Skip to content

Update dependency python-poetry/poetry to v2.4.2 - #1429

Merged
simu merged 1 commit into
masterfrom
renovate/python-poetry-poetry-2.x
Aug 31, 2026
Merged

Update dependency python-poetry/poetry to v2.4.2#1429
simu merged 1 commit into
masterfrom
renovate/python-poetry-poetry-2.x

Conversation

@renovate

@renovate renovate Bot commented Aug 29, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
python-poetry/poetry patch 2.4.12.4.2

Release Notes

python-poetry/poetry (python-poetry/poetry)

v2.4.2

Compare Source

Fixed
  • Fix an issue where Poetry installs an artifact that is not listed in the lockfile when the package source does not provide a hash for this artifact (#​11030).
  • Fix a path traversal vulnerability when downloading files from a compromised URL and/or package source (#​11029).
  • Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory (#​11027).

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependency Pull requests that update a dependency file label Aug 29, 2026
@renovate
renovate Bot requested a review from a team as a code owner August 29, 2026 22:48
@renovate renovate Bot added the dependency Pull requests that update a dependency file label Aug 29, 2026
@renovate
renovate Bot force-pushed the renovate/python-poetry-poetry-2.x branch from d66f78b to 7a7a836 Compare August 31, 2026 06:04
@renovate
renovate Bot force-pushed the renovate/python-poetry-poetry-2.x branch 2 times, most recently from d0bd743 to 560783f Compare August 31, 2026 10:16
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
renovate Bot force-pushed the renovate/python-poetry-poetry-2.x branch from 560783f to 15b92da Compare August 31, 2026 10:28
@simu
simu enabled auto-merge August 31, 2026 10:28
@simu
simu merged commit b01dde7 into master Aug 31, 2026
26 checks passed
@simu
simu deleted the renovate/python-poetry-poetry-2.x branch August 31, 2026 10:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependency Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant