Update dependency pipx:poetry to v2.4.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pipx:poetry (changelog)	2.4.1 → 2.4.2

---

Release Notes

python-poetry/poetry (pipx:poetry)

v2.4.2

Compare Source

Fixed

• Fix an issue where Poetry installs an artifact that is not listed in the lockfile when the package source does not provide a hash for this artifact (#​11030).
• Fix a path traversal vulnerability when downloading files from a compromised URL and/or package source (#​11029).
• Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory (#​11027).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.