chore(deps): update poetry to v2.0.1 (#3060)

Updated poetry and the associated pyproject.toml and lock files to Poetry's new major version: 2.0.1 This major version introduced 1 major breaking change - `poetry shell` was replaced with `poetry env activate` but are not functionally the same. `poetry env activate` [only prints how to activate the shell](https://python-poetry.org/docs/managing-environments/#activating-the-environment). `poetry shell` was moved to its own [plugin](https://github.com/python-poetry/poetry-plugin-shell), which only adds the one extra installation step of: `poetry self add poetry-plugin-shell`. We decided that despite this being an extra dependency, it was a better solution than what was provided in the official [docs](https://github.com/python-poetry/poetry-plugin-shell): `eval $(poetry env activate)` for bash. CONTRIBUTING docs were also updated. Tested by running `make lint` (inside and outside the environment), and `make all-tests`. Closes #3056
google · Jan 21, 2025 · 2267278 · 2267278
1 parent 22a535c
commit 2267278
Show file tree

Hide file tree

Showing 22 changed files with 1,105 additions and 642 deletions.
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
@@ -36,7 +36,7 @@ jobs:
         with:
           python-version: '3.11'
       - name: Install poetry
-        run: pip install poetry==1.8.4
+        run: pip install poetry==2.0.1
       - name: Set up poetry
         run: poetry install
       - name: Set up Go

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -39,7 +39,7 @@ You must install:
 1.  [Pylint](https://pypi.org/project/pylint)
 1.  [Yapf](https://github.com/google/yapf)
 1.  [Make](https://www.gnu.org/software/make/)
-1.  [Poetry](https://python-poetry.org/)
+1.  [Poetry](https://python-poetry.org/) >= 2.0.1
 2.  [Google Cloud SDK](https://cloud.google.com/sdk)
 3.  [Hugo](https://gohugo.io/installation/)
 4.  [Node JS](https://nodejs.org/) >= 18.17.x
@@ -55,6 +55,7 @@ git clone --recurse-submodules https://github.com/google/osv.dev
 # is recommended to help manage updates to the osv/osv-schema submodule
 cd osv.dev
 poetry install
+poetry self add poetry-plugin-shell
 poetry shell
 ```
 

diff --git a/cloudbuild.yaml b/cloudbuild.yaml
@@ -14,14 +14,14 @@
 
 steps:
 # noop to pull the ci image once before the tests try to run concurrently
-- name: 'gcr.io/oss-vdb/ci'
+- name: 'gcr.io/oss-vdb/ci-poetry2'
   args: ['echo']
 
 - name: 'gcr.io/cloud-builders/git'
   id: 'init'
   args: ['submodule', 'update', '--init']
 
-- name: 'gcr.io/oss-vdb/ci'
+- name: 'gcr.io/oss-vdb/ci-poetry2'
   id: 'lib-tests'
   args: ['bash', '-ex', 'run_tests.sh']
   env:
@@ -33,13 +33,13 @@ steps:
   waitFor: ['init']
 
