[deps]: Update poetry (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
isort (changelog)	5.13.2 → 8.0.1
marshmallow (changelog)	^3 → ^4.0.0
pre-commit-hooks	5.0.0 → 6.0.0

---

Release Notes

PyCQA/isort (isort)

v8.0.1

Compare Source

Changes

• Fix #​2461: Added compression to stdlibs for Python 3.14 in isort/stdlibs/py314.py (#​2463) @​FinlayTheBerry
• Fix unindented comments being corrupted in indented blocks (#​2459) @​worksbyfriday

v8.0.0

Compare Source

• Removed --old-finders and --magic-placement flags and old_finders configuration option. The legacy finder logic that relied on environment introspection has been removed (#​2445) @​joao-faria-dev
  • Update the plone profile to not clash with black (#​2456) @​ale-rt

v7.0.0

Compare Source

Changes

💥 Breaking Changes

• Drop support for Python 3.9 (#​2430) @​DanielNoord

🚀 Features

• Show absolute paths in skipped file messages (#​2416) @​pranlawate

🪲 Fixes

• Some fixes for Python 3.14 (#​2433) @​DanielNoord
• Test on 3.14 and fix any bugs (#​2425) @​DanielNoord
• Update CHANGELOG.md + Fix Formatting and Grammar (#​2419) @​lukbrew25
• Fix output of hanging indent for long lines with noqa (#​2407) @​matan1008

👷 Continuous Integration

• Format with ruff instead of black (#​2432) @​DanielNoord
• Target 3.10 for ruff (#​2431) @​DanielNoord
• Update development dependencies to latest version (#​2426) @​DanielNoord
• docs: update pre-commit examples to version 6.1.0 (#​2413) @​pranlawate
• Small cleanup for developer environment (#​2418) @​DanielNoord

📦 Dependencies

• Bump actions/setup-python from 5 to 6 in the github-actions group (#​2411) @​dependabot[bot]

v6.1.0

Compare Source

• Add python 3.14 classifier and badge (#​2409) @​staticdev
  • Drop use of non-standard pkg_resources API (#​2405) @​dvarrazzo

v6.0.1

Compare Source

• Add OSError handling in find_imports_in_file (#​2331) @​kobarity

v6.0.0

Compare Source

• Remove support for Python 3.8 (#​2327) @​DanielNoord
  • Python 3.13 support (#​2306) @​mayty
  • Speed up exists_case_sensitive calls (#​2264) @​correctmost
  • Ensure that split_on_trailing_comma works with as imports (#​2340) @​DanielNoord
  • Black profile: enable magic comma (#​2236) @​MrMino
  • Update line_length and single_line_exclusions in google profile (#​2149) @​jagapiou
  • Allow --diff to be used with --jobs (#​2302) @​mnakama
  • Fix wemake profile to have correct character limit (#​2241) @​sobolevn
  • Fix sort_reexports code mangling (#​2283) @​Helveg
  • Fix correct group by package tokenization (#​2136) @​glasnt

marshmallow-code/marshmallow (marshmallow)

v4.3.0

Compare Source

Features:

• Add pre_load and post_load parameters to marshmallow.fields.Field for
  field-level pre- and post-processing (:issue:2787).
• Typing: improvements to marshmallow.validate (:pr:2940).

v4.2.4

Compare Source

Bug fixes:

• marshmallow.validate.URL and marshmallow.validate.Email accept Internationalized Domain Names (IDNs) (:issue:2821, :issue:2936).
  marshmallow.validate.Email also correctly rejects IDN domains with leading/trailing hyphens.
  Thanks :user:touhidurrr for the report.
• Typing: Fix typing of nested in marshmallow.fields.Nested (:pr:2935).

v4.2.3

Compare Source

Bug fixes:

