fix(deps): update dependencies (minor)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
poetry (changelog)	1.4.2 -> 1.8.5						minor
pre-commit/pre-commit-hooks	v4.4.0 -> v4.6.0					repository	minor
public.ecr.aws/lambda/python	3.9 -> 3.13					final	minor
python	~3.10 -> ~3.13.0					dependencies	minor
python	3.10-slim-bullseye -> 3.13-slim-bullseye					stage	minor
python	3.10.16 -> 3.13.4						minor

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

python-poetry/poetry (poetry)

v1.8.5

Compare Source

Changed

• Require pkginfo>=1.12 to fix an issue with an unknown metadata version 2.4 (#​9888).
• Do not fail if the unknown metadata version is only a minor version update (#​9888).

v1.8.4

Compare Source

Added

• Add official support for Python 3.13 (#​9523).

Changed

• Require virtualenv>=20.26.6 to mitigate potential command injection when running poetry shell in untrusted projects (#​9757).

poetry-core (1.9.1)

• Add 3.13 to the list of available Python versions (#​747).

v1.8.3

Compare Source

Added

• Add support for untagged CPython builds with versions ending with a + (#​9207).

Changed

• Require pkginfo>=1.10 to ensure support for packages with metadata version 2.3 (#​9130).
• Improve locking on FIPS systems (#​9152).

Fixed

• Fix an issue where unrecognized package metadata versions silently resulted in empty dependencies (#​9203,
  #​9226).
• Fix an issue where trailing slashes in git URLs where not handled correctly (#​9205).
• Fix an issue where poetry self commands printed a warning that the current project cannot be installed (#​9302).
• Fix an issue where poetry install sporadically failed with a KeyError due to a race condition (#​9335).

Docs

• Fix incorrect information about poetry shell (#​9060).
• Add a git subdirectory example to poetry add (#​9080).
• Mention interactive credential configuration (#​9074).
• Add notes for optional advanced installation steps (#​9098).
• Add reference to configuration credentials in documentation of poetry publish (#​9110).
• Improve documentation for configuring credentials via environment variables (#​9121).
• Remove misleading wording around virtual environments (#​9213).
• Remove outdated advice regarding seeding keyring backends (#​9164).
• Add a pyproject.toml example for a dependency with multiple extras (#​9138).
• Clarify help of poetry add (#​9230).
• Add a note how to configure credentials for TestPyPI for poetry publish (#​9255).
• Fix information about the --readme option in poetry new (#​9260).
• Clarify what is special about the Python constraint in dependencies (#​9256).
• Update how to uninstall plugins via pipx (#​9320).

v1.8.2

Compare Source

Fixed

• Harden lazy-wheel error handling if the index server is behaving badly in an unexpected way (#​9051).
• Improve lazy-wheel error handling if the index server does not handle HTTP range requests correctly (#​9082).
• Improve lazy-wheel error handling if the index server pretends to support HTTP range requests but does not respect them (#​9084).
• Improve lazy-wheel to allow redirects for HEAD requests (#​9087).
• Improve debug logging for lazy-wheel errors (#​9059).
• Fix an issue where the hash of a metadata file could not be calculated correctly due to an encoding issue (#​9049).
• Fix an issue where poetry add failed in non-package mode if no project name was set (#​9046).
• Fix an issue where a hint to non-package mode was not compliant with the final name of the setting (#​9073).

v1.8.1

Compare Source

Fixed

• Update the minimum required version of packaging (#​9031).
• Handle unexpected responses from servers that do not support HTTP range requests with negative offsets more robust (#​9030).

Docs

• Rename master branch to main (#​9022).

v1.8.0

Compare Source

Added

• Add a non-package mode for use cases where Poetry is only used for dependency management (#​8650).
• Add support for PEP 658 to fetch metadata without having to download wheels (#​5509).
• Add a lazy-wheel config option (default: true) to reduce wheel downloads during dependency resolution (#​8815,
  #​8941).
• Improve performance of dependency resolution by using shallow copies instead of deep copies (#​8671).
• poetry check validates that no unknown sources are referenced in dependencies (#​8709).
• Add archive validation during installation for further hash algorithms (#​8851).
• Add a to key in tool.poetry.packages to allow custom subpackage names (#​8791).
• Add a config option to disable keyring (#​8910).
• Add a --sync option to poetry update (#​8931).
• Add an --output option to poetry build (#​8828).
• Add a --dist-dir option to poetry publish (#​8828).

