chore(deps): update poetry and other dependency versions (#369)

* update packageurl type hints

Signed-off-by: gruebel <[email protected]>

* lower bound packageurl-python dependency

Signed-off-by: gruebel <[email protected]>

* update deps.lowest.r

Signed-off-by: gruebel <[email protected]>

---------

Signed-off-by: gruebel <[email protected]>

Author: gruebel

cyclonedx/model/bom.py

@@ -52,7 +52,7 @@
 from .vulnerability import Vulnerability
 
 if TYPE_CHECKING:
-    from packageurl import PackageURL  # type:ignore[import]
+    from packageurl import PackageURL
 
 
 @serializable.serializable_class

cyclonedx/model/component.py

@@ -25,7 +25,7 @@
 
 # See https://github.com/package-url/packageurl-python/issues/65
 import serializable
-from packageurl import PackageURL  # type: ignore
+from packageurl import PackageURL
 from sortedcontainers import SortedSet
 
 from ..exception.model import NoPropertiesProvidedException

cyclonedx/serialization/__init__.py

@@ -21,7 +21,7 @@
 from uuid import UUID
 
 # See https://github.com/package-url/packageurl-python/issues/65
-from packageurl import PackageURL  # type: ignore
+from packageurl import PackageURL
 from serializable.helpers import BaseHelper
 
 from ..model.bom_ref import BomRef
@@ -71,7 +71,7 @@ def serialize(cls, o: object) -> str:
         raise ValueError(f'Attempt to serialize a non-UUID: {o.__class__}')
 
     @classmethod
-    def deserialize(cls, o: object) -> PackageURL:
+    def deserialize(cls, o: object) -> UUID:
         try:
             return UUID(str(o))
         except ValueError:

deps.lowest.r

@@ -1,7 +1,7 @@
 # exactly pinned dependencies to the lowest version regardless of python_version
 # see pyptoject file for ranges
 
-packageurl-python == 0.9.0
+packageurl-python == 0.11.1
 py-serializable == 0.11.1
 importlib-metadata == 3.4.0 # ; python_version < '3.8'
 

poetry.lock

@@ -48,7 +48,7 @@ keywords = [
 # ATTENTION: keep `deps.lowest.r` file in sync
 python = "^3.7"
 importlib-metadata = { version = "^3.4.0", python = "<3.8" }
-packageurl-python = ">= 0.9"
+packageurl-python = ">= 0.11"
 py-serializable = "^0.11.1"
 sortedcontainers = "^2.4.0"
 

pyproject.toml

@@ -24,7 +24,7 @@
 from uuid import UUID
 
 # See https://github.com/package-url/packageurl-python/issues/65
-from packageurl import PackageURL  # type: ignore
+from packageurl import PackageURL
 
 from cyclonedx.model import (
     AttachedText,

tests/data.py

@@ -21,7 +21,7 @@
 from unittest import TestCase
 
 # See https://github.com/package-url/packageurl-python/issues/65
-from packageurl import PackageURL  # type: ignore
+from packageurl import PackageURL
 
 from cyclonedx.model import sha1sum
 from cyclonedx.model.component import Component