test(deps): update dependency poetry to v2 (main)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
poetry (changelog)	1.8.5 -> 2.1.2

---

Release Notes

python-poetry/poetry (poetry)

v2.1.2

Compare Source

Changed

• Improve performance of locking dependencies (#​10275).

Fixed

• Fix an issue where markers were not locked correctly (#​10240).
• Fix an issue where the result of poetry lock was not deterministic (#​10276).
• Fix an issue where poetry env activate returned the wrong command for tcsh (#​10243).
• Fix an issue where poetry env activate returned the wrong command for pwsh on Linux (#​10256).

Docs

• Update basic usage section to reflect new default layout (#​10203).

poetry-core (2.1.2)

• Improve performance of marker operations (#​851).
• Fix an issue where incorrect markers were calculated when removing parts covered by the project's Python constraint (#​841,
  #​846).
• Fix an issue where extra markers were not simplified (#​842,
  #​845,
  #​847).
• Fix an issue where the intersection and union of markers was not deterministic (#​843).
• Fix an issue where the intersection of python_version markers was not recognized as empty (#​849).
• Fix an issue where python_version markers were not simplified (#​848,
  #​851).
• Fix an issue where Python constraints on a package were converted into invalid markers (#​853).

v2.1.1

Compare Source

Fixed

• Fix an issue where poetry env use python does not choose the Python from the PATH (#​10187).

poetry-core (2.1.1)

• Fix an issue where simplifying a python_version marker resulted in an invalid marker (#​838).

v2.1.0

Compare Source

Added

• Make build command build-system agnostic (#​10059,
  #​10092).
• Add a --config-settings option to poetry build (#​10059).
• Add support for defining config-settings when building dependencies (#​10129).
• Add (experimental) commands to manage Python installations (#​10112).
• Use findpython to find the Python interpreters (#​10097).
• Add a --no-truncate option to poetry show (#​9580).
• Re-add support for passwords with empty usernames (#​10088).
• Add better error messages (#​10053,
  #​10065,
  #​10126,
  #​10127,
  #​10132).

Changed

• poetry new defaults to "src" layout by default (#​10135).
• Improve performance of locking dependencies (#​10111,
  #​10114,
  #​10138,
  #​10146).
• Deprecate adding sources without specifying --priority (#​10134).

Fixed

• Fix an issue where global options were not handled correctly when positioned after command options (#​10021,
  #​10067,
  #​10128).
• Fix an issue where building a dependency from source failed because of a conflict between build-system dependencies that were not required for the target environment (#​10048).
• Fix an issue where poetry init was not able to find a package on PyPI while adding dependencies interactively (#​10055).
• Fix an issue where the @latest descriptor was incorrectly passed to the core requirement parser (#​10069).
• Fix an issue where Boolean environment variables set to True (in contrast to true) were interpreted as false (#​10080).
• Fix an issue where poetry env activate reported a misleading error message (#​10087).
• Fix an issue where adding an optional dependency with poetry add --optional would not correctly update the lock file (#​10076).
• Fix an issue where pip was not installed/updated before other dependencies resulting in a race condition (#​10102).
• Fix an issue where Poetry freezes when multiple threads attempt to unlock the keyring simultaneously (#​10062).
• Fix an issue where markers with extras were not locked correctly (#​10119).
• Fix an issue where self-referential extras were not resolved correctly (#​10106).
• Fix an issue where Poetry could not be run from a zipapp (#​10074).
• Fix an issue where installation failed with a permission error when using the system environment as a user without write access to system site packages (#​9014).
• Fix an issue where a version of a dependency that is not compatible with the project's python constraint was locked. (#​10141).
• Fix an issue where Poetry wrongly reported that the current project's supported Python range is not compatible with some of the required packages Python requirement (#​10157).
• Fix an issue where the requested extras of a dependency were ignored if the same dependency (with same extras) was specified in multiple groups (#​10158).

