Bump poetry from 1.1.8 to 1.1.10 in /.github/workflows

[dependabot]

Bumps poetry from 1.1.8 to 1.1.10.

Release notes

Sourced from poetry's releases.

1.1.10

Fixed

• Fixed an issue where non-sha256 hashes were not checked. (#4529)

1.1.9

Fixed

• Fixed a security issue where file hashes were not checked prior to installation. (#4420, #4444, python-poetry/poetry-core#193)
• Fixed the detection of the system environment when the setting virtualenvs.create is deactivated. (#4507)
• Fixed an issue where unsafe parameters could be passed to git commands. (python-poetry/poetry-core#203)
• Fixed an issue where the wrong git executable could be used on Windows. (python-poetry/poetry-core#205)

Changelog

Sourced from poetry's changelog.

[1.1.10] - 2021-09-21

Fixed

• Fixed an issue where non-sha256 hashes were not checked. (#4529)

[1.1.9] - 2021-09-18

Fixed

• Fixed a security issue where file hashes were not checked prior to installation. (#4420, #4444, python-poetry/poetry-core#193)
• Fixed the detection of the system environment when the setting virtualenvs.create is deactivated. (#4507)
• Fixed an issue where unsafe parameters could be passed to git commands. (python-poetry/poetry-core#203)
• Fixed an issue where the wrong git executable could be used on Windows. (python-poetry/poetry-core#205)

Commits

• ebc5484 Bump version to 1.1.10
• a883d3d Fix release script for FreeBSD
• c195f2e Merge pull request #4529 from python-poetry/1.1-ensure-all-hash-types-are-che...
• 5221df9 Ensure all accepted hash types are checked
• f457d26 Revert "Ensure all accepted hash types are checked"
• f8a55c5 Ensure all accepted hash types are checked
• 5bea4d9 Merge pull request #4519 from python-poetry/release-1.1.9
• 69bd682 Bump version to 1.1.9
• 9d8aed4 Update lock file
• a9e59ed Merge pull request #4507 from python-poetry/1.1-fix-system-env-detection
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

Merging #410 (406d103) into main (9563e62) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #410   +/-   ##
=======================================
  Coverage   64.15%   64.15%           
=======================================
  Files           4        4           
  Lines         452      452           
  Branches       96       96           
=======================================
  Hits          290      290           
  Misses        146      146           
  Partials       16       16           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 9563e62...406d103. Read the comment docs.