Bump poetry from 1.2.0b2 to 1.2.0b3 in /.github/workflows

[dependabot]

Bumps poetry from 1.2.0b2 to 1.2.0b3.

Release notes

Sourced from poetry's releases.

1.2.0b3

Important: This release fixes a critical issue that prevented hashes from being retrieved when locking dependencies, due to a breaking change on PyPI JSON API (see #5972 and the upstream change for more details).

After upgrading, you have to clear Poetry cache manually to get that feature working correctly again:

$ poetry cache clear pypi --all

Added

• Added --only-root to poetry install to install a project without its dependencies (#5783)

Changed

• Improved user experience of poetry init (#5838)
• Added default timeout for all HTTP requests, to avoid hanging requests (#5881)
• Updated poetry init to better specify how to skip adding dependencies (#5946)
• Updated Poetry repository names to avoid clashes with user-defined repositories (#5910)

Fixed

• Fixed an issue where extras where not handled if they did not match the case-sensitive name of the packages (#4122)
• Fixed configuration of experimental.system-git-client option through poetry config (#5818)
• Fixed uninstallation of git dependencies on Windows (#5836)
• Fixed an issue where ~ was not correctly expanded in virtualenvs.path (#5848)
• Fixed an issue where installing/locking dependencies would hang when setting an incorrect git repository (#5880)
• Fixed an issue in poetry publish when keyring was not properly configured (#5889)
• Fixed duplicated line output in console (#5890)
• Fixed an issue where the same wheels where downloaded multiple times during installation (#5871)
• Fixed an issue where dependencies hashes could not be retrieved when locking due to a breaking change on PyPI JSON API (#5973)
• Fixed an issue where a dependency with non-requested extras could not be installed if it is requested with extras by another dependency (#5770)
• Updated git backend to correctly read local/global git config when using dulwich as a git backend (#5935)
• Fixed an issue where optional dependencies where not correctly exported when defining groups (#5819)

Docs

• Fixed configuration instructions for repositories specification (#5809)
• Added a link to dependency specification from pyproject.toml (#5815)
• Improved zsh autocompletion instructions (#5859)
• Improved installation and update documentations (#5857)
• Improved exact requirements documentation (#5874)
• Added documentation for @ operator (#5822)
• Improved autocompletion documentation (#5879)
• Improved scripts definition documentation (#5884)

Changelog

Sourced from poetry's changelog.

[1.2.0b3] - 2022-07-13

Important: This release fixes a critical issue that prevented hashes from being retrieved when locking dependencies, due to a breaking change on PyPI JSON API (see #5972 and the upstream change for more details).

After upgrading, you have to clear Poetry cache manually to get that feature working correctly again:

$ poetry cache clear pypi --all

Added

• Added --only-root to poetry install to install a project without its dependencies (#5783)

Changed

• Improved user experience of poetry init (#5838)
• Added default timeout for all HTTP requests, to avoid hanging requests (#5881)
• Updated poetry init to better specify how to skip adding dependencies (#5946)
• Updated Poetry repository names to avoid clashes with user-defined repositories (#5910)

Fixed

• Fixed an issue where extras where not handled if they did not match the case-sensitive name of the packages (#4122)
• Fixed configuration of experimental.system-git-client option through poetry config (#5818)
• Fixed uninstallation of git dependencies on Windows (#5836)
• Fixed an issue where ~ was not correctly expanded in virtualenvs.path (#5848)
• Fixed an issue where installing/locking dependencies would hang when setting an incorrect git repository (#5880)
• Fixed an issue in poetry publish when keyring was not properly configured (#5889)
• Fixed duplicated line output in console (#5890)
• Fixed an issue where the same wheels where downloaded multiple times during installation (#5871)
• Fixed an issue where dependencies hashes could not be retrieved when locking due to a breaking change on PyPI JSON API (#5973)
• Fixed an issue where a dependency with non-requested extras could not be installed if it is requested with extras by another dependency (#5770)
• Updated git backend to correctly read local/global git config when using dulwich as a git backend (#5935)
• Fixed an issue where optional dependencies where not correctly exported when defining

... (truncated)

Commits

• 93b313b chore: bump version to 1.2.0b3
• 37b08b7 build(deps): pin poetry-core to 1.1.0b3
• d456222 doc: add changelog for 1.2.0b3
• fdec38b don't export unwanted extras
• c2c69a3 every Repository is named (#5910)
• f97b372 feat(get-poetry): mention install.python-poetry.org in deprecation message
• 45a1a3b avoid private tomlkit method
• 879a144 Use dulwich to fetch global and local git config (#5935)
• bd9c5c8 solver: fix special case where a direct origin dependency without extras is r...
• 92dde5b replace deprecated method call
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)