build: upgrade to Poetry 2 and fix vulnerable dependencies (3cd33e47) · Commits · to be continuous... / tools / gitlab-butler

poetry.lock

+46 −16

Original line number	Diff line number	Diff line
		# This file is automatically @generated by Poetry 1.8.2 and should not be changed by hand.
		# This file is automatically @generated by Poetry 2.1.4 and should not be changed by hand.

		[[package]]
		name = "annotated-types"
		@@ -6,6 +6,7 @@ version = "0.7.0"
		description = "Reusable constraint types to use with typing.Annotated"
		optional = false
		python-versions = ">=3.8"
		groups = ["main"]
		files = [
		{file = "annotated_types-0.7.0-py3-none-any.whl", hash = "sha256:1f02e8b43a8fbbc3f3e0d4f0f4bfc8131bcb4eebe8849b8e5c773f3a1c582a53"},
		{file = "annotated_types-0.7.0.tar.gz", hash = "sha256:aff07c09a53a08bc8cfccb9c85b05f1aa9a2a6f23728d790723543408344ce89"},
		@@ -17,6 +18,7 @@ version = "2024.12.14"
		description = "Python package for providing Mozilla's CA Bundle."
		optional = false
		python-versions = ">=3.6"
		groups = ["main", "dev"]
		files = [
		{file = "certifi-2024.12.14-py3-none-any.whl", hash = "sha256:1275f7a45be9464efc1173084eaa30f866fe2e47d389406136d332ed4967ec56"},
		{file = "certifi-2024.12.14.tar.gz", hash = "sha256:b650d30f370c2b724812bee08008be0c4163b163ddaec3f2546c1caf65f191db"},
		@@ -28,6 +30,7 @@ version = "3.4.1"
		description = "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet."
		optional = false
		python-versions = ">=3.7"
		groups = ["main", "dev"]
		files = [
		{file = "charset_normalizer-3.4.1-cp310-cp310-macosx_10_9_universal2.whl", hash = "sha256:91b36a978b5ae0ee86c394f5a54d6ef44db1de0815eb43de826d41d21e4af3de"},
		{file = "charset_normalizer-3.4.1-cp310-cp310-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:7461baadb4dc00fd9e0acbe254e3d7d2112e7f92ced2adc96e54ef6501c5f176"},
		@@ -129,6 +132,8 @@ version = "0.4.6"
		description = "Cross-platform colored terminal text."
		optional = false
		python-versions = "!=3.0.,!=3.1.,!=3.2.,!=3.3.,!=3.4.,!=3.5.,!=3.6.*,>=2.7"
		groups = ["dev"]
		markers = "sys_platform == \"win32\""
		files = [
		{file = "colorama-0.4.6-py2.py3-none-any.whl", hash = "sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6"},
		{file = "colorama-0.4.6.tar.gz", hash = "sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44"},
		@@ -140,6 +145,7 @@ version = "7.10.6"
		description = "Code coverage measurement for Python"
		optional = false
		python-versions = ">=3.9"
		groups = ["dev"]
		files = [
		{file = "coverage-7.10.6-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:70e7bfbd57126b5554aa482691145f798d7df77489a177a6bef80de78860a356"},
		{file = "coverage-7.10.6-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:e41be6f0f19da64af13403e52f2dec38bbc2937af54df8ecef10850ff8d35301"},
		@@ -232,7 +238,7 @@ files = [
		]

		[package.extras]
		toml = ["tomli"]
		toml = ["tomli ; python_full_version <= \"3.11.0a6\""]