Changed

• The implicit PyPI source is disabled if at least one primary source is configured (#​8771).
• Deprecate source priority default (#​8771).
• Upgrade the warning about an inconsistent lockfile to an error (#​8737).
• Deprecate setting installer.modern-installation to false (#​8988).
• Drop support for pip<19 (#​8894).
• Require requests-toolbelt>=1 (#​8680).
• Allow platformdirs 4.x (#​8668).
• Allow and require xattr 1.x on macOS (#​8801).
• Improve venv shell activation in fish (#​8804).
• Rename system to base in output of poetry env info (#​8832).
• Use pretty name in output of poetry version (#​8849).
• Improve error handling for invalid entries in tool.poetry.scripts (#​8898).
• Improve verbose output for dependencies with extras during dependency resolution (#​8834).
• Improve message about an outdated lockfile (#​8962).

Fixed

• Fix an issue where poetry shell failed when Python has been installed with MSYS2 (#​8644).
• Fix an issue where Poetry commands failed in a terminal with a non-UTF-8 encoding (#​8608).
• Fix an issue where a missing project name caused an incomprehensible error message (#​8691).
• Fix an issue where Poetry failed to install an sdist path dependency (#​8682).
• Fix an issue where poetry install failed because an unused extra was not available (#​8548).
• Fix an issue where poetry install --sync did not remove an unrequested extra (#​8621).
• Fix an issue where poetry init did not allow specific characters in the author field (#​8779).
• Fix an issue where Poetry could not download sdists from misconfigured servers (#​8701).
• Fix an issue where metadata of sdists that call CLI tools of their build requirements could not be determined (#​8827).
• Fix an issue where Poetry failed to use the currently activated environment (#​8831).
• Fix an issue where poetry shell failed in zsh if a space was in the venv path (#​7245).
• Fix an issue where scripts with extras could not be installed (#​8900).
• Fix an issue where explicit sources where not propagated correctly (#​8835).
• Fix an issue where debug prints where swallowed when using a build script (#​8760).
• Fix an issue where explicit sources of locked dependencies where not propagated correctly (#​8948).
• Fix an issue where Poetry's own environment was falsely identified as system environment (#​8970).
• Fix an issue where dependencies from a setup.py were ignored silently (#​9000).
• Fix an issue where environment variables for virtualenv.options were ignored (#​9015).
• Fix an issue where virtualenvs.options.no-pip and virtualenvs.options.no-setuptools were not normalized (#​9015).

Docs

• Replace deprecated --no-dev with --without dev in the FAQ (#​8659).
• Recommend poetry-check instead of the deprecated poetry-lock pre-commit hook (#​8675).
• Clarify the names of the environment variables to provide credentials for repositories (#​8782).
• Add note how to install several version of Poetry in parallel (#​8814).
• Improve description of poetry show --why (#​8817).
• Improve documentation of poetry update (#​8706).
• Add a warning about passing variables that may start with a hyphen via command line (#​8850).
• Mention that the virtual environment in which Poetry itself is installed should not be activated (#​8833).
• Add note about poetry run and externally managed environments (#​8748).
• Update FAQ entry about tox for tox 4.x (#​8658).
• Fix documentation for default format option for include and exclude value (#​8852).
• Add note about tox and configured credentials (#​8888).
• Add note and link how to install pipx (#​8878).
• Fix examples for poetry add with git dependencies over ssh (#​8911).
• Remove reference to deprecated scripts extras feature (#​8903).
• Change examples to prefer --only main instead of --without dev (#​8921).
• Mention that the develop attribute is a Poetry-specific feature and not propagated to other tools (#​8971).
• Fix examples for adding supplemental and secondary sources (#​8953).
• Add PyTorch example for explicit sources (#​9006).

poetry-core (1.9.0)

• Deprecate scripts that depend on extras (#​690).
• Add support for path dependencies that do not define a build system (#​675).
• Update list of supported licenses (#​659,
  #​669,
  #​678,
  #​694).
• Rework list of files included in build artifacts (#​666).
• Fix an issue where insignificant errors were printed if the working directory is not inside a git repository (#​684).
• Fix an issue where the project's directory was not recognized as git repository on Windows due to an encoding issue (#​685).

v1.7.1

Compare Source

Fixed

• Fix an issue where sdists that call CLI tools of their build requirements could not be installed (#​8630).
• Fix an issue where sdists with symlinks could not be installed due to a broken tarfile datafilter (#​8649).
• Fix an issue where poetry init failed when trying to add dependencies (#​8655).
• Fix an issue where poetry install failed if virtualenvs.create was set to false (#​8672).

v1.7.0

Compare Source

Added

• Add official support for Python 3.12 (#​7803, #​8544).
• Print a future warning that poetry-plugin-export will not be installed by default anymore (#​8562).
• Add poetry-install pre-commit hook (#​8327).
• Add --next-phase option to poetry version (#​8089).
• Print a warning when overwriting files from another package at installation (#​8386).
• Print a warning if the current project cannot be installed (#​8369).
• Report more details on build backend exceptions (#​8464).

