[mkniewallner]

Update vendored dependencies, mostly to pick up a new version of lark that removes usages of a deprecated method in Python 3.11.

Updates:

• jsonschema: 4.10.0 -> 4.16.0 (changelog)
• lark: 1.1.2 -> 1.1.13 (changelog)
• tomlkit: 0.11.4 -> 0.11.5 (changelog)
• typing-extensions: 4.3.0 -> 4.4.0 (changelog)

[mkniewallner]

Makes me think that we might want to add a CI check that would git diff --exit-code to ensure that vendored modules were correctly generated, whenever anything in vendors or src/poetry/core/_vendor is updated, as a safety measure.

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[neersighted]

I'm not sure I follow how such a check would work -- re-run the vendoring and check there is no diff?

[mkniewallner]

I'm not sure I follow how such a check would work -- re-run the vendoring and check there is no diff?

Yep, that would be the main idea. I'd be happy to set up a quick POC for this.

[neersighted]

I think at this point, go ahead and do it -- when my long-running CI rework comes to fruition for each repo, I can just incorporate it.