Docs

• Sort commands by name in the CLI reference (#​10035).
• Add missing documentation for env commands (#​10027).
• Clarify that the name and version fields are always required if the project section is specified (#​10033).
• Add a note about restarting the shell for tab completion changes to take effect (#​10070).
• Fix the example for project.gui-scripts #​10121.
• Explain how to include files as scripts in the project configuration (#​9572,
  #​10133).
• Add additional information on specifying required python versions (#​10104).

poetry-core (2.1.0)

• Fix an issue where inclusive ordering with post releases was inconsistent with PEP 440 (#​379).
• Fix an issue where invalid URI tokens in PEP 508 requirement strings were silently discarded (#​817).
• Fix an issue where wrong markers were calculated when removing parts covered by the project's python constraint (#​824).
• Fix an issue where optional dependencies that are not part of an extra were included in the wheel metadata (#​830).
• Fix an issue where the __pycache__ directory and *.pyc files were included in sdists and wheels (#​835).

v2.0.1

Compare Source

Added

• Add support for poetry search in legacy sources (#​9949).
• Add a message in the poetry source show output when PyPI is implicitly enabled (#​9974).

Changed

• Improve performance for merging markers from overrides at the end of dependency resolution (#​10018).

Fixed

• Fix an issue where poetry sync did not remove packages that were not requested (#​9946).
• Fix an issue where poetry check failed even though there were just warnings and add a --strict option to fail on warnings (#​9983).
• Fix an issue where poetry update, poetry add and poetry remove with --only uninstalled packages from other groups (#​10014).
• Fix an issue where poetry update, poetry add and poetry remove uninstalled all extra packages (#​10016).
• Fix an issue where poetry self update did not recognize Poetry's own environment (#​9995).
• Fix an issue where read-only system site-packages were not considered when loading an environment with system site-packages (#​9942).
• Fix an issue where an error message in poetry install started with Warning: instead of Error: (#​9945).
• Fix an issue where Command.set_poetry, which is used by plugins, was removed (#​9981).
• Fix an issue where the help text of poetry build --clean showed a malformed short option instead of the description (#​9994).

Docs

• Add a FAQ entry for the migration from Poetry-specific fields to the project section (#​9996).
• Fix examples for project.readme and project.urls (#​9948).
• Add a warning that package sources are a Poetry-specific feature that is not included in core metadata (#​9935).
• Replace poetry install --sync with poetry sync in the section about synchronizing dependencies (#​9944).
• Replace poetry shell with poetry env activate in the basic usage section (#​9963).
• Mention that project.name is always required when the project section is used (#​9989).
• Fix the constraint of poetry-plugin-export in the section about poetry export (#​9954).

poetry-core (2.0.1)

• Replace the deprecated core metadata field Home-page with Project-URL: Homepage (#​807).
• Fix an issue where includes from tool.poetry.packages without a specified format were not initialized with the default value resulting in a KeyError (#​805).
• Fix an issue where some project.urls entries were not processed correctly resulting in a KeyError (#​807).
• Fix an issue where dynamic project.dependencies via tool.poetry.dependencies were ignored if project.optional-dependencies were defined (#​811).

v2.0.0

Compare Source

Added

• Add support for the project section in the pyproject.toml file according to PEP 621 (#​9135,
  #​9917).
• Add support for defining Poetry plugins that are required by the project and automatically installed if not present (#​9547).
• Lock resulting markers and groups and add a installer.re-resolve option (default: true) to allow installation without re-resolving (#​9427).
• Add a --local-version option to poetry build (#​9064).
• Add a --clean option to poetry build (#​9067).
• Add FIPS support for poetry publish (#​9101).
• Add the option to use poetry new interactively and configure more fields (#​9101).
• Add a config option installer.only-binary to enforce the use of binary distribution formats (#​9150).
• Add backend support for legacy repository search (#​9132).
• Add support to resume downloads from connection resets (#​9422).
• Add the option to define a constraint for the required Poetry version to manage the project (#​9547).
• Add an --all-groups option to poetry install (#​9744).
• Add an poetry env activate command as replacement of poetry shell (#​9763).
• Add a --markers option to poetry add to add a dependency with markers (#​9814).
• Add a --migrate option to poetry config to migrate outdated configs (#​9830).
• Add a --project option to search the pyproject.toml file in another directory without switching the directory (#​9831).
• Add support for shortened hashes to define git dependencies (#​9748).
• Add partial support for conflicting extras (#​9553).
• Add a poetry sync command as replacement of poetry install --sync (#​9801).

