chore(deps): bump poetry from 2.4.3 to 2.5.1 by dependabot[bot] · Pull Request #319 · Mergifyio/sql-compare

dependabot · 2026-09-28T07:04:27Z

Bumps poetry from 2.4.3 to 2.5.1.

Release notes

2.5.1

Fixed

Fix an issue where uninstalling a package with installer.builtin-uninstall set failed with a TypeError (#11077).

2.5.0

Added

Add an installer.builtin-uninstall setting to uninstall packages with a built-in uninstaller instead of invoking pip uninstall (#10931).

Add official support for Python 3.15 (#11046).

Changed

Do not send credentials configured for an https repository via http (#11073).

Fail with an error when the current Python version is not compatible with the project and virtualenvs.create is false (#10941).

Validate version constraints that are entered interactively in poetry init (#10909).

Include the path of the pyproject.toml file in the message about already present packages in poetry add (#10908).

Improve performance of processing package links and repository pages (#10895, #10896, #10903, #10949, #10951, #10953).

Improve performance of dependency resolution (#10907, #10954).

Improve performance of choosing and installing wheels (#10905, #10958).

Improve performance by avoiding redundant keyring lookups for repositories without credentials (#10959).

Improve performance by reducing the number of subprocesses to discover virtual environment data (#11042).

Improve performance of poetry search for single-token queries (#10906).

Improve startup time by deferring the import of requests (#11004).

Improve performance of schema validation by caching compiled JSON schema validators (#11033).

Fixed

Fix an issue where credentials of the wrong repository were used under certain circumstances when multiple repositories were configured on the same host (#11072).

Fix an issue where credentials of a repository on another host were used for git dependencies if the path of the URL was the same (#11074).

Fix an issue where dependency resolution failed for conflicting requirements of different packages even though the requirements had mutually exclusive markers (#10944).

Fix an issue where dependency resolution failed when the same package was required with different extras in several optional dependencies or dependency groups (#10943).

Fix an issue where dependency resolution failed with a KeyError (#11008).

Fix an issue where the dependencies of an extra were missing in the lock file after adding the extra to a locked dependency, e.g. a git dependency, in the pyproject.toml file (#10987).

Fix an issue where a path or git dependency was not reinstalled when its develop setting changed (#11022).

Fix an issue where scripts of type file were not installed when installing the project (#10736).

Fix an issue where GUI scripts were not installed when installing the project (#10973).

Fix an issue where a relative path was written to direct_url.json for path dependencies (#10917).

Fix an issue where poetry show <package> showed a version that was not relevant for the current environment if there were multiple versions of the package in the lock file (#11003).

Fix an issue where poetry show --outdated did not find newer versions of packages from sources with explicit priority (#10982).

Fix an issue where poetry env activate ignored the environment that was determined by the application, e.g. when using --directory (#10916).

Fix an issue where poetry init proposed an invalid package name if the directory name was not a valid package name (#10975).

Docs

Document the --license option of poetry init and poetry new (#11064).

Clarify which dependencies are locked when running poetry update with dependency groups (#11024).

Clarify the portability of path dependencies (#11020).

Clarify the usage of poetry run with console scripts (#10984).

... (truncated)

Changelog

Sourced from poetry's changelog.

[2.5.1] - 2026-09-20

Fixed

Fix an issue where uninstalling a package with installer.builtin-uninstall set failed with a TypeError (#11077).

[2.5.0] - 2026-09-19

Added

Add an installer.builtin-uninstall setting to uninstall packages with a built-in uninstaller instead of invoking pip uninstall (#10931).

Add official support for Python 3.15 (#11046).

Changed

Do not send credentials configured for an https repository via http (#11073).

Fail with an error when the current Python version is not compatible with the project and virtualenvs.create is false (#10941).

Validate version constraints that are entered interactively in poetry init (#10909).

Include the path of the pyproject.toml file in the message about already present packages in poetry add (#10908).

Improve performance of processing package links and repository pages (#10895, #10896, #10903, #10949, #10951, #10953).

Improve performance of dependency resolution (#10907, #10954).

Improve performance of choosing and installing wheels (#10905, #10958).

Improve performance by avoiding redundant keyring lookups for repositories without credentials (#10959).

Improve performance by reducing the number of subprocesses to discover virtual environment data (#11042).

Improve performance of poetry search for single-token queries (#10906).

