Bumps [poetry](https://github.com/python-poetry/poetry) from 2.3.2 to 2.3.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/python-poetry/poetry/releases">poetry's releases</a>.</em></p> <blockquote> <h2>2.3.3</h2> <h3>Fixed</h3> <ul> <li><strong>Fix a path traversal vulnerability in the wheel installer that could allow malicious wheel files to write files outside the intended installation directory</strong> (<a href="https://redirect.github.com/python-poetry/poetry/pull/10792">#10792</a>).</li> <li>Fix an issue where <code>git</code> dependencies from annotated tags could not be updated (<a href="https://redirect.github.com/python-poetry/poetry/pull/10719">#10719</a>).</li> <li>Fix an issue where empty <code>VIRTUAL_ENV</code> or <code>CONDA_PREFIX</code> environment variables (e.g., after <code>conda deactivate</code>) would cause Poetry to incorrectly detect an active virtualenv (<a href="https://redirect.github.com/python-poetry/poetry/pull/10784">#10784</a>).</li> <li>Fix an issue where an incomprehensible error message was printed when <code>.venv</code> was a file instead of a directory (<a href="https://redirect.github.com/python-poetry/poetry/pull/10777">#10777</a>).</li> <li>Fix an issue where HTTP Basic Authentication credentials could be corrupted during request preparation, causing authentication failures with long tokens (<a href="https://redirect.github.com/python-poetry/poetry/pull/10748">#10748</a>).</li> <li>Fix an issue where <code>poetry publish --no-interaction --build</code> requested user interaction (<a href="https://redirect.github.com/python-poetry/poetry/pull/10769">#10769</a>).</li> <li>Fix an issue where <code>poetry init</code> and <code>poetry new</code> created a deprecated <code>project.license</code> format (<a href="https://redirect.github.com/python-poetry/poetry/pull/10787">#10787</a>).</li> </ul> <h3>Docs</h3> <ul> <li>Clarify the differences between <code>poetry install</code> and <code>poetry update</code> (<a href="https://redirect.github.com/python-poetry/poetry/pull/10713">#10713</a>).</li> <li>Clarify the section of fields in the <code>pyproject.toml</code> examples (<a href="https://redirect.github.com/python-poetry/poetry/pull/10753">#10753</a>).</li> <li>Add a note about the different installation location when Python from the Microsoft Store is used (<a href="https://redirect.github.com/python-poetry/poetry/pull/10759">#10759</a>).</li> <li>Fix the system requirements for Poetry (<a href="https://redirect.github.com/python-poetry/poetry/pull/10739">#10739</a>).</li> <li>Fix the <code>poetry cache clear</code> example (<a href="https://redirect.github.com/python-poetry/poetry/pull/10749">#10749</a>).</li> <li>Fix the link to <code>pipx</code> installation instructions (<a href="https://redirect.github.com/python-poetry/poetry/pull/10783">#10783</a>).</li> </ul> <h3>poetry-core (<a href="https://github.com/python-poetry/poetry-core/releases/tag/2.3.2"><code>2.3.2</code></a>)</h3> <ul> <li>Fix an issue where <code>platform_release</code> could not be parsed on Debian Trixie (<a href="https://redirect.github.com/python-poetry/poetry-core/pull/930">#930</a>).</li> <li>Fix an issue where using <code>project.readme.text</code> in the <code>pyproject.toml</code> file resulted in broken metadata (<a href="https://redirect.github.com/python-poetry/poetry-core/pull/914">#914</a>).</li> <li>Fix an issue where dependency groups were considered equal when their resolved dependencies were equal, even if the groups themselves were not (<a href="https://redirect.github.com/python-poetry/poetry-core/pull/919">#919</a>).</li> <li>Fix an issue where removing a dependency from a group that included another group resulted in other dependencies being added to the included group (<a href="https://redirect.github.com/python-poetry/poetry-core/pull/922">#922</a>).</li> <li>Fix an issue where PEP 735 <code>include-group</code> entries were lost when <code>[tool.poetry.group]</code> also defined <code>include-groups</code> for the same group (<a href="https://redirect.github.com/python-poetry/poetry-core/pull/924">#924</a>).</li> <li>Fix an issue where the union of <code>&lt;value&gt; not in &lt;marker&gt;</code> constraints was wrongly treated as always satisfied (<a href="https://redirect.github.com/python-poetry/poetry-core/pull/925">#925</a>).</li> <li>Fix an issue where a post release with a local version identifier was wrongly allowed by a <code>&gt;</code> version constraint (<a href="https://redirect.github.com/python-poetry/poetry-core/pull/921">#921</a>).</li> <li>Fix an issue where a version with the local version identifier <code>0</code> was treated as equal to the corresponding public version (<a href="https://redirect.github.com/python-poetry/poetry-core/pull/920">#920</a>).</li> <li>Fix an issue where a <code>!= &lt;version&gt;</code> constraint wrongly disallowed pre releases and post releases of the specified version (<a href="https://redirect.github.com/python-poetry/poetry-core/pull/929">#929</a>).</li> <li>Fix an issue where <code>in</code> and <code>not in</code> constraints were wrongly not allowed by specific compound constraints (<a href="https://redirect.github.com/python-poetry/poetry-core/pull/927">#927</a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python-poetry/poetry/blob/main/CHANGELOG.md">poetry's changelog</a>.