 # Sourcerepo-sync-tests and lib-tests use the same env so have a race condition. 
-- name: 'gcr.io/oss-vdb/ci'
+- name: 'gcr.io/oss-vdb/ci-poetry2'
   id: 'sourcerepo-sync-tests'
   dir: 'tools/sourcerepo-sync'
   args: ['bash', '-ex', 'run_tests.sh']
   waitFor: ['init', 'lib-tests']
 
-- name: 'gcr.io/oss-vdb/ci'
+- name: 'gcr.io/oss-vdb/ci-poetry2'
   id: 'worker-tests'
   dir: gcp/workers/worker
   args: ['bash', '-ex', 'run_tests.sh']
@@ -49,7 +49,7 @@ steps:
     - DATASTORE_EMULATOR_PORT=8003
   waitFor: ['init', 'lib-tests']
 
-- name: 'gcr.io/oss-vdb/ci'
+- name: 'gcr.io/oss-vdb/ci-poetry2'
   id: 'importer-tests'
   dir: gcp/workers/importer
   args: ['bash', '-ex', 'run_tests.sh']
@@ -60,7 +60,7 @@ steps:
   # importer uses same poetry as worker, 'poetry install' may break if run concurrently
   waitFor: ['init', 'worker-tests']
 
-- name: 'gcr.io/oss-vdb/ci'
+- name: 'gcr.io/oss-vdb/ci-poetry2'
   id: 'alias-tests'
   dir: gcp/workers/alias
   args: ['bash', '-ex', 'run_tests.sh']
@@ -70,7 +70,7 @@ steps:
   # alias uses same poetry as worker, 'poetry install' may break if run concurrently
   waitFor: ['init', 'importer-tests']
 
-- name: 'gcr.io/oss-vdb/ci'
+- name: 'gcr.io/oss-vdb/ci-poetry2'
   id: 'website-tests'
   dir: gcp/website
   args: ['bash', '-ex', 'run_tests.sh']
@@ -80,13 +80,13 @@ steps:
     - DATASTORE_EMULATOR_PORT=8004
   waitFor: ['init', 'lib-tests']
 
-- name: 'gcr.io/oss-vdb/ci'
+- name: 'gcr.io/oss-vdb/ci-poetry2'
   id: 'vulnfeed-tests'
   dir: vulnfeeds
   args: ['bash', '-ex', 'run_tests.sh']
   waitFor: ['init']
 
-- name: 'gcr.io/oss-vdb/ci'
+- name: 'gcr.io/oss-vdb/ci-poetry2'
   id: 'api-tests'
   dir: gcp/api
   #TODO: Update test scripts to support not supplying a credential.

diff --git a/docker/ci/Dockerfile b/docker/ci/Dockerfile
@@ -24,7 +24,7 @@ COPY daemon.json /etc/docker/daemon.json
 COPY install_go.sh /tmp/install_go.sh
 
 RUN "/tmp/install_go.sh"
-ENV PATH "$PATH:/root/.go/bin:/root/go/bin"
+ENV PATH "$PATH:/usr/local/go/bin"
 
 RUN go install -tags extended github.com/gohugoio/[email protected]
 

diff --git a/docker/ci/install_go.sh b/docker/ci/install_go.sh
@@ -18,5 +18,5 @@
 set -eux
 
 # Download and install Go
-# https://pkg.go.dev/golang.org/x/tools/cmd/getgo#section-readme
-curl -LO https://get.golang.org/$(uname)/go_installer && chmod +x go_installer && SHELL="bash" ./go_installer -version 1.23.1 && rm go_installer
+# https://go.dev/doc/install
+curl https://go.dev/dl/go1.23.5.linux-amd64.tar.gz -LO && rm -rf /usr/local/go && tar -C /usr/local -xzf go1.23.5.linux-amd64.tar.gz
diff --git a/docker/poetry/requirements.in b/docker/poetry/requirements.in
@@ -2,4 +2,4 @@
 # To regenerate requirements.txt, use
 #     pip-compile --generate-hashes requirements.in
 # (requires pip-tools to be installed in current python environment)
-poetry==1.8.5
+poetry==2.0.1
diff --git a/docker/poetry/requirements.txt b/docker/poetry/requirements.txt