		[[package]]
		name = "idna"
		@@ -240,6 +246,7 @@ version = "3.10"
		description = "Internationalized Domain Names in Applications (IDNA)"
		optional = false
		python-versions = ">=3.6"
		groups = ["main", "dev"]
		files = [
		{file = "idna-3.10-py3-none-any.whl", hash = "sha256:946d195a0d259cbba61165e88e65941f16e9b36ea6ddb97f00452bae8b1287d3"},
		{file = "idna-3.10.tar.gz", hash = "sha256:12f65c9b470abda6dc35cf8e63cc574b1c52b11df2c86030af0ac09b01b13ea9"},
		@@ -254,6 +261,7 @@ version = "2.0.0"
		description = "brain-dead simple config-ini parsing"
		optional = false
		python-versions = ">=3.7"
		groups = ["dev"]
		files = [
		{file = "iniconfig-2.0.0-py3-none-any.whl", hash = "sha256:b6a85871a79d2e3b22d2d1b94ac2824226a63c6b741c88f7ae975f18b6778374"},
		{file = "iniconfig-2.0.0.tar.gz", hash = "sha256:2d91e135bf72d31a410b17c16da610a82cb55f6b0477d1a902134b24a455b8b3"},
		@@ -265,6 +273,7 @@ version = "1.18.2"
		description = "Optional static typing for Python"
		optional = false
		python-versions = ">=3.9"
		groups = ["dev"]
		files = [
		{file = "mypy-1.18.2-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:c1eab0cf6294dafe397c261a75f96dc2c31bffe3b944faa24db5def4e2b0f77c"},
		{file = "mypy-1.18.2-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:7a780ca61fc239e4865968ebc5240bb3bf610ef59ac398de9a7421b54e4a207e"},
		@@ -324,6 +333,7 @@ version = "1.0.0"
		description = "Type system extensions for programs checked with the mypy type checker."
		optional = false
		python-versions = ">=3.5"
		groups = ["dev"]
		files = [
		{file = "mypy_extensions-1.0.0-py3-none-any.whl", hash = "sha256:4392f6c0eb8a5668a69e23d168ffa70f0be9ccfd32b5cc2d26a34ae5b844552d"},
		{file = "mypy_extensions-1.0.0.tar.gz", hash = "sha256:75dbf8955dc00442a438fc4d0666508a9a97b6bd41aa2f0ffe9d2f2725af0782"},
		@@ -335,6 +345,7 @@ version = "24.2"
		description = "Core utilities for Python packages"
		optional = false
		python-versions = ">=3.8"
		groups = ["dev"]
		files = [
		{file = "packaging-24.2-py3-none-any.whl", hash = "sha256:09abb1bccd265c01f4a3aa3f7a7db064b36514d2cba19a2f694fe6150451a759"},
		{file = "packaging-24.2.tar.gz", hash = "sha256:c228a6dc5e932d346bc5739379109d49e8853dd8223571c7c5b55260edc0b97f"},
		@@ -346,6 +357,7 @@ version = "0.12.1"
		description = "Utility library for gitignore style pattern matching of file paths."
		optional = false
		python-versions = ">=3.8"
		groups = ["dev"]
		files = [
		{file = "pathspec-0.12.1-py3-none-any.whl", hash = "sha256:a0d503e138a4c123b27490a4f7beda6a01c6f288df0e4a8b79c7eb0dc7b4cc08"},
		{file = "pathspec-0.12.1.tar.gz", hash = "sha256:a482d51503a1ab33b1c67a6c3813a26953dbdc71c31dacaef9a838c4e29f5712"},
		@@ -357,6 +369,7 @@ version = "1.5.0"
		description = "plugin and hook calling mechanisms for python"
		optional = false
		python-versions = ">=3.8"
		groups = ["dev"]
		files = [
		{file = "pluggy-1.5.0-py3-none-any.whl", hash = "sha256:44e1ad92c8ca002de6377e165f3e0f1be63266ab4d554740532335b9d75ea669"},
		{file = "pluggy-1.5.0.tar.gz", hash = "sha256:2cffa88e94fdc978c4c574f15f9e59b7f4201d439195c3715ca9e2486f1d0cf1"},
		@@ -372,6 +385,7 @@ version = "2.11.9"
		description = "Data validation using Python type hints"
		optional = false
		python-versions = ">=3.9"
		groups = ["main"]
		files = [
		{file = "pydantic-2.11.9-py3-none-any.whl", hash = "sha256:c42dd626f5cfc1c6950ce6205ea58c93efa406da65f479dcb4029d5934857da2"},
		{file = "pydantic-2.11.9.tar.gz", hash = "sha256:6b8ffda597a14812a7975c90b82a8a2e777d9257aba3453f973acd3c032a18e2"},
		@@ -385,7 +399,7 @@ typing-inspection = ">=0.4.0"

		[package.extras]
		email = ["email-validator (>=2.0.0)"]
		timezone = ["tzdata"]
		timezone = ["tzdata ; python_version >= \"3.9\" and platform_system == \"Windows\""]

		[[package]]
		name = "pydantic-core"
		@@ -393,6 +407,7 @@ version = "2.33.2"
		description = "Core functionality for Pydantic validation and serialization"
		optional = false
		python-versions = ">=3.9"
		groups = ["main"]
		files = [
		{file = "pydantic_core-2.33.2-cp310-cp310-macosx_10_12_x86_64.whl", hash = "sha256:2b3d326aaef0c0399d9afffeb6367d5e26ddc24d351dbc9c636840ac355dc5d8"},
		{file = "pydantic_core-2.33.2-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:0e5b2671f05ba48b94cb90ce55d8bdcaaedb8ba00cc5359f6810fc918713983d"},
		@@ -504,6 +519,7 @@ version = "2.19.1"
		description = "Pygments is a syntax highlighting package written in Python."
		optional = false
		python-versions = ">=3.8"
		groups = ["dev"]
		files = [
		{file = "pygments-2.19.1-py3-none-any.whl", hash = "sha256:9ea1544ad55cecf4b8242fab6dd35a93bbce657034b0611ee383099054ab6d8c"},
		{file = "pygments-2.19.1.tar.gz", hash = "sha256:61c16d2a8576dc0649d9f39e089b5f02bcd27fba10d8fb4dcc28173f7a45151f"},
		@@ -518,6 +534,7 @@ version = "8.4.2"
		description = "pytest: simple powerful testing with Python"
		optional = false
		python-versions = ">=3.9"
		groups = ["dev"]
		files = [
		{file = "pytest-8.4.2-py3-none-any.whl", hash = "sha256:872f880de3fc3a5bdc88a11b39c9710c3497a547cfa9320bc3c5e62fbf272e79"},
		{file = "pytest-8.4.2.tar.gz", hash = "sha256:86c0d0b93306b961d58d62a4db4879f27fe25513d4b969df351abdddb3c30e01"},
		@@ -539,6 +556,7 @@ version = "7.0.0"
		description = "Pytest plugin for measuring coverage."
		optional = false
		python-versions = ">=3.9"
		groups = ["dev"]
		files = [
		{file = "pytest_cov-7.0.0-py3-none-any.whl", hash = "sha256:3b8e9558b16cc1479da72058bdecf8073661c7f57f7d3c5f22a1c23507f2d861"},
		{file = "pytest_cov-7.0.0.tar.gz", hash = "sha256:33c97eda2e049a0c5298e91f519302a1334c26ac65c1a483d6206fd458361af1"},
		@@ -558,6 +576,7 @@ version = "1.1.5"
		description = "pytest plugin that allows you to add environment variables."
		optional = false
		python-versions = ">=3.8"
		groups = ["dev"]
		files = [
		{file = "pytest_env-1.1.5-py3-none-any.whl", hash = "sha256:ce90cf8772878515c24b31cd97c7fa1f4481cd68d588419fd45f10ecaee6bc30"},
		{file = "pytest_env-1.1.5.tar.gz", hash = "sha256:91209840aa0e43385073ac464a554ad2947cc2fd663a9debf88d03b01e0cc1cf"},
		@@ -575,6 +594,7 @@ version = "3.15.1"
		description = "Thin-wrapper around the mock package for easier use with pytest"
		optional = false
		python-versions = ">=3.9"
		groups = ["dev"]
		files = [
		{file = "pytest_mock-3.15.1-py3-none-any.whl", hash = "sha256:0a25e2eb88fe5168d535041d09a4529a188176ae608a6d249ee65abc0949630d"},
		{file = "pytest_mock-3.15.1.tar.gz", hash = "sha256:1849a238f6f396da19762269de72cb1814ab44416fa73a8686deac10b0d87a0f"},
		@@ -592,6 +612,7 @@ version = "6.3.0"
		description = "The python wrapper for the GitLab REST and GraphQL APIs."
		optional = false
		python-versions = ">=3.9.0"
		groups = ["main"]
		files = [
		{file = "python_gitlab-6.3.0-py3-none-any.whl", hash = "sha256:c4570b94f48fd2a612b08e453d2d7859b1a805b7068f680f6f6ce45dc9d38f94"},
		{file = "python_gitlab-6.3.0.tar.gz", hash = "sha256:3d7764956948949a2a3aff2078e6e93a5efea2db0a29566b5e142091bcc075aa"},
		@@ -612,6 +633,7 @@ version = "6.0.2"
		description = "YAML parser and emitter for Python"
		optional = false
		python-versions = ">=3.8"
		groups = ["main", "dev"]
		files = [
		{file = "PyYAML-6.0.2-cp310-cp310-macosx_10_9_x86_64.whl", hash = "sha256:0a9a2848a5b7feac301353437eb7d5957887edbf81d56e903999a75a3d743086"},
		{file = "PyYAML-6.0.2-cp310-cp310-macosx_11_0_arm64.whl", hash = "sha256:29717114e51c84ddfba879543fb232a6ed60086602313ca38cce623c1d62cfbf"},
		@@ -670,18 +692,19 @@ files = [