Improve startup time by deferring the import of requests (#11004).

Improve performance of schema validation by caching compiled JSON schema validators (#11033).

Fixed

Fix an issue where credentials of the wrong repository were used under certain circumstances when multiple repositories were configured on the same host (#11072).

Fix an issue where credentials of a repository on another host were used for git dependencies if the path of the URL was the same (#11074).

Fix an issue where dependency resolution failed for conflicting requirements of different packages even though the requirements had mutually exclusive markers (#10944).

Fix an issue where dependency resolution failed when the same package was required with different extras in several optional dependencies or dependency groups (#10943).

Fix an issue where dependency resolution failed with a KeyError (#11008).

Fix an issue where the dependencies of an extra were missing in the lock file after adding the extra to a locked dependency, e.g. a git dependency, in the pyproject.toml file (#10987).

Fix an issue where a path or git dependency was not reinstalled when its develop setting changed (#11022).

Fix an issue where scripts of type file were not installed when installing the project (#10736).

Fix an issue where GUI scripts were not installed when installing the project (#10973).

Fix an issue where a relative path was written to direct_url.json for path dependencies (#10917).

Fix an issue where poetry show <package> showed a version that was not relevant for the current environment if there were multiple versions of the package in the lock file (#11003).

Fix an issue where poetry show --outdated did not find newer versions of packages from sources with explicit priority (#10982).

... (truncated)

Commits

94b6e35 release: bump version to 2.5.1
f8408ca fix TypeError when using installer.builtin-uninstall (#11077)
165fb4b release: bump version to 2.5.0
c93fd63 update poetry-core (#10921)
32356ae chore: update dependencies (#11075)
d266d45 test: accept compatible extension wheel tags (#11014)
c8790a3 add Python 3.15 to tests matrix (#11046)
a416efd authenticator: match host when looking up git credentials (#11074)
e078ebf authenticator: do not send credentials configured for https with http (#11073)
8711c83 authenticator: sort candidates by common path segments instead of prefixes (#...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [poetry](https://github.com/python-poetry/poetry) from 2.4.3 to 2.5.1. - [Release notes](https://github.com/python-poetry/poetry/releases) - [Changelog](https://github.com/python-poetry/poetry/blob/main/CHANGELOG.md) - [Commits](python-poetry/poetry@2.4.3...2.5.1) --- updated-dependencies: - dependency-name: poetry dependency-version: 2.5.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

mergify · 2026-09-28T07:04:57Z

mergify · 2026-09-28T07:05:30Z

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 28, 2026

mergify Bot deployed to Mergify Merge Protections September 28, 2026 07:04 Active

mergify Bot added the queued label Sep 28, 2026

mergify Bot merged commit 841fcc4 into main Sep 28, 2026
8 checks passed

mergify Bot deleted the dependabot/pip/poetry-2.5.1 branch September 28, 2026 07:10

mergify Bot removed the queued label Sep 28, 2026

Navigation Menu

chore(deps): bump poetry from 2.4.3 to 2.5.1 - #319

chore(deps): bump poetry from 2.4.3 to 2.5.1#319
mergify[bot] merged 1 commit into
mainfrom
dependabot/pip/poetry-2.5.1

dependabot Bot commented on behalf of github Sep 28, 2026

Uh oh!

mergify Bot commented Sep 28, 2026 •

edited

Loading

🟢 🤖 Continuous Integration

🟢 👀 Review Requirements

🟢 Enforce conventional commit

🟢 🔎 Reviews

🟢 📕 PR description

🟢 🚦 Auto-queue

Uh oh!

mergify Bot commented Sep 28, 2026 •

edited

Loading

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 28, 2026

2.5.1

Fixed

2.5.0

Added

Changed

Fixed

Docs

[2.5.1] - 2026-09-20

Fixed

[2.5.0] - 2026-09-19

Added

Changed

Fixed

Uh oh!

mergify Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merge Protections

🟢 🤖 Continuous Integration

🟢 👀 Review Requirements

🟢 Enforce conventional commit

🟢 🔎 Reviews

🟢 📕 PR description

🟢 🚦 Auto-queue

Uh oh!

mergify Bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merge Queue Status

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

mergify Bot commented Sep 28, 2026 •

edited

Loading

mergify Bot commented Sep 28, 2026 •

edited

Loading