diff --git a/memory-update.md b/memory-update.md index 9076e259..b8bdb83d 100644 --- a/memory-update.md +++ b/memory-update.md @@ -95,3 +95,8 @@ - CI failures appeared in `python-ci` on macOS because `pip-audit` surfaced Starlette issue as `CVE-2025-62727` while workflows ignored only `GHSA-wj6h-64fc-37mp`. - Updated strict audit workflows to ignore both IDs so the existing temporary exception is robust to advisory ID alias/reporting differences. - Updated files: `.github/workflows/python-ci.yml`, `.github/workflows/dependency-audit.yml`, `.github/workflows/release-integrity.yml`. + +## Poetry Lock Sync for Tests Workflow (2026-02-26) +- `tests.yml` uses Poetry (`poetry install`), and the job failed because `pyproject.toml` had drifted from `poetry.lock`. +- Regenerated `poetry.lock` with Poetry 2.3.2 so lock metadata/dependency graph matches the current project file. +- Result: CI should no longer fail with "pyproject.toml changed significantly since poetry.lock was last generated". diff --git a/poetry.lock b/poetry.lock index 27b513b5..6186d0da 100644 --- a/poetry.lock +++ b/poetry.lock @@ -1,4 +1,4 @@ -# This file is automatically @generated by Poetry 2.2.1 and should not be changed by hand. +# This file is automatically @generated by Poetry 2.3.2 and should not be changed by hand. [[package]] name = "aiohappyeyeballs" @@ -870,6 +870,7 @@ files = [ {file = "colorama-0.4.6-py2.py3-none-any.whl", hash = "sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6"}, {file = "colorama-0.4.6.tar.gz", hash = "sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44"}, ] +markers = {dev = "platform_system == \"Windows\" or sys_platform == \"win32\""} [[package]] name = "coverage" @@ -2110,6 +2111,7 @@ files = [ {file = "pillow-12.1.1-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:cb9bb857b2d057c6dfc72ac5f3b44836924ba15721882ef103cecb40d002d80e"}, {file = "pillow-12.1.1.tar.gz", hash = "sha256:9ad8fa5937ab05218e2b6a4cff30295ad35afd2f83ac592e68c0d871bb0fdbc4"}, ] +markers = {main = "extra == \"gui\" or extra == \"gui-win\""} [package.extras] docs = ["furo", "olefile", "sphinx (>=8.2)", "sphinx-autobuild", "sphinx-copybutton", "sphinx-inline-tabs", "sphinxext-opengraph"] @@ -3128,14 +3130,14 @@ files = [ [[package]] name = "starlette" -version = "0.52.1" +version = "0.47.3" description = "The little ASGI library that shines." optional = false -python-versions = ">=3.10" +python-versions = ">=3.9" groups = ["main"] files = [ - {file = "starlette-0.52.1-py3-none-any.whl", hash = "sha256:0029d43eb3d273bc4f83a08720b4912ea4b071087a3b48db01b7c839f7954d74"}, - {file = "starlette-0.52.1.tar.gz", hash = "sha256:834edd1b0a23167694292e94f597773bc3f89f362be6effee198165a35d62933"}, + {file = "starlette-0.47.3-py3-none-any.whl", hash = "sha256:89c0778ca62a76b826101e7c709e70680a1699ca7da6b44d38eb0a7e61fe4b51"}, + {file = "starlette-0.47.3.tar.gz", hash = "sha256:6bc94f839cc176c4858894f1f8908f0ab79dfec1a6b8402f6da9be26ebea52e9"}, ] [package.dependencies] @@ -3717,4 +3719,4 @@ gui-win = ["toga-winforms"] [metadata] lock-version = "2.1" python-versions = ">=3.10,<3.13" -content-hash = "3cac502824131c496511467e550d7059b4611bb3e75942785e2ce48018829b5f" +content-hash = "b037019d3cc2a21bd827d1612f4bf29120934847e42a86a0fb94e3246a7d5bd2"