		[[package]]
		name = "requests"
		version = "2.32.3"
		version = "2.32.5"
		description = "Python HTTP for Humans."
		optional = false
		python-versions = ">=3.8"
		python-versions = ">=3.9"
		groups = ["main", "dev"]
		files = [
		{file = "requests-2.32.3-py3-none-any.whl", hash = "sha256:70761cfe03c773ceb22aa2f671b4757976145175cdfca038c02654d061d6dcc6"},
		{file = "requests-2.32.3.tar.gz", hash = "sha256:55365417734eb18255590a9ff9eb97e9e1da868d4ccd6402399eaf68af20a760"},
		{file = "requests-2.32.5-py3-none-any.whl", hash = "sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6"},
		{file = "requests-2.32.5.tar.gz", hash = "sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf"},
		]

		[package.dependencies]
		certifi = ">=2017.4.17"
		charset-normalizer = ">=2,<4"
		charset_normalizer = ">=2,<4"
		idna = ">=2.5,<4"
		urllib3 = ">=1.21.1,<3"

		@@ -695,6 +718,7 @@ version = "1.0.0"
		description = "A utility belt for advanced users of python-requests"
		optional = false
		python-versions = ">=2.7, !=3.0., !=3.1., !=3.2., !=3.3."
		groups = ["main"]
		files = [
		{file = "requests-toolbelt-1.0.0.tar.gz", hash = "sha256:7681a0a3d047012b5bdc0ee37d7f8f07ebe76ab08caeccfc3921ce23c88d5bc6"},
		{file = "requests_toolbelt-1.0.0-py2.py3-none-any.whl", hash = "sha256:cccfdd665f0a24fcf4726e690f65639d272bb0637b9b92dfd91a5568ccf6bd06"},
		@@ -709,6 +733,7 @@ version = "0.25.8"
		description = "A utility library for mocking out the `requests` Python library."
		optional = false
		python-versions = ">=3.8"
		groups = ["dev"]
		files = [
		{file = "responses-0.25.8-py3-none-any.whl", hash = "sha256:0c710af92def29c8352ceadff0c3fe340ace27cf5af1bbe46fb71275bcd2831c"},
		{file = "responses-0.25.8.tar.gz", hash = "sha256:9374d047a575c8f781b94454db5cab590b6029505f488d12899ddb10a4af1cf4"},
		@@ -720,7 +745,7 @@ requests = ">=2.30.0,<3.0"
		urllib3 = ">=1.25.10,<3.0"

		[package.extras]
		tests = ["coverage (>=6.0.0)", "flake8", "mypy", "pytest (>=7.0.0)", "pytest-asyncio", "pytest-cov", "pytest-httpserver", "tomli", "tomli-w", "types-PyYAML", "types-requests"]
		tests = ["coverage (>=6.0.0)", "flake8", "mypy", "pytest (>=7.0.0)", "pytest-asyncio", "pytest-cov", "pytest-httpserver", "tomli ; python_version < \"3.11\"", "tomli-w", "types-PyYAML", "types-requests"]

		[[package]]
		name = "ruff"
		@@ -728,6 +753,7 @@ version = "0.13.1"
		description = "An extremely fast Python linter and code formatter, written in Rust."
		optional = false
		python-versions = ">=3.7"
		groups = ["dev"]
		files = [
		{file = "ruff-0.13.1-py3-none-linux_armv6l.whl", hash = "sha256:b2abff595cc3cbfa55e509d89439b5a09a6ee3c252d92020bd2de240836cf45b"},
		{file = "ruff-0.13.1-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:4ee9f4249bf7f8bb3984c41bfaf6a658162cdb1b22e3103eabc7dd1dc5579334"},
		@@ -756,6 +782,7 @@ version = "6.0.12.20241230"
		description = "Typing stubs for PyYAML"
		optional = false
		python-versions = ">=3.8"
		groups = ["main"]
		files = [
		{file = "types_PyYAML-6.0.12.20241230-py3-none-any.whl", hash = "sha256:fa4d32565219b68e6dee5f67534c722e53c00d1cfc09c435ef04d7353e1e96e6"},
		{file = "types_pyyaml-6.0.12.20241230.tar.gz", hash = "sha256:7f07622dbd34bb9c8b264fe860a17e0efcad00d50b5f27e93984909d9363498c"},
		@@ -767,6 +794,7 @@ version = "4.12.2"
		description = "Backported and Experimental Type Hints for Python 3.8+"
		optional = false
		python-versions = ">=3.8"
		groups = ["main", "dev"]
		files = [
		{file = "typing_extensions-4.12.2-py3-none-any.whl", hash = "sha256:04e5ca0351e0f3f85c6853954072df659d0d13fac324d0072316b67d7794700d"},
		{file = "typing_extensions-4.12.2.tar.gz", hash = "sha256:1a7ead55c7e559dd4dee8856e3a88b41225abfe1ce8df57b7c13915fe121ffb8"},
		@@ -778,6 +806,7 @@ version = "0.4.0"
		description = "Runtime typing introspection tools"
		optional = false
		python-versions = ">=3.9"
		groups = ["main"]
		files = [
		{file = "typing_inspection-0.4.0-py3-none-any.whl", hash = "sha256:50e72559fcd2a6367a19f7a7e610e6afcb9fac940c650290eed893d61386832f"},
		{file = "typing_inspection-0.4.0.tar.gz", hash = "sha256:9765c87de36671694a67904bf2c96e395be9c6439bb6c87b5142569dcdd65122"},
		@@ -788,22 +817,23 @@ typing-extensions = ">=4.12.0"

		[[package]]
		name = "urllib3"
		version = "2.3.0"
		version = "2.5.0"
		description = "HTTP library with thread-safe connection pooling, file post, and more."
		optional = false
		python-versions = ">=3.9"
		groups = ["main", "dev"]
		files = [
		{file = "urllib3-2.3.0-py3-none-any.whl", hash = "sha256:1cee9ad369867bfdbbb48b7dd50374c0967a0bb7710050facf0dd6911440e3df"},
		{file = "urllib3-2.3.0.tar.gz", hash = "sha256:f8c5449b3cf0861679ce7e0503c7b44b5ec981bec0d1d3795a07f1ba96f0204d"},
		{file = "urllib3-2.5.0-py3-none-any.whl", hash = "sha256:e6b01673c0fa6a13e374b50871808eb3bf7046c4b125b216f6bf1cc604cff0dc"},
		{file = "urllib3-2.5.0.tar.gz", hash = "sha256:3fc47733c7e419d4bc3f6b3dc2b4f890bb743906a30d56ba4a5bfa4bbff92760"},
		]

		[package.extras]
		brotli = ["brotli (>=1.0.9)", "brotlicffi (>=0.8.0)"]
		brotli = ["brotli (>=1.0.9) ; platform_python_implementation == \"CPython\"", "brotlicffi (>=0.8.0) ; platform_python_implementation != \"CPython\""]
		h2 = ["h2 (>=4,<5)"]
		socks = ["pysocks (>=1.5.6,!=1.5.7,<2.0)"]
		zstd = ["zstandard (>=0.18.0)"]

		[metadata]
		lock-version = "2.0"
		python-versions = "^3.11"
		content-hash = "f80baee5180aee84eb01e3f3a93d9f3f7d4a3159cd320ad4da58c781e1cadfec"
		lock-version = "2.1"
		python-versions = ">=3.12"
		content-hash = "ae75a934b8dc4595b1368bac8a0e8ed0024ef4c1f64474eac18a89c8f5230ce6"

pyproject.toml

+6 −13

Original line number	Diff line number	Diff line
		[build-system]
		requires = ["poetry-core"]
		requires = ["poetry-core>=2.0.0,<3.0.0"]
		build-backend = "poetry.core.masonry.api"

		[tool.poetry]
		[project]
		name = "gitlab-butler"
		version = "1.1.16"
		description = "GitLab Butler CLI"
		authors = ["Pierre Smeyers <pierre.smeyers@gmail.com>"]
		authors = [{ name = "Pierre Smeyers", email = "pierre.smeyers@gmail.com" }]
		license = "LGPL"
		readme = "README.md"
		packages = [{include = "gitlab_butler"}]
		requires-python = ">=3.12"
		dependencies = ["python-gitlab (>=6.3.0,<7.0.0)", "pydantic (>=2.7.4,<3.0.0)", "pyyaml (>=6.0.1,<7.0.0)", "types-pyyaml (>=6.0.12.20240917,<7.0.0)"]

		[tool.poetry.scripts]
		[project.scripts]
		gitlab-butler = "gitlab_butler.main:run"

		[tool.poetry.dependencies]
		python = "^3.11"
		python-gitlab = "^6.0.0"
		pydantic = "^2.7.4"
		pyyaml = "^6.0.1"
		types-pyyaml = "^6.0.12.20240917"

		[tool.poetry.group.dev.dependencies]
		# new development dependencies can be added with 'poetry add -D yyy'
		pytest = "^8.0.0"
		@@ -66,4 +60,3 @@ warn_return_any = true
		warn_unused_configs = true
		disallow_untyped_defs = true
		files = "gitlab_butler/*/.py,tests/*/.py"