search

magmax / python-inquirer

A collection of common interactive command line user interfaces, based on Inquirer.js (https://github.com/SBoudrias/Inquirer.js/)
MIT License
982 stars 98 forks source link

build(deps): bump poetry from 1.7.1 to 1.8.3 in /.github/workflows #568

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 2 months ago

Bumps poetry from 1.7.1 to 1.8.3.

Release notes

Sourced from poetry's releases.

1.8.3

Added

  • Add support for untagged CPython builds with versions ending with a + (#9207).

Changed

  • Require pkginfo>=1.10 to ensure support for packages with metadata version 2.3 (#9130).
  • Improve locking on FIPS systems (#9152).

Fixed

  • Fix an issue where unrecognized package metadata versions silently resulted in empty dependencies (#9203, #9226).
  • Fix an issue where trailing slashes in git URLs where not handled correctly (#9205).
  • Fix an issue where poetry self commands printed a warning that the current project cannot be installed (#9302).
  • Fix an issue where poetry install sporadically failed with a KeyError due to a race condition (#9335).

Docs

  • Fix incorrect information about poetry shell (#9060).
  • Add a git subdirectory example to poetry add (#9080).
  • Mention interactive credential configuration (#9074).
  • Add notes for optional advanced installation steps (#9098).
  • Add reference to configuration credentials in documentation of poetry publish (#9110).
  • Improve documentation for configuring credentials via environment variables (#9121).
  • Remove misleading wording around virtual environments (#9213).
  • Remove outdated advice regarding seeding keyring backends (#9164).
  • Add a pyproject.toml example for a dependency with multiple extras (#9138).
  • Clarify help of poetry add (#9230).
  • Add a note how to configure credentials for TestPyPI for poetry publish (#9255).
  • Fix information about the --readme option in poetry new (#9260).
  • Clarify what is special about the Python constraint in dependencies (#9256).
  • Update how to uninstall plugins via pipx (#9320).

1.8.2

Fixed

  • Harden lazy-wheel error handling if the index server is behaving badly in an unexpected way (#9051).
  • Improve lazy-wheel error handling if the index server does not handle HTTP range requests correctly (#9082).
  • Improve lazy-wheel error handling if the index server pretends to support HTTP range requests but does not respect them (#9084).
  • Improve lazy-wheel to allow redirects for HEAD requests (#9087).
  • Improve debug logging for lazy-wheel errors (#9059).
  • Fix an issue where the hash of a metadata file could not be calculated correctly due to an encoding issue (#9048).
  • Fix an issue where poetry add failed in non-package mode if no project name was set (#9046).
  • Fix an issue where a hint to non-package mode was not compliant with the final name of the setting (#9073).

1.8.1

Fixed

  • Update the minimum required version of packaging (#9031).

... (truncated)

Changelog

Sourced from poetry's changelog.

[1.8.3] - 2024-05-03

Added

  • Add support for untagged CPython builds with versions ending with a + (#9207).

Changed

  • Require pkginfo>=1.10 to ensure support for packages with metadata version 2.3 (#9130).
  • Improve locking on FIPS systems (#9152).

Fixed

  • Fix an issue where unrecognized package metadata versions silently resulted in empty dependencies (#9203, #9226).
  • Fix an issue where trailing slashes in git URLs where not handled correctly (#9205).
  • Fix an issue where poetry self commands printed a warning that the current project cannot be installed (#9302).
  • Fix an issue where poetry install sporadically failed with a KeyError due to a race condition (#9335).

Docs

  • Fix incorrect information about poetry shell (#9060).
  • Add a git subdirectory example to poetry add (#9080).
  • Mention interactive credential configuration (#9074).
  • Add notes for optional advanced installation steps (#9098).
  • Add reference to configuration credentials in documentation of poetry publish (#9110).
  • Improve documentation for configuring credentials via environment variables (#9121).
  • Remove misleading wording around virtual environments (#9213).
  • Remove outdated advice regarding seeding keyring backends (#9213).
  • Add a pyproject.toml example for a dependency with multiple extras (#9138).
  • Clarify help of poetry add (#9230).
  • Add a note how to configure credentials for TestPyPI for poetry publish (#9255).
  • Fix information about the --readme option in poetry new (#9260).
  • Clarify what is special about the Python constraint in dependencies (#9256).
  • Update how to uninstall plugins via pipx (#9320).

[1.8.2] - 2024-03-02

Fixed

  • Harden lazy-wheel error handling if the index server is behaving badly in an unexpected way (#9051).
  • Improve lazy-wheel error handling if the index server does not handle HTTP range requests correctly (#9082).
  • Improve lazy-wheel error handling if the index server pretends to support HTTP range requests but does not respect them (#9084).
  • Improve lazy-wheel to allow redirects for HEAD requests (#9087).
  • Improve debug logging for lazy-wheel errors (#9059).
  • Fix an issue where the hash of a metadata file could not be calculated correctly due to an encoding issue (#9049).
  • Fix an issue where poetry add failed in non-package mode if no project name was set (#9046).
  • Fix an issue where a hint to non-package mode was not compliant with the final name of the setting (#9073).

... (truncated)

Commits


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Cube707 commented 1 month ago

@dependabot ignore this minor version

dependabot[bot] commented 1 month ago

OK, I won't notify you about version 1.8.x again, unless you re-open this PR.