Changed

• Set Poetry as user-agent for all HTTP requests (#​8394).
• Do not install setuptools per default in Python 3.12 (#​7803).
• Do not install wheel per default (#​7803).
• Remove setuptools and wheel when running poetry install --sync if they are not required by the project (#​8600).
• Improve error message about PEP-517 support (#​8463).
• Improve keyring handling (#​8227).
• Read the description field when extracting metadata from setup.py files (#​8545).

Fixed

• Fix an issue where dependencies of inactive extras were locked and installed (#​8399).
• Fix an issue where build requirements were not installed due to a race condition in the artifact cache (#​8517).
• Fix an issue where packages included in the system site packages were installed even though virtualenvs.options.system-site-packages was set (#​8359).
• Fix an issue where git dependencies' submodules with relative URLs were handled incorrectly (#​8020).
• Fix an issue where a failed installation of build dependencies was not noticed directly (#​8479).
• Fix an issue where poetry shell did not work completely with nushell (#​8478).
• Fix an issue where a confusing error messages was displayed when running poetry config pypi-token.pypi without a value (#​8502).
• Fix an issue where a cryptic error message is printed if there is no metadata entry in the lockfile (#​8523).
• Fix an issue with the encoding with special characters in the virtualenv's path (#​8565).
• Fix an issue where the connection pool size was not adjusted to the number of workers (#​8559).

Docs

• Improve the wording regarding a project's supported Python range (#​8423).
• Make pipx the preferred (first mentioned) installation method (#​8090).
• Add a warning about poetry self on Windows (#​8090).
• Fix example for poetry add with a git dependency (#​8438).
• Add information about auto-included files in wheels and sdist (#​8555).
• Fix documentation of the POETRY_REPOSITORIES_ variables docs (#​8492).
• Add CITATION.cff file (#​8510).

poetry-core (1.8.1)

• Add support for creating packages dynamically in the build script (#​629).
• Improve marker logic for extra markers (#​636).
• Update list of supported licenses (#​635, #​646).
• Fix an issue where projects with extension modules were not installed in editable mode (#​633).
• Fix an issue where the wrong or no lib folder was added to the wheel (#​634).

poetry-plugin-export (^1.6.0)

• Add an --all-extras option (#​241).
• Fix an issue where git dependencies are exported with the branch name instead of the resolved commit hash (#​213).

v1.6.1

Compare Source

Fixed

• Update the minimum required version of requests (#​8336).

v1.6.0

Compare Source

Added

• Add support for repositories that do not provide a supported hash algorithm (#​8118).
• Add full support for duplicate dependencies with overlapping markers (#​7257).
• Improve performance of poetry lock for certain edge cases (#​8256).
• Improve performance of poetry install (#​8031).
• poetry check validates that specified readme files do exist (#​7444).
• Add a downgrading note when updating to an older version (#​8176).
• Add support for vox in the xonsh shell (#​8203).
• Add support for pre-commit hooks for projects where the pyproject.toml file is located in a subfolder (#​8204).
• Add support for the git+http:// scheme (#​6619).

Changed

• Drop support for Python 3.7 (#​7674).
• Move poetry lock --check to poetry check --lock and deprecate the former (#​8015).
• Change future warning that PyPI will only be disabled automatically if there are no primary sources (#​8151).

Fixed

• Fix an issue where build-system.requires were not respected for projects with build scripts (#​7975).
• Fix an issue where the encoding was not handled correctly when calling a subprocess (#​8060).
• Fix an issue where poetry show --top-level did not show top level dependencies with extras (#​8076).
• Fix an issue where poetry init handled projects with src layout incorrectly (#​8218).
• Fix an issue where Poetry wrote .pth files with the wrong encoding (#​8041).
• Fix an issue where poetry install did not respect the source if the same version of a package has been locked from different sources (#​8304).

Docs

• Document official Poetry badge (#​8066).
• Update configuration folder path for macOS (#​8062).
• Add a warning about pip ignoring lock files (#​8117).
• Clarify the use of the virtualenvs.in-project setting. (#​8126).
• Change pre-commit YAML style to be consistent with pre-commit's own examples (#​8146).
• Fix command for listing installed plugins (#​8200).
• Mention the nox-poetry package (#​8173).
• Add an example with a PyPI source in the pyproject.toml file (#​8171).
• Use reference instead of deprecated callable in the scripts example (#​8211).

poetry-core (1.7.0)

• Improve performance of marker handling (#​609).
• Allow | as a value separator in markers with the operators in and not in (#​608).
• Put pretty name (instead of normalized name) in metadata (#​620).
• Update list of supported licenses (#​623).
• Fix an issue where PEP 508 dependency specifications with names starting with a digit could not be parsed (#​607).
• Fix an issue where Poetry considered an unrelated .gitignore file resulting in an empty wheel (#​611).

poetry-plugin-export (^1.5.0)

• Fix an issue where markers for dependencies required by an extra were not generated correctly (#​209).

v1.5.1

Compare Source

Added

• Improve dependency resolution performance in cases with a lot of backtracking (#​7950).

Changed

• Disable wheel content validation during installation (#​7987).

Fixed

• Fix an issue where partially downloaded wheels were cached (#​7968).
• Fix an issue where poetry run did no longer execute relative-path scripts (#​7963).
• Fix an issue where dependencies were not installed in in-project environments (#​7977).
• Fix an issue where no solution was found for a transitive dependency on a pre-release of a package (#​7978).
• Fix an issue where cached repository packages were incorrectly parsed, leading to its dependencies being ignored (#​7995).
• Fix an issue where an explicit source was ignored so that a direct origin dependency was used instead (#​7973).
• Fix an issue where the installation of big wheels consumed a lot of memory (#​7987).

Docs

• Add information about multiple constraints dependencies with direct origin and version dependencies (#​7973).

poetry-core (1.6.1)

• Fix an endless recursion in marker handling (#​593).
• Fix an issue where the wheel tag was not built correctly under certain circumstances (#​591).

poetry-plugin-export (^1.4.0)

• Fix an issue where --extra-index-url and --trusted-host was not generated for sources with priority explicit (#​205).

v1.5.0

Compare Source

Added

• Introduce the new source priorities explicit and supplemental (#​7658,
  #​6879).
• Introduce the option to configure the priority of the implicit PyPI source (#​7801).
• Add handling for corrupt cache files (#​7453).
• Improve caching of URL and git dependencies (#​7693,
  #​7473).
• Add option to skip installing directory dependencies (#​6845,
  #​7923).
• Add --executable option to poetry env info (#​7547).
• Add --top-level option to poetry show (#​7415).
• Add --lock option to poetry remove (#​7917).
• Add experimental POETRY_REQUESTS_TIMEOUT option (#​7081).
• Improve performance of wheel inspection by avoiding unnecessary file copy operations (#​7916).

Changed

• Remove the old deprecated installer and the corresponding setting experimental.new-installer (#​7356).
• Introduce priority key for sources and deprecate flags default and secondary (#​7658).
• Deprecate poetry run <entry point> if the entry point was not previously installed via poetry install (#​7606).
• Only write the lock file if the installation succeeds (#​7498).
• Do not write the unused package category into the lock file (#​7637).

Fixed

• Fix an issue where Poetry's internal pyproject.toml continually grows larger with empty lines (#​7705).
• Fix an issue where Poetry crashes due to corrupt cache files (#​7453).
• Fix an issue where the Retry-After in HTTP responses was not respected and retries were handled inconsistently (#​7072).
• Fix an issue where Poetry silently ignored invalid groups (#​7529).
• Fix an issue where Poetry does not find a compatible Python version if not given explicitly (#​7771).
• Fix an issue where the direct_url.json of an editable install from a git dependency was invalid (#​7473).
• Fix an issue where error messages from build backends were not decoded correctly (#​7781).
• Fix an infinite loop when adding certain dependencies (#​7405).
• Fix an issue where pre-commit hooks skip pyproject.toml files in subdirectories (#​7239).
• Fix an issue where pre-commit hooks do not use the expected Python version (#​6989).
• Fix an issue where an unclear error message is printed if the project name is the same as one of its dependencies (#​7757).
• Fix an issue where poetry install returns a zero exit status even though the build script failed (#​7812).
• Fix an issue where an existing .venv was not used if in-project was not set (#​7792).
• Fix an issue where multiple extras passed to poetry add were not parsed correctly (#​7836).
• Fix an issue where poetry shell did not send a newline to fish (#​7884).
• Fix an issue where poetry update --lock printed operations that were not executed (#​7915).
• Fix an issue where poetry add --lock did perform a full update of all dependencies (#​7920).
• Fix an issue where poetry shell did not work with nushell (#​7919).
• Fix an issue where subprocess calls failed on Python 3.7 (#​7932).
• Fix an issue where keyring was called even though the password was stored in an environment variable (#​7928).

Docs

• Add information about what to use instead of --dev (#​7647).
• Promote semantic versioning less aggressively (#​7517).
• Explain Poetry's own versioning scheme in the FAQ (#​7517).
• Update documentation for configuration with environment variables (#​6711).
• Add details how to disable the virtualenv prompt (#​7874).
• Improve documentation on whether to commit poetry.lock (#​7506).
• Improve documentation of virtualenv.create (#​7608).

poetry-core (1.6.0)

• Improve error message for invalid markers (#​569).
• Increase robustness when deleting temporary directories on Windows (#​460).
• Replace tomlkit with tomli, which changes the interface of some internal classes (#​483).
• Deprecate Package.category (#​561).
• Fix a performance regression in marker handling (#​568).
• Fix an issue where wildcard version constraints were not handled correctly (#​402).
• Fix an issue where poetry build created duplicate Python classifiers if they were specified manually (#​578).
• Fix an issue where local versions where not handled correctly (#​579).

pre-commit/pre-commit-hooks (pre-commit/pre-commit-hooks)

v4.6.0: pre-commit-hooks v4.6.0

Compare Source

Features

• requirements-txt-fixer: remove duplicate packages.
  • #​1014 PR by @​vhoulbreque-withings.
  • #​960 issue @​csibe17.

Migrating

• fix-encoding-pragma: deprecated -- will be removed in 5.0.0. use
  pyupgrade or some other tool.
  • #​1033 PR by @​mxr.
  • #​1032 issue by @​mxr.

v4.5.0: pre-commit-hooks v4.5.0

Compare Source

Features

• requirements-txt-fixer: also sort constraints.txt by default.
  • #​857 PR by @​lev-blit.
  • #​830 issue by @​PLPeeters.
• debug-statements: add bpdb debugger.
  • #​942 PR by @​mwip.
  • #​941 issue by @​mwip.

Fixes

• file-contents-sorter: fix sorting an empty file.
  • #​944 PR by @​RoelAdriaans.
  • #​935 issue by @​paduszyk.
• double-quote-string-fixer: don't rewrite inside f-strings in 3.12+.
  • #​973 PR by @​asottile.
  • #​971 issue by @​XuehaiPan.

Migrating

• now requires python >= 3.8.
  • #​926 PR by @​asottile.
  • #​927 PR by @​asottile.

containerbase/python-prebuild (python)

v3.13.3

Compare Source

Bug Fixes

• deps: update dependency python to v3.13.3

v3.13.2

Compare Source

Bug Fixes

• deps: update dependency python to v3.13.2

v3.13.1

Compare Source

Bug Fixes

• deps: update dependency python to v3.13.1

v3.13.0

Compare Source

Bug Fixes

• deps: update dependency python to v3.13.0

v3.12.10

Compare Source

Bug Fixes

• deps: update dependency python to v3.12.10

v3.12.9

Compare Source

Bug Fixes

• deps: update dependency python to v3.12.9

v3.12.8

Compare Source

Bug Fixes

• deps: update dependency python to v3.12.8

v3.12.7

Compare Source

Bug Fixes

• deps: update dependency python to v3.12.7

v3.12.6

Compare Source

Bug Fixes

• deps: update dependency python to v3.12.6

v3.12.5

Compare Source

Bug Fixes

• deps: update dependency python to v3.12.5

v3.12.4

Compare Source

Bug Fixes

• deps: update dependency python to v3.12.4

v3.12.3

Compare Source

Bug Fixes

• deps: update dependency python to v3.12.3

v3.12.2

Compare Source

Bug Fixes

• deps: update dependency python to v3.12.2

v3.12.1

Compare Source

Bug Fixes

• deps: update dependency python to v3.12.1

v3.12.0

Compare Source

Bug Fixes

• deps: update dependency python to v3.12.0

v3.11.12

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.12

v3.11.11

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.11

v3.11.10

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.10

v3.11.9

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.9

v3.11.8

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.8

v3.11.7

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.7

v3.11.6

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.6

v3.11.5

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.5

v3.11.4

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.4

v3.11.3

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.3

v3.11.2

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.2

v3.11.1

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.1

v3.11.0

Compare Source

Bug Fixes

• deps: update dependency python to v3.11.0

python/cpython (python)

v3.13.4

Compare Source

v3.13.3

Compare Source

v3.13.2

Compare Source

v3.13.1

Compare Source

v3.13.0

Compare Source

v3.12.11

[Compare Source](https://redirect.github.com/python/cpython/compare/

---

Configuration

📅 Schedule: Branch creation - "every weekday,after 9am and before 5pm" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.