Python: Bump poethepoet from 0.42.1 to 0.43.0 in /python

[dependabot]

Bumps poethepoet from 0.42.1 to 0.43.0.

Release notes

Sourced from poethepoet's releases.

0.43.0

Enhancements

• Add task groups for grouping tasks under a heading in help output by @​brolewis in nat-n/poethepoet#354
• Treat false boolean args as unset env vars and add private vars by @​kzrnm in nat-n/poethepoet#359

Breaking changes

This release includes a refactor of how task variables are managed, improving boolean arg semantics and introducing private variables. These changes may affect a small number of existing configurations:

• Boolean args now produce unset env vars when false. Previously false mapped to the string "False"; now the env var is removed entirely. This gives consistent falsy behavior across shells and parameter expansion operators (:-, :+). Tasks checking for the literal string "False" or using os.environ["flag"] will need updating.

• Private env vars are filtered from subprocesses. Variables starting with _ and containing no uppercase characters (e.g. _secret) are now treated as private — available for config-time interpolation but excluded from the task subprocess environment. This is unlikely to affect existing configurations, but any task that relies on a subprocess reading a _lowercase env var will need to rename it.

• Private arg option names strip leading underscores. An arg named _flag with no explicit options now generates --flag instead of --_flag. A new validation rejects duplicate CLI options across args.

See the migration guide for details and recommended fixes.

New Contributors

• @​brolewis made their first contribution in nat-n/poethepoet#354

Full Changelog: nat-n/poethepoet@v0.42.1...v0.43.0

Commits

• 6a25fba chore: bump version to 0.43.0
• 83091a5 feat!: treat false boolean args as unset env vars and add private vars (#359)
• 456094a feat: Add task groups for grouping tasks under a heading in help output (#354)
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

A newer version of poethepoet exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

[Evan Mattson (moonbox3)]

Copilot figure out why CI/CD checks are failing

[Copilot]

Copilot figure out why CI/CD checks are failing

The CI failure was a dependency conflict: the root workspace (agent-framework) was updated to poethepoet==0.43.0 by dependabot, but the agent-framework-lab sub-package still pinned poethepoet==0.42.1. uv's workspace resolver couldn't satisfy both constraints simultaneously.

Fixed in commit 3c15d77 by updating python/packages/lab/pyproject.toml to poethepoet==0.43.0 and regenerating python/uv.lock.

[Evan Mattson (moonbox3)]

Copilot fix the merge conflict

[Copilot]

Copilot fix the merge conflict

Resolved in commit d96b7c6. Merged origin/main into the branch and resolved the conflict in python/pyproject.toml — keeping poethepoet==0.43.0 (the purpose of this PR) and taking the rich>=13.7.1,<16.0.0 upper-bound change from main. Regenerated python/uv.lock accordingly.

[Eduard van Valkenburg (eavanvalkenburg)]

Dependabot (@dependabot) recreate

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[dependabot]

Looks like this PR is closed. If the branch still exists, you can re-open the PR and then use @dependabot rebase or @dependabot recreate. If the branch was deleted, Dependabot will create a new PR on the next scheduled run, or you can trigger an update from the Dependency graph page.