@@ -4,6 +4,10 @@
 #
 #    pip-compile --generate-hashes requirements.in
 #
+backports-tarfile==1.2.0 \
+    --hash=sha256:77e284d754527b01fb1e6fa8a1afe577858ebe4e9dad8919e34c862cb399bc34 \
+    --hash=sha256:d75e02c268746e1b8144c278978b6e98e85de6ad16f8e4b0844a154557eca991
+    # via jaraco-context
 build==1.2.2.post1 \
     --hash=sha256:1d61c0887fa860c01971625baae8bdd338e517b836a2f70dd1f7aa3a6b2fc5b5 \
     --hash=sha256:b36993e92ca9375a219c99e606a122ff365a760a2d4bba0caa09bd5278b608b7
@@ -199,9 +203,7 @@ cleo==2.1.0 \
 crashtest==0.4.1 \
     --hash=sha256:80d7b1f316ebfbd429f648076d6275c877ba30ba48979de4191714a75266f0ce \
     --hash=sha256:8d23eac5fa660409f57472e3851dab7ac18aba459a8d19cbbba86d3d5aecd2a5
-    # via
-    #   cleo
-    #   poetry
+    # via cleo
 cryptography==44.0.0 \
     --hash=sha256:1923cb251c04be85eec9fda837661c67c1049063305d6be5721643c22dd4e2b7 \
     --hash=sha256:37d76e6863da3774cd9db5b409a9ecfd2c71c981c38788d3fcfaf177f447b731 \
@@ -235,76 +237,49 @@ distlib==0.3.9 \
     --hash=sha256:47f8c22fd27c27e25a65601af709b38e4f0a45ea4fc2e710f65755fa8caaaf87 \
     --hash=sha256:a60f20dea646b8a33f3e7772f74dc0b2d0772d2837ee1342a00645c81edf9403
     # via virtualenv
-dulwich==0.21.7 \
-    --hash=sha256:0fc3078a1ba04c588fabb0969d3530efd5cd1ce2cf248eefb6baf7cbc15fc285 \
-    --hash=sha256:10893105c6566fc95bc2a67b61df7cc1e8f9126d02a1df6a8b2b82eb59db8ab9 \
-    --hash=sha256:12d61334a575474e707614f2e93d6ed4cdae9eb47214f9277076d9e5615171d3 \
-    --hash=sha256:2590e9b431efa94fc356ae33b38f5e64f1834ec3a94a6ac3a64283b206d07aa3 \
-    --hash=sha256:25c3ab8fb2e201ad2031ddd32e4c68b7c03cb34b24a5ff477b7a7dcef86372f5 \
-    --hash=sha256:274c18ec3599a92a9b67abaf110e4f181a4f779ee1aaab9e23a72e89d71b2bd9 \
-    --hash=sha256:29bb5c1d70eba155ded41ed8a62be2f72edbb3c77b08f65b89c03976292f6d1b \
-    --hash=sha256:2bc12697f0918bee324c18836053644035362bb3983dc1b210318f2fed1d7132 \
-    --hash=sha256:2e2c66888207b71cd1daa2acb06d3984a6bc13787b837397a64117aa9fc5936a \
-    --hash=sha256:404b8edeb3c3a86c47c0a498699fc064c93fa1f8bab2ffe919e8ab03eafaaad3 \
-    --hash=sha256:40dcbd29ba30ba2c5bfbab07a61a5f20095541d5ac66d813056c122244df4ac0 \
-    --hash=sha256:460b3849d5c3d3818a80743b4f7a0094c893c559f678e56a02fff570b49a644a \
-    --hash=sha256:460ba74bdb19f8d498786ae7776745875059b1178066208c0fd509792d7f7bfc \
-    --hash=sha256:4637cbd8ed1012f67e1068aaed19fcc8b649bcf3e9e26649826a303298c89b9d \
-    --hash=sha256:471305af74790827fcbafe330fc2e8bdcee4fb56ca1177c8c481b1c8f806c4a4 \
-    --hash=sha256:4a043b90958cec866b4edc6aef5fe3c2c96a664d0b357e1682a46f6c477273c4 \
-    --hash=sha256:4b09bc3a64fb70132ec14326ecbe6e0555381108caff3496898962c4136a48c6 \
-    --hash=sha256:4bc4c5366eaf26dda3fdffe160a3b515666ed27c2419f1d483da285ac1411de0 \
-    --hash=sha256:4c51058ec4c0b45dc5189225b9e0c671b96ca9713c1daf71d622c13b0ab07681 \
-    --hash=sha256:4f18f0a311fb7734b033a3101292b932158cade54b74d1c44db519e42825e5a2 \
