Skip to content

Bump poetry from 1.3.2 to 1.4.1

HIFIS Bot requested to merge dependabot-pip-poetry-1.4.1 into main

Bumps poetry from 1.3.2 to 1.4.1.

Release notes

Sourced from poetry's releases.

1.4.1

Fixed

  • Fix an issue where poetry install did not respect the requirements for building editable dependencies (#7579).
  • Fix an issue where poetry init crashed due to bad input when adding packages interactively (#7569).
  • Fix an issue where poetry install ignored the subdirectory argument of git dependencies (#7580).
  • Fix an issue where installing packages with no-binary could result in a false hash mismatch (#7594).
  • Fix an issue where the hash of sdists was neither validated nor written to the direct_url.json during installation (#7594).
  • Fix an issue where poetry install --sync attempted to remove itself (#7626).
  • Fix an issue where wheels with non-normalized dist-info directory names could not be installed (#7671).
  • Fix an issue where poetry install --compile compiled with optimization level 1 (#7666).

Docs

  • Clarify the behavior of the --extras option (#7563).
  • Expand the FAQ on reasons for slow dependency resolution (#7620).

1.4.0

Added

  • Add a modern installer (installer.modern-installation) for faster installation of packages and independence from pip (#6205).
  • Add support for Private :: trove classifiers (#7271).
  • Add the version of poetry in the @generated comment at the beginning of the lock file (#7339).
  • Add support for virtualenvs.prefer-active-python when running poetry new and poetry init (#7100).

Changed

  • Deprecate the old installer, i.e. setting experimental.new-installer to false (#7358).
  • Remove unused platform field from cached package info and bump the cache version (#7304).
  • Extra dependencies of the root project are now sorted in the lock file (#7375).
  • Remove upper boundary for importlib-metadata dependency (#7434).
  • Validate path dependencies during use instead of during construction (#6844).
  • Remove the deprecated repository modules (#7468).

Fixed

  • Fix an issue where an unconditional dependency of an extra was not installed in specific environments (#7175).
  • Fix an issue where a pre-release of a dependency was chosen even if a stable release fulfilled the constraint (#7225, #7236).
  • Fix an issue where HTTP redirects were not handled correctly during publishing (#7160).
  • Fix an issue where poetry check did not handle the -C, --directory option correctly (#7241).
  • Fix an issue where the subdirectory information of a git dependency was not written to the lock file (#7367).
  • Fix an issue where the wrong Python version was selected when creating an virtual environment (#7221).
  • Fix an issue where packages that should be kept were uninstalled when calling poetry install --sync (#7389).
  • Fix an issue where an incorrect value was set for sys.argv[0] when running installed scripts (#6737).
  • Fix an issue where hashes in direct_url.json files were not written according to the specification (#7475).
  • Fix an issue where poetry commands failed due to special characters in the path of the project or virtual environment (#7471).
  • Fix an issue where poetry crashed with a JSONDecodeError when running a Python script that produced certain warnings (#6665).

Docs

... (truncated)

Changelog

Sourced from poetry's changelog.

[1.4.1] - 2023-03-19

Fixed

  • Fix an issue where poetry install did not respect the requirements for building editable dependencies (#7579).
  • Fix an issue where poetry init crashed due to bad input when adding packages interactively (#7569).
  • Fix an issue where poetry install ignored the subdirectory argument of git dependencies (#7580).
  • Fix an issue where installing packages with no-binary could result in a false hash mismatch (#7594).
  • Fix an issue where the hash of sdists was neither validated nor written to the direct_url.json during installation (#7594).
  • Fix an issue where poetry install --sync attempted to remove itself (#7626).
  • Fix an issue where wheels with non-normalized dist-info directory names could not be installed (#7671).
  • Fix an issue where poetry install --compile compiled with optimization level 1 (#7666).

Docs

  • Clarify the behavior of the --extras option (#7563).
  • Expand the FAQ on reasons for slow dependency resolution (#7620).

poetry-core (1.5.2)

  • Fix an issue where wheels built on Windows could contain duplicate entries in the RECORD file (#555).

[1.4.0] - 2023-02-27

Added

  • Add a modern installer (installer.modern-installation) for faster installation of packages and independence from pip (#6205).
  • Add support for Private :: trove classifiers (#7271).
  • Add the version of poetry in the @generated comment at the beginning of the lock file (#7339).
  • Add support for virtualenvs.prefer-active-python when running poetry new and poetry init (#7100).

Changed

  • Deprecate the old installer, i.e. setting experimental.new-installer to false (#7358).
  • Remove unused platform field from cached package info and bump the cache version (#7304).
  • Extra dependencies of the root project are now sorted in the lock file (#7375).
  • Remove upper boundary for importlib-metadata dependency (#7434).
  • Validate path dependencies during use instead of during construction (#6844).
  • Remove the deprecated repository modules (#7468).

Fixed

  • Fix an issue where an unconditional dependency of an extra was not installed in specific environments (#7175).
  • Fix an issue where a pre-release of a dependency was chosen even if a stable release fulfilled the constraint (#7225, #7236).
  • Fix an issue where HTTP redirects were not handled correctly during publishing (#7160).
  • Fix an issue where poetry check did not handle the -C, --directory option correctly (#7241).
  • Fix an issue where the subdirectory information of a git dependency was not written to the lock file (#7367).
  • Fix an issue where the wrong Python version was selected when creating an virtual environment (#7221).

... (truncated)

Commits

Dependabot commands
You can trigger Dependabot actions by commenting on this MR
  • @hifis-bot rebase will rebase this MR
  • @hifis-bot recreate will recreate this MR rewriting all the manual changes and resolving conflicts

Merge request reports

A HIFIS Service | Privacy | Imprint | Support | Documentation | Changelog | Status