Skip to content

deps(deps-dev): bump poethepoet from 0.40.0 to 0.44.0#100

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/poethepoet-0.44.0
Open

deps(deps-dev): bump poethepoet from 0.40.0 to 0.44.0#100
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/poethepoet-0.44.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 7, 2026

Bumps poethepoet from 0.40.0 to 0.44.0.

Release notes

Sourced from poethepoet's releases.

0.44.0

Enhancements

Breaking changes**

  • Transitive includes are now loaded by default. Previously, if an included config file contained its own include entries, those second-order includes were silently ignored. They are now followed recursively using depth-first loading. This may cause previously ignored config files to be loaded, potentially introducing new tasks or environment variables. To preserve the old behavior for a specific include, set recursive = false on that include entry. See the include guide for details.

Full Changelog: nat-n/poethepoet@v0.43.0...v0.44.0

0.43.0

Enhancements

Breaking changes

This release includes a refactor of how task variables are managed, improving boolean arg semantics and introducing private variables. These changes may affect a small number of existing configurations:

  • Boolean args now produce unset env vars when false. Previously false mapped to the string "False"; now the env var is removed entirely. This gives consistent falsy behavior across shells and parameter expansion operators (:-, :+). Tasks checking for the literal string "False" or using os.environ["flag"] will need updating.

  • Private env vars are filtered from subprocesses. Variables starting with _ and containing no uppercase characters (e.g. _secret) are now treated as private — available for config-time interpolation but excluded from the task subprocess environment. This is unlikely to affect existing configurations, but any task that relies on a subprocess reading a _lowercase env var will need to rename it.

  • Private arg option names strip leading underscores. An arg named _flag with no explicit options now generates --flag instead of --_flag. A new validation rejects duplicate CLI options across args.

See the migration guide for details and recommended fixes.

New Contributors

Full Changelog: nat-n/poethepoet@v0.42.1...v0.43.0

0.42.1

Enhancements

Completion script fixes

[!IMPORTANT] You must follow the instructions to (re)install the completion script for your preferred shell environment to benefit from the completion script fixes

New Contributors

Full Changelog: nat-n/poethepoet@v0.42.0...v0.42.1

... (truncated)

Commits
  • 67a623d Bump version to 0.44.0
  • 472f390 feat!: support recursive includes #317 (#372)
  • 3168956 chore: optimize tests to run 17pc faster (#371)
  • 6a25fba chore: bump version to 0.43.0
  • 83091a5 feat!: treat false boolean args as unset env vars and add private vars (#359)
  • 456094a feat: Add task groups for grouping tasks under a heading in help output (#354)
  • 4979272 Bump version to 0.42.1
  • 1f40807 fix: completion script edge case handling (#366)
  • c67a858 feat(uv): add exact option for uv executor (#365)
  • 8f4d5c4 fix: isolate zsh completion task options from global options (#364)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [poethepoet](https://github.com/nat-n/poethepoet) from 0.40.0 to 0.44.0.
- [Release notes](https://github.com/nat-n/poethepoet/releases)
- [Commits](nat-n/poethepoet@v0.40.0...v0.44.0)

---
updated-dependencies:
- dependency-name: poethepoet
  dependency-version: 0.44.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 7, 2026

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants