Merge pull request #130 from per1234/dependabot-poetry

Manage versioning of Poetry tool dependency

Author: per1234

.github/workflows/check-poetry-task.yml

@@ -65,9 +65,6 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
-      - name: Install Poetry
-        run: pip install poetry
-
       - name: Install Task
         uses: arduino/setup-task@v2
         with:
@@ -93,9 +90,6 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
-      - name: Install Poetry
-        run: pip install poetry
-
       - name: Install Task
         uses: arduino/setup-task@v2
         with:

.github/workflows/check-python-task.yml

@@ -79,9 +79,6 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
-      - name: Install Poetry
-        run: pip install poetry
-
       - name: Install Task
         uses: arduino/setup-task@v2
         with:
@@ -110,9 +107,6 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
-      - name: Install Poetry
-        run: pip install poetry
-
       - name: Install Task
         uses: arduino/setup-task@v2
         with:
@@ -141,9 +135,6 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
-      - name: Install Poetry
-        run: pip install poetry
-
       - name: Install Task
         uses: arduino/setup-task@v2
         with:

.github/workflows/spell-check-task.yml

@@ -57,9 +57,6 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
-      - name: Install Poetry
-        run: pip install poetry
-
       - name: Install Task
         uses: arduino/setup-task@v2
         with:

.github/workflows/test-python-poetry-task.yml

@@ -81,9 +81,6 @@ jobs:
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
-      - name: Install Poetry
-        run: pip install poetry
-
       - name: Install Task
         uses: arduino/setup-task@v2
         with:

Taskfile.yml

@@ -208,14 +208,49 @@ tasks:
           -r "{{.STYLELINTRC_SCHEMA_PATH}}" \
           -d "{{.PROJECT_FOLDER}}/{{.INSTANCE_PATH}}"
 
+  poetry:install:
+    desc: Install Poetry
+    run: once
+    cmds:
+      - |
+        if ! which pipx &>/dev/null; then
+          echo "pipx not found or not in PATH."
+          echo "Please install: https://pipx.pypa.io/stable/installation/#installing-pipx"
+          exit 1
+        fi
+      - |
+        if ! which yq &>/dev/null; then
+          echo "yq not found or not in PATH."
+          echo "Please install: https://github.com/mikefarah/yq/#install"
+          exit 1
+        fi
+      - |
+        export PIPX_DEFAULT_PYTHON="$( \
+          task utility:normalize-path \
+            RAW_PATH="$(which python)" \
+        )"
+        pipx install \
+          --force \
+          "poetry==$( \
+            yq \
+              --input-format toml \
+              --output-format yaml \
+              '.tool.poetry.group.pipx.dependencies.poetry' \
+              < pyproject.toml
+          )"
+
   # Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/poetry-task/Taskfile.yml
   poetry:install-deps:
     desc: Install dependencies managed by Poetry
+    deps:
+      - task: poetry:install
     cmds:
       - poetry install --no-root
 
   poetry:sync:
     desc: Sync poetry.lock
+    deps:
+      - task: poetry:install
     cmds:
       - |
         poetry \
@@ -224,6 +259,8 @@ tasks:
 
   poetry:validate:
     desc: Validate pyproject.toml
+    deps:
+      - task: poetry:install
     cmds:
       - |
         poetry \

poetry.lock

@@ -20,6 +20,14 @@ pytest = "7.4.3"
 pytest-mock = "3.12.0"
 mypy = "1.7.1"
 
+# The dependencies in this group are installed using pipx; NOT Poetry. The use of a `poetry` section is a hack required
+# in order to be able to manage updates of these dependencies via Dependabot, as used for all other dependencies.
+[tool.poetry.group.pipx]
+optional = true
+
+[tool.poetry.group.pipx.dependencies]
+poetry = "2.1.1"
+
 [build-system]
 requires = ["poetry-core"]
 build-backend = "poetry.core.masonry.api"