fix(pypi): update dependency poetry to v2.4.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
poetry (changelog)	2.4.1 → 2.4.2

---

Release Notes

python-poetry/poetry (poetry)

v2.4.2

Compare Source

Fixed

• Fix an issue where Poetry installs an artifact that is not listed in the lockfile when the package source does not provide a hash for this artifact (#​11030).
• Fix a path traversal vulnerability when downloading files from a compromised URL and/or package source (#​11029).
• Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory (#​11027).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.