From 19d36553835bb41738376fbd6f863f0e04c77677 Mon Sep 17 00:00:00 2001 From: Stephen Brannen Date: Tue, 6 Oct 2026 20:19:46 -0500 Subject: [PATCH 1/2] chore: pin poetry 2.5.1 in ci CI installed 2.1.3, which has CVE-2026-34591 and builds venvs on the wrong Python with virtualenv 20.33+. Every repo, CI job, image, and laptop moves to 2.5.1 (LDR-9). Co-Authored-By: Claude Opus 5.5 AI-Tool: Claude Code CLI AI-Model: claude-opus-5-5 AI-Reasoning: medium --- .github/actions/setup-python-poetry/action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/actions/setup-python-poetry/action.yml b/.github/actions/setup-python-poetry/action.yml index 8e0f040..a9890d7 100644 --- a/.github/actions/setup-python-poetry/action.yml +++ b/.github/actions/setup-python-poetry/action.yml @@ -22,7 +22,7 @@ runs: - name: Install Poetry uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1 with: - version: "2.1.3" + version: "2.5.1" virtualenvs-create: true virtualenvs-in-project: true installer-parallel: true From 87f50c2e061c145faaaf25e30fb575531b9732d2 Mon Sep 17 00:00:00 2001 From: Stephen Brannen Date: Tue, 6 Oct 2026 21:07:30 -0500 Subject: [PATCH 2/2] chore: run pre-commit hooks on poetry 2.5.1 and python 3.13 The python-poetry hook was pinned to 2.1.3 and hook environments to python3.12, so poetry-check ran a different Poetry than CI and laptops and needed a Python most machines do not select. The library support range and CI matrix are unchanged. Co-Authored-By: Claude Opus 5.5 AI-Tool: Claude Code CLI AI-Model: claude-opus-5-5 AI-Reasoning: medium --- .pre-commit-config.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 188a09d..3527771 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -2,7 +2,7 @@ # See https://pre-commit.com/hooks.html for more hooks default_language_version: - python: python3.12 + python: python3.13 repos: - repo: https://github.com/pre-commit/pre-commit-hooks rev: v5.0.0 @@ -26,7 +26,7 @@ repos: args: [ --fix ] stages: [ commit ] - repo: https://github.com/python-poetry/poetry - rev: 2.1.3 + rev: 2.5.1 hooks: - id: poetry-check - repo: https://github.com/facebook/pyrefly-pre-commit