Changed

• Change the default behavior of poetry lock to --no-update and introduce a --regenerate option for the old default behavior (#​9327).
• Remove the dependency on poetry-plugin-export so that poetry export is not included per default (#​5980).
• Outsource poetry shell into poetry-plugin-shell (#​9763).
• Change the interface of poetry add --optional to require an extra the optional dependency is added to (#​9135).
• Actually switch the directory when using --directory/-C (#​9831).
• Drop support for Python 3.8 (#​9692).
• Rename experimental.system-git-client to experimental.system-git (#​9787, #​9795).
• Replace virtualenvs.prefer-active-python by the inverse setting virtualenvs.use-poetry-python and prefer the active Python by default (#​9786).
• Deprecate several fields in the tool.poetry section in favor of the respective fields in the project section in the pyproject.toml file (#​9135).
• Deprecate poetry install --sync in favor of poetry sync (#​9801).
• Upgrade the warning if the current project cannot be installed to an error (#​9333).
• Remove special handling for platformdirs 2.0 macOS config directory (#​8916).
• Tweak PEP 517 builds (#​9094).
• Use Poetry instead of pip to manage dependencies in isolated build environments (#​9168,
  #​9227).
• Trust empty Requires-Dist with modern metadata (#​9078).
• Do PEP 517 builds instead of parsing setup.py to determine dependencies (#​9099).
• Drop support for reading lock files prior version 1.0 (created with Poetry prior 1.1) (#​9345).
• Default to >= instead of ^ for the Python requirement when initializing a new project (#​9558).
• Limit build-system to the current major version of poetry-core when initializing a new project (#​9812).
• Remove pip-based installation, i.e. installer.modern-installation = false (#​9392).
• Remove virtualenvs.options.no-setuptools config option and never include setuptools per default (#​9331).
• Rename exceptions to have an Error suffix (#​9705).
• Remove deprecated CLI options and methods and revoke the deprecation of --dev (#​9732).
• Ignore installed packages during dependency resolution (#​9851).
• Improve the error message on upload failure (#​9701).
• Improve the error message if the current project cannot be installed to include another root cause (#​9651).
• Improve the output of poetry show <package> (#​9750).
• Improve the error message for build errors (#​9870).
• Improve the error message when trying to remove a package from a project without any dependencies (#​9918).
• Drop the direct dependency on crashtest (#​9108).
• Require keyring>=23.3.1 (#​9167).
• Require build>=1.2.1 (#​9283).
• Require dulwich>=0.22.6 (#​9748).