-    --hash=sha256:61e3451bd3d3844f2dca53f131982553be4d1b1e1ebd9db701843dd76c4dba31 \
-    --hash=sha256:62bfb26bdce869cd40be443dfd93143caea7089b165d2dcc33de40f6ac9d812a \
-    --hash=sha256:675a612ce913081beb0f37b286891e795d905691dfccfb9bf73721dca6757cde \
-    --hash=sha256:6bd69921fdd813b7469a3c77bc75c1783cc1d8d72ab15a406598e5a3ba1a1503 \
-    --hash=sha256:6c589468e5c0cd84e97eb7ec209ab005a2cb69399e8c5861c3edfe38989ac3a8 \
-    --hash=sha256:6de6f8de4a453fdbae8062a6faa652255d22a3d8bce0cd6d2d6701305c75f2b3 \
-    --hash=sha256:739b191f61e1c4ce18ac7d520e7a7cbda00e182c3489552408237200ce8411ad \
-    --hash=sha256:74700e4c7d532877355743336c36f51b414d01e92ba7d304c4f8d9a5946dbc81 \
-    --hash=sha256:7836da3f4110ce684dcd53489015fb7fa94ed33c5276e3318b8b1cbcb5b71e08 \
-    --hash=sha256:7bca4b86e96d6ef18c5bc39828ea349efb5be2f9b1f6ac9863f90589bac1084d \
-    --hash=sha256:7d8ab29c660125db52106775caa1f8f7f77a69ed1fe8bc4b42bdf115731a25bf \
-    --hash=sha256:808e8b9cc0aa9ac74870b49db4f9f39a52fb61694573f84b9c0613c928d4caf8 \
-    --hash=sha256:817822f970e196e757ae01281ecbf21369383285b9f4a83496312204cf889b8c \
-    --hash=sha256:8278835e168dd097089f9e53088c7a69c6ca0841aef580d9603eafe9aea8c358 \
-    --hash=sha256:858842b30ad6486aacaa607d60bab9c9a29e7c59dc2d9cb77ae5a94053878c08 \
-    --hash=sha256:869eb7be48243e695673b07905d18b73d1054a85e1f6e298fe63ba2843bb2ca1 \
-    --hash=sha256:8869fc8ec3dda743e03d06d698ad489b3705775fe62825e00fa95aa158097fc0 \
-    --hash=sha256:8929c37986c83deb4eb500c766ee28b6670285b512402647ee02a857320e377c \
-    --hash=sha256:a0650ec77d89cb947e3e4bbd4841c96f74e52b4650830112c3057a8ca891dc2f \
-    --hash=sha256:a7b5624b02ef808cdc62dabd47eb10cd4ac15e8ac6df9e2e88b6ac6b40133673 \
-    --hash=sha256:a9e9c66833cea580c3ac12927e4b9711985d76afca98da971405d414de60e968 \
-    --hash=sha256:b0d2e4485b98695bf95350ce9d38b1bb0aaac2c34ad00a0df789aa33c934469b \
-    --hash=sha256:c01a735b9a171dcb634a97a3cec1b174cfbfa8e840156870384b633da0460f18 \
-    --hash=sha256:c3a539b4696a42fbdb7412cb7b66a4d4d332761299d3613d90a642923c7560e1 \
-    --hash=sha256:c3d1685f320907a52c40fd5890627945c51f3a5fa4bcfe10edb24fec79caadec \
-    --hash=sha256:c92e72c43c9e9e936b01a57167e0ea77d3fd2d82416edf9489faa87278a1cdf7 \
-    --hash=sha256:cc1e11be527ac06316539b57a7688bcb1b6a3e53933bc2f844397bc50734e9ae \
-    --hash=sha256:ce8db196e79c1f381469410d26fb1d8b89c6b87a4e7f00ff418c22a35121405c \
-    --hash=sha256:d05d3c781bc74e2c2a2a8f4e4e2ed693540fbe88e6ac36df81deac574a6dad99 \
-    --hash=sha256:d097e963eb6b9fa53266146471531ad9c6765bf390849230311514546ed64db2 \
-    --hash=sha256:d4a2d76c96426e791556836ef43542b639def81be4f1d6d4322cd886c115eae1 \
-    --hash=sha256:d4c0110798099bb7d36a110090f2688050703065448895c4f53ade808d889dd3 \
-    --hash=sha256:d54c9d0e845be26f65f954dff13a1cd3f2b9739820c19064257b8fd7435ab263 \
-    --hash=sha256:d5882e70b74ac3c736a42d3fdd4f5f2e6570637f59ad5d3e684760290b58f041 \
-    --hash=sha256:d62446797163317a397a10080c6397ffaaca51a7804c0120b334f8165736c56a \
