).
• Fix documentation of the POETRY_REPOSITORIES_ variables docs (#8492).
• Add CITATION.cff file (#8510).

poetry-core (1.8.1)

• Add support for creating packages dynamically in the build script (#629).
• Improve marker logic for extra markers (#636).
• Update list of supported licenses (#635, #646).
• Fix an issue where projects with extension modules were not installed in editable mode (#633).

... (truncated)

Changelog

Sourced from poetry's changelog.

[1.7.0] - 2023-11-03

Added

• Add official support for Python 3.12 (#7803, #8544).
• Print a future warning that poetry-plugin-export will not be installed by default anymore (#8562).
• Add poetry-install pre-commit hook (#8327).
• Add --next-phase option to poetry version (#8089).
• Print a warning when overwriting files from another package at installation (#8386).
• Print a warning if the current project cannot be installed (#8369).
• Report more details on build backend exceptions (#8464).

Changed

• Set Poetry as user-agent for all HTTP requests (#8394).
• Do not install setuptools per default in Python 3.12 (#7803).
• Do not install wheel per default (#7803).
• Remove setuptools and wheel when running poetry install --sync if they are not required by the project (#8600).
• Improve error message about PEP-517 support (#8463).
• Improve keyring handling (#8227).
• Read the description field when extracting metadata from setup.py files (#8545).

Fixed

• Fix an issue where dependencies of inactive extras were locked and installed (#8399).
• Fix an issue where build requirements were not installed due to a race condition in the artifact cache (#8517).
• Fix an issue where packages included in the system site packages were installed even though virtualenvs.options.system-site-packages was set (#8359).
• Fix an issue where git dependencies' submodules with relative URLs were handled incorrectly (#8020).
• Fix an issue where a failed installation of build dependencies was not noticed directly (#8479).
• Fix an issue where poetry shell did not work completely with nushell (#8478).
• Fix an issue where a confusing error messages was displayed when running poetry config pypi-token.pypi without a value (#8502).
• Fix an issue where a cryptic error message is printed if there is no metadata entry in the lockfile (#8523).
• Fix an issue with the encoding with special characters in the virtualenv's path (#8565).
• Fix an issue where the connection pool size was not adjusted to the number of workers (#8559).

Docs

• Improve the wording regarding a project's supported Python range (#8423).
• Make pipx the preferred (first mentioned) installation method (#8090).
• Add a warning about poetry self on Windows (#8090).
• Fix example for poetry add with a git dependency (#8438).
• Add information about auto-included files in wheels and sdist (#8555).
• Fix documentation of the POETRY_REPOSITORIES_ variables docs (#8492).
• Add CITATION.cff file (#8510).

poetry-core (1.8.1)

• Add support for creating packages dynamically in the build script (#629).
• Improve marker logic for extra markers (#636).
• Update list of supported licenses (#635, #646).

... (truncated)

Commits

• 5f08ac1 release: bump version to 1.7.0
• 930ac5a solver: ignore dependencies that are only relevant for inactive extras (#8399)
• abd993c remove special cases for setuptools and wheel (#8600)
• a029b36 chore: update dependencies, fix some lower bounds (#8596)
• bab5ad0 [pre-commit.ci] pre-commit autoupdate (#8595)
• be0c21c chore(deps): bump actions/setup-node from 3 to 4 (#8591)
• 092402d fix race condition to avoid downloading the same artifact in multiple threads...
• 6349005 refactor: let ArtifactCache handle downloading artifacts that are not yet cached
• 333bb78 refactor: extract common code from Executor._download_archive and helpers.dow...
• e12ca03 chore(deps): bump tibdex/github-app-token from 1 to 2 (#8429)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #481.