build(deps): bump poetry from 1.4.2 to 1.6.1 in /.github/workflows

[dependabot[bot]]

Bumps poetry from 1.4.2 to 1.6.1.

Release notes

Sourced from poetry's releases.

1.6.1

Fixed

• Update the minimum required version of requests (#8336).

1.6.0

Added

• Add support for repositories that do not provide a supported hash algorithm (#8118).
• Add full support for duplicate dependencies with overlapping markers (#7257).
• Improve performance of poetry lock for certain edge cases (#8256).
• Improve performance of poetry install (#8031).
• poetry check validates that specified readme files do exist (#7444).
• Add a downgrading note when updating to an older version (#8176).
• Add support for vox in the xonsh shell (#8203).
• Add support for pre-commit hooks for projects where the pyproject.toml file is located in a subfolder (#8204).
• Add support for the git+http:// scheme (#6619).

Changed

• Drop support for Python 3.7 (#7674).
• Move poetry lock --check to poetry check --lock and deprecate the former (#8015).
• Change future warning that PyPI will only be disabled automatically if there are no primary sources (#8151).

Fixed

• Fix an issue where build-system.requires were not respected for projects with build scripts (#7975).
• Fix an issue where the encoding was not handled correctly when calling a subprocess (#8060).
• Fix an issue where poetry show --top-level did not show top level dependencies with extras (#8076).
• Fix an issue where poetry init handled projects with src layout incorrectly (#8218).
• Fix an issue where Poetry wrote .pth files with the wrong encoding (#8041).
• Fix an issue where poetry install did not respect the source if the same version of a package has been locked from different sources (#8304).

Docs

• Document official Poetry badge (#8066).
• Update configuration folder path for macOS (#8062).
• Add a warning about pip ignoring lock files (#8117).
• Clarify the use of the virtualenvs.in-project setting. (#8126).
• Change pre-commit YAML style to be consistent with pre-commit's own examples (#8146).
• Fix command for listing installed plugins (#8200).
• Mention the nox-poetry package (#8173).
• Add an example with a PyPI source in the pyproject.toml file (#8171).
• Use reference instead of deprecated callable in the scripts example (#8211).

poetry-core (1.7.0)

• Improve performance of marker handling (#609).
• Allow | as a value separator in markers with the operators in and not in (#608).
• Put pretty name (instead of normalized name) in metadata (#620).

... (truncated)

Changelog

Sourced from poetry's changelog.

[1.6.1] - 2023-08-21

Fixed

• Update the minimum required version of requests (#8336).

[1.6.0] - 2023-08-20

Added

• Add support for repositories that do not provide a supported hash algorithm (#8118).
• Add full support for duplicate dependencies with overlapping markers (#7257).
• Improve performance of poetry lock for certain edge cases (#8256).
• Improve performance of poetry install (#8031).
• poetry check validates that specified readme files do exist (#7444).
• Add a downgrading note when updating to an older version (#8176).
• Add support for vox in the xonsh shell (#8203).
• Add support for pre-commit hooks for projects where the pyproject.toml file is located in a subfolder (#8204).
• Add support for the git+http:// scheme (#6619).

Changed

• Drop support for Python 3.7 (#7674).
• Move poetry lock --check to poetry check --lock and deprecate the former (#8015).
• Change future warning that PyPI will only be disabled automatically if there are no primary sources (#8151).

Fixed

• Fix an issue where build-system.requires were not respected for projects with build scripts (#7975).
• Fix an issue where the encoding was not handled correctly when calling a subprocess (#8060).
• Fix an issue where poetry show --top-level did not show top level dependencies with extras (#8076).
• Fix an issue where poetry init handled projects with src layout incorrectly (#8218).
• Fix an issue where Poetry wrote .pth files with the wrong encoding (#8041).
• Fix an issue where poetry install did not respect the source if the same version of a package has been locked from different sources (#8304).

Docs

• Document official Poetry badge (#8066).
• Update configuration folder path for macOS (#8062).
• Add a warning about pip ignoring lock files (#8117).
• Clarify the use of the virtualenvs.in-project setting. (#8126).
• Change pre-commit YAML style to be consistent with pre-commit's own examples (#8146).
• Fix command for listing installed plugins (#8200).
• Mention the nox-poetry package (#8173).
• Add an example with a PyPI source in the pyproject.toml file (#8171).
• Use reference instead of deprecated callable in the scripts example (#8211).

poetry-core (1.7.0)

... (truncated)

Commits

• 719831a release: bump version to 1.6.1
• a29a53c Use requests^2.26 (#8336)
• 0384170 release: bump version to 1.6.0
• 146dad5 chore: update dependencies (#8332)
• eb74d62 installer: respect source if the same version of a package has been locked fr...
• 36332d2 solver: invert heuristics for choosing the next dependency to resolve so that...
• 5fe3a91 fix: missing git+http:// scheme support (#6619)
• c9292de [pre-commit.ci] pre-commit autoupdate (#8314)
• 2b16b2f [pre-commit.ci] pre-commit autoupdate (#8281)
• 88096ac Misc fixes (#8253)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @steven-murray.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

One of your CI runs failed on this pull request, so Dependabot won't merge it.

Dependabot will still automatically merge this pull request if you amend it and your tests pass.

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.