Assisting with Poetry security backlog

[BacklineAI]

Hi dear Poetry team,

We’ve been using poetry in Backline wanted to reach out because we've identified a security issues an since we’re on a mission to help secure the open-source ecosystem, we thought it will be helpful.

We’ve just opened a Pull Request that addresses a vulnerability coming from packages your project depends on.

Why you can trust this PR:

Context-Aware: Our AI agents don't just "bump versions"; they analyze the code logic to ensure the fix is relevant to your specific implementation.

Verified Stable: We don’t send "blind" PRs. We’ve built the project and ran your existing test suites to verify that the logic remains intact and the fix is stable.

Human-Readable: The PR includes a full breakdown of the issue and exactly how we tested the solution.

We have no hidden agenda. We just want to help make the world a safer place by reducing the security burden on maintainers like you. We’d love for you to take a look and, if it meets your standards, merge it to resolve the issue.
In this specific case, since we are using poetry and the issue came up during our security review, it was urgent for us address this.

If you have any feedback on the PR or the way it was presented, we’d be incredibly grateful to hear it.

Keep up the great work!