Fixed

• Fix an issue where git dependencies with extras could only be cloned if a branch was specified explicitly (#​7028).
• Fix an issue where poetry env remove failed if virtualenvs.in-project was set to true (#​9118).
• Fix an issue where locking packages with a digit at the end of the name and non-standard sdist names failed (#​9189).
• Fix an issue where credentials where not passed when trying to download an URL dependency (#​9202).
• Fix an issue where using uncommon group names with poetry add resulted in a broken pyproject.toml (#​9277).
• Fix an issue where an inconsistent entry regarding the patch version of Python was kept in envs.toml (#​9286).
• Fix an issue where relative paths were not resolved properly when using poetry build --directory (#​9433).
• Fix an issue where unrequested extras were not uninstalled when running poetry install without an existing lock file (#​9345).
• Fix an issue where the poetry-check pre-commit hook did not trigger if only poetry.lock has changed (#​9504).
• Fix an issue where files (rather than directories) could not be added as single page source (#​9166).
• Fix an issue where invalid constraints were generated when adding a package with a local version specifier (#​9603).
• Fix several encoding warnings (#​8893).
• Fix an issue where virtualenvs.prefer-active-python was not respected (#​9278).
• Fix an issue where the line endings of the lock file were changed (#​9468).
• Fix an issue where installing multiple dependencies from the same git repository failed sporadically due to a race condition (#​9658).
• Fix an issue where installing multiple dependencies from forked monorepos failed sporadically due to a race condition (#​9723).
• Fix an issue where an extra package was not installed if it is required by multiple extras (#​9700).
• Fix an issue where a direct_url.json with vcs URLs not compliant with PEP 610 was written (#​9007).
• Fix an issue where other files than wheels were recognized as wheels (#​9770).
• Fix an issue where installer.max-workers was ignored for the implicit PyPI source (#​9815).
• Fix an issue where local settings (from poetry.toml) were ignored for the implicit PyPI source (#​9816).
• Fix an issue where different dulwich versions resulted in different hashes for a git dependency from a tag (#​9849).
• Fix an issue where installing a yanked package with no dependencies failed with an IndexError (#​9505).
• Fix an issue where a package could not be added from a source that required an empty password (#​9850).
• Fix an issue where setting allow-prereleases = false still allowed pre-releases if no other solution was found (#​9798).
• Fix an issue where the wrong environment was used for checking if an installed package is from system site packages (#​9861).
• Fix an issue where build errors from builds to retrieve metadata information were hidden (#​9870).
• Fix an issue where poetry check falsely reported that an invalid source "pypi" is referenced in dependencies (#​9475).
• Fix an issue where poetry install --sync tried to uninstall system site packages if the virtual environment was created with virtualenvs.options.system-site-packages = true (#​9863).
• Fix an issue where HTTP streaming requests were not closed properly when not completely consumed (#​9899).

Docs

• Add information about getting test coverage in the contribution guide (#​9726).
• Mention pre-commit-update as an alternative to pre-commit autoupdate (#​9716).
• Improve the explanation of exclude and include (#​9734).
• Add information about compatible release requirements, i.e. ~= (#​9783).
• Add documentation for using a build script to build extension modules (#​9864).

poetry-core (2.0.0)

• Add support for non PEP440 compliant version in the platform_release marker (#​722).
• Add support for string comparisons with in / not in in generic constraints (#​722).
• Add support for script files that are generated by a build script (#​710).
• Add support for SOURCE_DATE_EPOCH when building packages (#​766,
  #​781).
• Create METADATA files with version 2.3 instead of 2.2 (#​707).
• Remove support for x in version constraints (#​770).
• Remove support for scripts with extras (#​708).
• Remove deprecated features and interfaces (#​702,
  #​769).
• Deprecate tool.poetry.dev-dependencies in favor of tool.poetry.group.dev.dependencies (#​754).
• Fix an issue where the platlib directory of the wrong Python was used (#​726).
• Fix an issue where building a wheel in a nested output directory results in an error (#​762).
• Fix an issue where + was not allowed in git URL paths (#​765).
• Fix an issue where the temporary directory was not cleaned up on error (#​775).
• Fix an issue where the regular expression for author names was too restrictive (#​517).
• Fix an issue where basic auth http(s) credentials could not be parsed (#​791).

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[rarkins]

renovatebot/renovate#33509

[viceice]

needs test updates

https://github.com/containerbase/base/actions/runs/12710660920/job/35432717311#step:7:428

@rarkins poetry v2 should work in general but we should add more detection to renovate to not automatically update to a v2 lockfile

[dekim24]

needs test updates

https://github.com/containerbase/base/actions/runs/12710660920/job/35432717311#step:7:428

@rarkins poetry v2 should work in general but we should add more detection to renovate to not automatically update to a v2 lockfile

Hi, I stumbled on this PR + comment while trying to fix a blocker on some of my repos. Basically, we are in the opposite scenario where we are trying to enforce everyone (developers, CI/CD, and renovate) to fully migrate to poetry v2 and use a v2 lock file. Right now, renovate is changing our lock file back to v1 which causes stuff to break.

Just to avoid spending time on unnecessary workarounds - once this PR is merged, will renovate be able to detect from somewhere (maybe the comment at the top of poetry.lock This file is automatically @generated by Poetry 2.0.1) and know to continue using v2 lock files when creating new PRs?