An open index of dependabot pull requests across open source projects.

Bump poetry from 2.1.3 to 2.1.4

Merged
Number: #936
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: September 12, 2025 at 12:27 PM UTC
(1 day ago)
Updated: September 12, 2025 at 01:09 PM UTC
(1 day ago)
Merged: September 12, 2025 at 01:09 PM UTC
(1 day ago)
by per1234
Time to Close: 42 minutes
Labels:
type: enhancement topic: infrastructure
Assignees:
per1234
Description:

Bumps poetry from 2.1.3 to 2.1.4.

Release notes

Sourced from poetry's releases.

2.1.4

Changed

  • Require virtualenv<20.33 to work around an issue where Poetry uses the wrong Python version (#10491).
  • Improve the error messages for the validation of the pyproject.toml file (#10471).

Fixed

  • Fix an issue where project plugins were installed even though poetry install was called with --no-plugins (#10405).
  • Fix an issue where dependency resolution failed for self-referential extras with duplicate dependencies (#10488).

Docs

  • Clarify how to include files that were automatically excluded via VCS ignore settings (#10442).
  • Clarify the behavior of poetry add if no version constraint is explicitly specified (#10445).
Changelog

Sourced from poetry's changelog.

[2.1.4] - 2025-08-05

Changed

  • Require virtualenv<20.33 to work around an issue where Poetry uses the wrong Python version (#10491).
  • Improve the error messages for the validation of the pyproject.toml file (#10471).

Fixed

  • Fix an issue where project plugins were installed even though poetry install was called with --no-plugins (#10405).
  • Fix an issue where dependency resolution failed for self-referential extras with duplicate dependencies (#10488).

Docs

  • Clarify how to include files that were automatically excluded via VCS ignore settings (#10442).
  • Clarify the behavior of poetry add if no version constraint is explicitly specified (#10445).
Commits
  • a8f0889 release: bump version to 2.1.4
  • 683fd83 fix: adjust virtualenv constraint in pyproject.toml to < 20.33.0 (#10491)
  • 501346e solver: fix dependency resolution for self-referential extras with duplicate ...
  • c9e8a4c fix deprecated parts in pyproject example in README (#10479)
  • 2855b2e Fix test_python_get_preferred_default for rc Python releases (#10478)
  • 9ee000a improve pyproject.toml validation error messages by replacing data with `to...
  • 6d6c2f1 docs: update unspecified version docs for add (#10445)
  • 5e58233 Documentation: Clarified negating VCS excluded files (#10442)
  • ac51717 fix: typo in dependency-specification.md (#10427)
  • c1220a7 Add missing tmp_venv mock to test_no_additional_output_in_verbose_mode (#10397)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+10
Deletions:
-10
Package Dependencies
Package:
poetry
Ecosystem:
pip
Version Change:
2.1.3 → 2.1.4
Update Type:
Patch
Technical Details
ID: 7602196
UUID: 2822530944
Node ID: PR_kwDOEZ4Zfc6oPGeA
Host: GitHub
Repository: arduino/arduino-lint
Merge State: Unknown