-    --hash=sha256:d96ca5e0dde49376fbcb44f10eddb6c30284a87bd03bb577c59bb0a1f63903fa \
-    --hash=sha256:e0064363bd5e814359657ae32517fa8001e8573d9d040bd997908d488ab886ed \
-    --hash=sha256:e138d516baa6b5bafbe8f030eccc544d0d486d6819b82387fc0e285e62ef5261 \
-    --hash=sha256:e1957b65f96e36c301e419d7adaadcff47647c30eb072468901bb683b1000bc5 \
-    --hash=sha256:e25953c7acbbe4e19650d0225af1c0c0e6882f8bddd2056f75c1cc2b109b88ad \
-    --hash=sha256:e274cebaf345f0b1e3b70197f2651de92b652386b68020cfd3bf61bc30f6eaaa \
-    --hash=sha256:e598d743c6c0548ebcd2baf94aa9c8bfacb787ea671eeeb5828cfbd7d56b552f \
-    --hash=sha256:e84cc606b1f581733df4350ca4070e6a8b30be3662bbb81a590b177d0c996c91 \
-    --hash=sha256:ecd315847dea406a4decfa39d388a2521e4e31acde3bd9c2609c989e817c6d62 \
-    --hash=sha256:ed60d1f610ef6437586f7768254c2a93820ccbd4cfdac7d182cf2d6e615969bb \
-    --hash=sha256:f34bf9b9fa9308376263fd9ac43143c7c09da9bc75037bb75c6c2423a151b92c \
-    --hash=sha256:f6c88acb60a1f4d31bd6d13bfba465853b3df940ee4a0f2a3d6c7a0778c705b7 \
-    --hash=sha256:fa4d14767cf7a49c9231c2e52cb2a3e90d0c83f843eb6a2ca2b5d81d254cf6b9 \
-    --hash=sha256:ffc27fb063f740712e02b4d2f826aee8bbed737ed799962fef625e2ce56e2d29
+dulwich==0.22.7 \
+    --hash=sha256:007d8160b511bb149d31c08548307982f6ce752a46e7088b020517de00c3bd46 \
+    --hash=sha256:01544915c4056d0820de8cf126b971f7c180743ff64c4435c89168e44b30df4b \
+    --hash=sha256:01e484d44014fef78cdef3b3adc34564808b4677497a57a0950c90a1d6349be3 \
+    --hash=sha256:052715452b729544c611a107b2eef6111e527f041c1b666f8ed36c04e39c36b5 \
+    --hash=sha256:10c5ee20430714ea6a79dde22c1f77078848930d27021aa810204738bc175e95 \
+    --hash=sha256:1782854c10878b5cb8423e74b0ef4256c3667f7b0266513af028ac28dbab1f2d \
+    --hash=sha256:1cbd5ecbc95e18c745965fc7b2b71209443987a99e499c7bb074234d7c6142e2 \
+    --hash=sha256:2220c8b7cac5794e2260a924e81b05baa7836c18ba805d5a6731071a5ff6b860 \
+    --hash=sha256:257abd49a768a52cf7f508daf2d30fe73f54fd32b7a674abd43817f66b0ca17b \
+    --hash=sha256:2b7a3ac4baa49bd988cc0d0891a93aa26307c01f35caeed8729b7928a1f483af \
+    --hash=sha256:40260034a6ecc3141a0d42360e888a73e58b9c0c9363c454cae182957fe602ac \
+    --hash=sha256:5ada6a2fd400a4f51adfedd0267bfb08c61e2d9846c18ea653b0eb88a7b851d0 \
+    --hash=sha256:5b9806a75f4b74fa891926b1d830e21f9cead80ed6dd803ed668369b26fb8b5f \
+    --hash=sha256:62027dfccee97268eadf0c54df3d72ce30e4402cf5cf06c021e474b9a9eb3536 \
+    --hash=sha256:637a9ac27512b8c04e6a29bf92e3f73386cd85dfe8609f523ffbc96e659bde4b \
+    --hash=sha256:6bda2eca0847c30a9312a72f219af9e63feb7d2ca89f47fdaa240b0d0cdd6b84 \
+    --hash=sha256:6bea11b98e854ff2abec390eeac752586b83921a22091dae65470ccbb003fc1b \
+    --hash=sha256:6c830d63c691b5f979964a2d6b325930b7a53f14836598352690601cd205f04b \
+    --hash=sha256:71b20bd6a25658e968e813eb69164332d3a2ab6029b51d3c6af8b64f2471847a \
+    --hash=sha256:74b7cf6f0d46ac777be617dad7c1b992380004de74c0e0652bed174686249f34 \
+    --hash=sha256:753eec461434f0ccbe0956ec825250e12230e8f1b365c8be1604386d94c2d8d0 \
+    --hash=sha256:7649f0c9b4760d72768805155e66579761f282fdca123e351019c85efce811eb \
+    --hash=sha256:7d72ce1377eac23bd77aa3541ceb91f2d8bd68687659f8625af8301f0b6b0a63 \
+    --hash=sha256:8dd5df3919c648887e550e836f87b4b83f1429876adce5ead5b5977e333c874d \
+    --hash=sha256:925cec97aeefda3f950e45e8d4c247e4ce6f83b6ee96e383c82f9bced626151f \
+    --hash=sha256:986943e27a5c94c0be42fdcc688be1ae1a1349a3dbaa773fa7f9bdada1232b68 \
+    --hash=sha256:9c01db2ef6d5f5b9192c0011624701b0de328868fe0c32601368cd337e77cd1a \
+    --hash=sha256:9f418779837a3249b7dfc4b3dc7266fa40687e5f0249eedfa7185560ba1ee148 \
+    --hash=sha256:9f5954cd491313743d7bd3623d323b72afceb83d2c2a47921f621bdd9d4c615b \
+    --hash=sha256:a64e61fa6ab60db0f897f1c30f32b26b330d3a9dc264f089ee9c44f5900fb657 \
+    --hash=sha256:a8886b2c9750ba15193356d9e8608e031cd89a780d0afc53b3101391605b3793 \
+    --hash=sha256:aa0bb9afa799c0301b2760e9af99083a2b08f655c55037945b6a5e227566adc1 \
+    --hash=sha256:b25848041c51d09affafd2708236205cc4483bed8f7f43ecbe63b6a66b447604 \
+    --hash=sha256:bb258c62d7fb4cfe03b3fba09f702ebb84a924f2f004833435e32c93fe8a7f13 \
+    --hash=sha256:c68ab3540809bedcdd9b99e51c12adf11c2ab26554f74d899d8cf55bfa2639a6 \
+    --hash=sha256:ca7ed207956001e6a8a2e3f319cdc37591e53f7eb04aedafa78f96768048c53e \
+    --hash=sha256:cdbcf206d4b1e5ba2affc6189948cb292cc647593876b96a0b71db44e79a05a1 \
+    --hash=sha256:d53935832dd182d4c1415042187093efcee988af5cd397fb1f394f5bb27f0707 \
+    --hash=sha256:df5a179e5d95ac0263b5e0ccd53311eac486091979dcac106c5cc9e0ee4f2aa2 \
+    --hash=sha256:f73668ecc29e0a20d20970489fffe2ba466e5486eae2f20104bc38bcbe611f64 \
+    --hash=sha256:fdbd087e9e99bc809b15864ebc79dbefe869e3038b64c953d7736f6e6b382dc7 \
+    --hash=sha256:fe324dc40b93e8be996c9fa9291a439bef835a92a2e4cb5c8cbdb1171c168fd6
     # via poetry
 fastjsonschema==2.21.1 \
     --hash=sha256:794d4f0a58f848961ba16af7b9c85a3e88cd360df008c59aac6fc5ae9323b5d4 \
@@ -332,20 +307,30 @@ jaraco-classes==3.4.0 \
     --hash=sha256:47a024b51d0239c0dd8c8540c6c7f484be3b8fcf0b2d85c13825780d3b3f3acd \
     --hash=sha256:f662826b6bed8cace05e7ff873ce0f9283b5c924470fe664fff1c2f00f581790
     # via keyring
+jaraco-context==6.0.1 \
+    --hash=sha256:9bae4ea555cf0b14938dc0aee7c9f32ed303aa20a3b73e7dc80111628792d1b3 \
+    --hash=sha256:f797fc481b490edb305122c9181830a3a5b76d84ef6d1aef2fb9b47ab956f9e4
+    # via keyring
+jaraco-functools==4.1.0 \
+    --hash=sha256:70f7e0e2ae076498e212562325e805204fc092d7b4c17e0e86c959e249701a9d \
+    --hash=sha256:ad159f13428bc4acbf5541ad6dec511f91573b90fba04df61dafa2a1231cf649
+    # via keyring
 jeepney==0.8.0 \
     --hash=sha256:5efe48d255973902f6badc3ce55e2aa6c5c3b3bc642059ef3a91247bcfcc5806 \
     --hash=sha256:c0a454ad016ca575060802ee4d590dd912e35c122fa04e70306de3d076cce755
     # via
     #   keyring
     #   secretstorage
-keyring==24.3.1 \
-    --hash=sha256:c3327b6ffafc0e8befbdb597cacdb4928ffe5c1212f7645f186e6d9957a898db \
-    --hash=sha256:df38a4d7419a6a60fea5cef1e45a948a3e8430dd12ad88b0f423c5c143906218
+keyring==25.6.0 \
+    --hash=sha256:0b39998aa941431eb3d9b0d4b2460bc773b9df6fed7621c2dfb291a7e0187a66 \
+    --hash=sha256:552a3f7af126ece7ed5c89753650eec89c7eaae8617d0aa4d9ad2b75111266bd
     # via poetry
 more-itertools==10.5.0 \
     --hash=sha256:037b0d3203ce90cca8ab1defbbdac29d5f993fc20131f3664dc8d6acfa872aef \
     --hash=sha256:5482bfef7849c25dc3c6dd53a6173ae4795da2a41a80faea6700d9f5846c5da6
-    # via jaraco-classes
+    # via
+    #   jaraco-classes
+    #   jaraco-functools
 msgpack==1.1.0 \
     --hash=sha256:06f5fd2f6bb2a7914922d935d3b8bb4a7fff3a9a91cfce6d06c13bc42bec975b \
     --hash=sha256:071603e2f0771c45ad9bc65719291c568d4edf120b44eb36324dcb02a13bfddf \
@@ -418,10 +403,6 @@ packaging==24.2 \
     # via
     #   build
     #   poetry
-pexpect==4.9.0 \
-    --hash=sha256:7236d1e080e4936be2dc3e326cec0af72acf9212a7e1d060210e70a47e253523 \
-    --hash=sha256:ee7d41123f3c9911050ea2c2dac107568dc43b2d3b0c7557a33212c398ead30f
-    # via poetry
 pkginfo==1.12.0 \
     --hash=sha256:8ad91a0445a036782b9366ef8b8c2c50291f83a553478ba8580c73d3215700cf \
     --hash=sha256:dcd589c9be4da8973eceffa247733c144812759aa67eaf4bbf97016a02f39088
@@ -432,26 +413,14 @@ platformdirs==4.3.6 \
     # via
     #   poetry
     #   virtualenv
-poetry==1.8.5 \
-    --hash=sha256:5505fba69bf2a792b5d7402d21839c853644337392b745109b86a23010cce5f3 \
-    --hash=sha256:eb2c88d224f58f36df8f7b36d6c380c07d1001bca28bde620f68fc086e881b70
-    # via
-    #   -r requirements.in
-    #   poetry-plugin-export
-poetry-core==1.9.1 \
-    --hash=sha256:6f45dd3598e0de8d9b0367360253d4c5d4d0110c8f5c71120a14f0e0f116c1a0 \
-    --hash=sha256:7a2d49214bf58b4f17f99d6891d947a9836c9899a67a5069f52d7b67217f61b8
-    # via
-    #   poetry
-    #   poetry-plugin-export
-poetry-plugin-export==1.8.0 \
-    --hash=sha256:1fa6168a85d59395d835ca564bc19862a7c76061e60c3e7dfaec70d50937fc61 \
-    --hash=sha256:adbe232cfa0cc04991ea3680c865cf748bff27593b9abcb1f35fb50ed7ba2c22
+poetry==2.0.1 \
+    --hash=sha256:a2987c3162f6ded6db890701a6fc657d2cfcc702e9421ef4c345211c8bffc5d5 \
+    --hash=sha256:eb780a8acbd6eec4bc95e8ba104058c5129ea5a44115fc9b1fc0a2235412734d
+    # via -r requirements.in
+poetry-core==2.0.1 \
+    --hash=sha256:10177c2772469d9032a49f0d8707af761b1c597cea3b4fb31546e5cd436eb157 \
+    --hash=sha256:a3c7009536522cda4eb0fb3805c9dc935b5537f8727dd01efb9c15e51a17552b
     # via poetry
-ptyprocess==0.7.0 \
-    --hash=sha256:4b41f3967fce3af57cc7e94b888626c18bf37a083e3651ca8feeb66d492fef35 \
-    --hash=sha256:5c5d0a3b48ceee0b48485e0c26037c0acd7d29765ca3fbb5cb3831d347423220
-    # via pexpect
 pycparser==2.22 \
     --hash=sha256:491c8be9c040f5390f5bf44a5b07752bd07f56edf992381b05c701439eec10f6 \
     --hash=sha256:c3702b6d3dd8c7abc1afa565d7e63d53a1d0bd86cdc24edd75470f4de499cfcc