</em></p> <blockquote> <h2>[2.3.3] - 2026-03-29</h2> <h3>Fixed</h3> <ul> <li><strong>Fix a path traversal vulnerability in the wheel installer that could allow malicious wheel files to write files outside the intended installation directory</strong> (<a href="https://redirect.github.com/python-poetry/poetry/pull/10792">#10792</a>).</li> <li>Fix an issue where <code>git</code> dependencies from annotated tags could not be updated (<a href="https://redirect.github.com/python-poetry/poetry/pull/10719">#10719</a>).</li> <li>Fix an issue where empty <code>VIRTUAL_ENV</code> or <code>CONDA_PREFIX</code> environment variables (e.g., after <code>conda deactivate</code>) would cause Poetry to incorrectly detect an active virtualenv (<a href="https://redirect.github.com/python-poetry/poetry/pull/10784">#10784</a>).</li> <li>Fix an issue where an incomprehensible error message was printed when <code>.venv</code> was a file instead of a directory (<a href="https://redirect.github.com/python-poetry/poetry/pull/10777">#10777</a>).</li> <li>Fix an issue where HTTP Basic Authentication credentials could be corrupted during request preparation, causing authentication failures with long tokens (<a href="https://redirect.github.com/python-poetry/poetry/pull/10748">#10748</a>).</li> <li>Fix an issue where <code>poetry publish --no-interaction --build</code> requested user interaction (<a href="https://redirect.github.com/python-poetry/poetry/pull/10769">#10769</a>).</li> <li>Fix an issue where <code>poetry init</code> and <code>poetry new</code> created a deprecated <code>project.license</code> format (<a href="https://redirect.github.com/python-poetry/poetry/pull/10787">#10787</a>).</li> </ul> <h3>Docs</h3> <ul> <li>Clarify the differences between <code>poetry install</code> and <code>poetry update</code> (<a href="https://redirect.github.com/python-poetry/poetry/pull/10713">#10713</a>).</li> <li>Clarify the section of fields in the <code>pyproject.toml</code> examples (<a href="https://redirect.github.com/python-poetry/poetry/pull/10753">#10753</a>).</li> <li>Add a note about the different installation location when Python from the Microsoft Store is used (<a href="https://redirect.github.com/python-poetry/poetry/pull/10759">#10759</a>).</li> <li>Fix the system requirements for Poetry (<a href="https://redirect.github.com/python-poetry/poetry/pull/10739">#10739</a>).</li> <li>Fix the <code>poetry cache clear</code> example (<a href="https://redirect.github.com/python-poetry/poetry/pull/10749">#10749</a>).</li> <li>Fix the link to <code>pipx</code> installation instructions (<a href="https://redirect.github.com/python-poetry/poetry/pull/10783">#10783</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python-poetry/poetry/commit/3d0151ac03b5286e557ed1518b815ad225d52cb0"><code>3d0151a</code></a> release: bump version to 2.3.3</li> <li><a href="https://github.com/python-poetry/poetry/commit/89f09aad49ed7e6223ea2b8ebdf941e87bb5d5c6"><code>89f09aa</code></a> fix long path issue on Windows (<a href="https://redirect.github.com/python-poetry/poetry/issues/10794">#10794</a>)</li> <li><a href="https://github.com/python-poetry/poetry/commit/e068177d1bfef65de4c55cf71c36de27057f10e7"><code>e068177</code></a> installer: fix path traversal (<a href="https://redirect.github.com/python-poetry/poetry/issues/10792">#10792</a>)</li> <li><a href="https://github.com/python-poetry/poetry/commit/d76a2f67641ef1499065bdc8a0246448cbcf781c"><code>d76a2f6</code></a> chore: require new poetry-core version (<a href="https://redirect.github.com/python-poetry/poetry/issues/10790">#10790</a>)</li> <li><a href="https://github.com/python-poetry/poetry/commit/859d4439f2caf147010330beae1ad61274f009d4"><code>859d443</code></a> Update init &amp; new commands for PEP 639 (License) (<a href="https://redirect.github.com/python-poetry/poetry/issues/10787">#10787</a>)</li> <li><a href="https://github.com/python-poetry/poetry/commit/2ff2845af03539c98d2279b46074c908594427c4"><code>2ff2845</code></a> fix: pass auth via Request constructor instead of calling HTTPBasicAuth on un...</li> <li><a href="https://github.com/python-poetry/poetry/commit/286e43bba52ba60205e1e5c9a401019b45226bbe"><code>286e43b</code></a> env: improve error handling if <code>.venv</code> is not a directory but a file (<a href="https://redirect.github.com/python-poetry/poetry/issues/10777">#10777</a>)</li> <li><a href="https://github.com/python-poetry/poetry/commit/d6e72c972a48c4db98e1b8e1381544d33a2b66ef"><code>d6e72c9</code></a> Fix <code>publish --build</code> prompt behavior in non-interactive mode (<a href="https://redirect.github.com/python-poetry/poetry/issues/10769">#10769</a>)</li> <li><a href="https://github.com/python-poetry/poetry/commit/9fced1a13ded1a7dcec562f295b2362a1a4fa8dc"><code>9fced1a</code></a> fix(env): treat empty VIRTUAL_ENV/CONDA_PREFIX as unset (<a href="https://redirect.github.com/python-poetry/poetry/issues/10784">#10784</a>)</li> <li><a href="https://github.com/python-poetry/poetry/commit/96883826998f964ae12963fac0b4751bedd04b50"><code>9688382</code></a> docs: fix pipx install directions link (<a href="https://redirect.github.com/python-poetry/poetry/issues/10783">#10783</a>)</li> <li>Additional commits viewable in <a href="https://github.com/python-poetry/poetry/compare/2.3.2...2.3.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/canonical/charmcraft/network/alerts). </details>