• Make marshmallow.fields.Number and marshmallow.fields.Mapping abstract base classes to
  prevent using them within Schemas (:issue:2924). Thanks :user:MartingaleCoda for reporting.
• Allow required to be set on marshmallow.fields.Contant (:issue:2900).
  Thanks :user:nosnickid for the report and :user:worksbyfriday for the PR.
• Fix marshmallow.validate.OneOf emitting extra pairs when labels outnumber choices (:issue:2869).
  Thanks: user:T90REAL for the report and :user:rstar327 for the PR.
• Fix behavior when passing a dot-delimited attribute name to partial for a key with data_key set (:pr:2903).
  Thanks :user:bysiber for the PR.
• Fix Enum field by-name lookup to only return actual members (:pr:2902).
  Thanks :user:bysiber for the PR.
• marshmallow.fields.DateTime with format="timestamp_ms" properly
  rejects bool values (:pr:2904). Thanks :user:bysiber for the PR.
• Fix typing of error_essages argument to marshmallow.fields.Field (:pr:1636).
  Thanks :user:repole for reporting and :user:dhruvildarji for the PR.

Other changes:

• Add ipaddress.* to marshmallow.Schema.TYPE_MAPPING (:issue:1695).
  Thanks :user:liberforce for the suggestion and :user:dhruvildarji for the PR.

v4.2.2

Compare Source

Bug fixes:

• Fix behavior of fields.Contant(None) (:issue:2868).
  Thanks :user:T90REAL for reporting and emmanuel-ferdman for the fix.

v4.2.1

Compare Source

Bug fixes:

• Fix validation of URLs beginning with uppercare FILE (:issue:2891).
  Thanks :user:thanhlecongg for reporting and fixing.

v4.2.0

Compare Source

Other changes:

• many argument of Nested properly overrides schema instance
  value (:pr:2854). Thanks :user:jafournier for the PR.

v4.1.2

Compare Source

Bug fixes:

• :cve:2025-68480: Merge error store messages without rebuilding collections.
  Thanks 카푸치노 for reporting and :user:deckar01 for the fix.

v4.1.1

Compare Source

Bug fixes:

• Ensure URL validator is case-insensitive when using custom schemes (:pr:2874).
  Thanks :user:T90REAL for the PR.

v4.1.0

Compare Source

Other changes:

• Add __len__ implementation to missing so that it can be used with
  validate.Length <marshmallow.validate.Length> (:pr:2861).
  Thanks :user:agentgodzilla for the PR.
• Drop support for Python 3.9 (:pr:2363).
• Test against Python 3.14 (:pr:2864).

v4.0.1

Compare Source

v4.0.0

Compare Source

pre-commit/pre-commit-hooks (pre-commit-hooks)

v6.0.0

Compare Source

==================

Fixes

• check-shebang-scripts-are-executable: improve error message.
  • #​1115 PR by @​homebysix.

Migrating

• now requires python >= 3.9.
  • #​1098 PR by @​asottile.
• file-contents-sorter: disallow --unique and --ignore-case at the same
  time.
  • #​1095 PR by @​nemacysts.
  • #​794 issue by @​teksturi.
• Removed check-byte-order-marker and fix-encoding-pragma.
  • check-byte-order-marker: migrate to fix-byte-order-marker.
  • fix-encoding-pragma: migrate to pyupgrade.
  • #​1034 PR by @​mxr.
  • #​1032 issue by @​mxr.
  • #​522 PR by @​jgowdy.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every 2nd week starting on the 2 week of the year before 4am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock

Updating dependencies
Resolving dependencies...


The current project's supported Python range (>=3.9) is not compatible with some of the required packages Python requirement:
  - isort requires Python >=3.10.0, so it will not be satisfied for Python >=3.9,<3.10.0

Because passwordless depends on isort (8.0.1) which requires Python >=3.10.0, version solving failed.

  • Check your dependencies Python requirement: The Python requirement can be specified via the `python` or `markers` properties
    
    For isort, a possible solution would be to set the `python` property to ">=3.10.0"

    https://python-poetry.org/docs/dependency-specification/#python-restricted-dependencies,
    https://python-poetry.org/docs/dependency-specification/#using-environment-markers