Bump the poetry group in /python/helpers with 2 updates

[dependabot]

Bumps the poetry group in /python/helpers with 2 updates: hashin and poetry.

Updates hashin from 1.0.1 to 1.0.3

Release notes

Sourced from hashin's releases.

1.0.3

What's Changed

• Drop end-of-life Python 3.8 by @​hartwork in peterbe/hashin#192
• Be robust towards invalid versions like "0.3.2d" (fixes #190) by @​hartwork in peterbe/hashin#196
• Switch to email header parser from deprecated cgi library by @​pib in peterbe/hashin#195
• Cover and communicate Python 3.13 support by @​hartwork in peterbe/hashin#204

New Contributors

• @​pib made their first contribution in peterbe/hashin#195

Full Changelog: peterbe/hashin@1.0.2...1.0.3

1.0.2

What's Changed

• Fix function expand_python_version for "3.10" and upwards (fixes #184) by @​hartwork in peterbe/hashin#186

Full Changelog: peterbe/hashin@1.0.1...1.0.2

Commits

• c329dc1 Merge pull request #206 from hartwork/prepare-release
• 34b7ff7 Bump version to 1.0.3
• 52b36d8 README.rst: Document user-relevant changes for 1.0.3
• ff62541 Drop dead and half-broken redirect handling from function "_download" (#205)
• e1cae1c Cover and communicate Python 3.13 support (#204)
• 3d29a3c Use any v5 version of actions/setup-python (#200)
• 3c7a3ed Use any v4 version of actions/checkout (#201)
• 7a24881 Merge pull request #195 from pib/remove-cgi
• bef0754 Merge pull request #202 from peterbe/tyidy-formatting-of-yaml-in-workflows
• d543a1e Tyidy formatting of YAML in workflows
• Additional commits viewable in compare view

Updates poetry from 1.8.2 to 1.8.4

Release notes

Sourced from poetry's releases.

1.8.4

Added

• Add official support for Python 3.13 (#9523).

Changed

• Require virtualenv>=20.26.6 to mitigate potential command injection when running poetry shell in untrusted projects (#9757).

poetry-core (1.9.1)

• Add 3.13 to the list of available Python versions (#747).

1.8.3

Added

• Add support for untagged CPython builds with versions ending with a + (#9207).

Changed

• Require pkginfo>=1.10 to ensure support for packages with metadata version 2.3 (#9130).
• Improve locking on FIPS systems (#9152).

Fixed

• Fix an issue where unrecognized package metadata versions silently resulted in empty dependencies (#9203, #9226).
• Fix an issue where trailing slashes in git URLs where not handled correctly (#9205).
• Fix an issue where poetry self commands printed a warning that the current project cannot be installed (#9302).
• Fix an issue where poetry install sporadically failed with a KeyError due to a race condition (#9335).

Docs

• Fix incorrect information about poetry shell (#9060).
• Add a git subdirectory example to poetry add (#9080).
• Mention interactive credential configuration (#9074).
• Add notes for optional advanced installation steps (#9098).
• Add reference to configuration credentials in documentation of poetry publish (#9110).
• Improve documentation for configuring credentials via environment variables (#9121).
• Remove misleading wording around virtual environments (#9213).
• Remove outdated advice regarding seeding keyring backends (#9164).
• Add a pyproject.toml example for a dependency with multiple extras (#9138).
• Clarify help of poetry add (#9230).
• Add a note how to configure credentials for TestPyPI for poetry publish (#9255).
• Fix information about the --readme option in poetry new (#9260).
• Clarify what is special about the Python constraint in dependencies (#9256).
• Update how to uninstall plugins via pipx (#9320).

Changelog

Sourced from poetry's changelog.

[1.8.4] - 2024-10-14

Added

• Add official support for Python 3.13 (#9523).

Changed

• Require virtualenv>=20.26.6 to mitigate potential command injection when running poetry shell in untrusted projects (#9757).

poetry-core (1.9.1)

• Add 3.13 to the list of available Python versions (#747).

[1.8.3] - 2024-05-08

Added

• Add support for untagged CPython builds with versions ending with a + (#9207).

Changed

• Require pkginfo>=1.10 to ensure support for packages with metadata version 2.3 (#9130).
• Improve locking on FIPS systems (#9152).

Fixed

• Fix an issue where unrecognized package metadata versions silently resulted in empty dependencies (#9203, #9226).
• Fix an issue where trailing slashes in git URLs where not handled correctly (#9205).
• Fix an issue where poetry self commands printed a warning that the current project cannot be installed (#9302).
• Fix an issue where poetry install sporadically failed with a KeyError due to a race condition (#9335).

Docs

• Fix incorrect information about poetry shell (#9060).
• Add a git subdirectory example to poetry add (#9080).
• Mention interactive credential configuration (#9074).
• Add notes for optional advanced installation steps (#9098).
• Add reference to configuration credentials in documentation of poetry publish (#9110).
• Improve documentation for configuring credentials via environment variables (#9121).
• Remove misleading wording around virtual environments (#9213).
• Remove outdated advice regarding seeding keyring backends (#9164).
• Add a pyproject.toml example for a dependency with multiple extras (#9138).
• Clarify help of poetry add (#9230).
• Add a note how to configure credentials for TestPyPI for poetry publish (#9255).
• Fix information about the --readme option in poetry new (#9260).
• Clarify what is special about the Python constraint in dependencies (#9256).
• Update how to uninstall plugins via pipx (#9320).

Commits

• 6a071c1 release: bump version to 1.8.4
• 8d2a341 backport release workflow from main branch
• b8546d7 python 3.13 in workflows (#9523)
• 0329bca Bump virtualenv to 20.26.6
• a2d09a1 fix changelog (#9399)
• e5e4b0c release: bump version to 1.8.3
• dfd4aa1 Update pipx plugin uninstall docs (#9320)
• 5743357 docs: clarify python version usage (#9256)
• 4118200 Clarify readme help in new command (#9260)
• 779b042 Repositories update to resolve #6659 (#9255)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions