Manage versioning of Poetry tool dependency

.github/workflows/check-python-task.yml

@@ -71,12 +71,6 @@ jobs:
         with:
           python-version-file: pyproject.toml
 
-      - name: Install Poetry
-        run: |
-          pipx install \
-            --python "$(which python)" \
-            poetry
-
       - name: Install Task
         uses: arduino/setup-task@v2
         with:
@@ -105,12 +99,6 @@ jobs:
         with:
           python-version-file: pyproject.toml
 
-      - name: Install Poetry
-        run: |
-          pipx install \
-            --python "$(which python)" \
-            poetry
-
       - name: Install Task
         uses: arduino/setup-task@v2
         with:

.github/workflows/check-yaml-task.yml

@@ -99,12 +99,6 @@ jobs:
         with:
           python-version-file: pyproject.toml
 
-      - name: Install Poetry
-        run: |
-          pipx install \
-            --python "$(which python)" \
-            poetry
-
       - name: Install Task
         uses: arduino/setup-task@v2
         with:

.github/workflows/spell-check-task.yml

@@ -53,12 +53,6 @@ jobs:
         with:
           python-version-file: pyproject.toml
 
-      - name: Install Poetry
-        run: |
-          pipx install \
-            --python "$(which python)" \
-            poetry
-
       - name: Install Task
         uses: arduino/setup-task@v2
         with:

.github/workflows/test-python-poetry-task.yml

@@ -75,12 +75,6 @@ jobs:
         with:
           python-version-file: pyproject.toml
 
-      - name: Install Poetry
-        run: |
-          pipx install \
-            --python "$(which python)" \
-            poetry
-
       - name: Install Task
         uses: arduino/setup-task@v2
         with:

Taskfile.yml

@@ -33,7 +33,7 @@
           MAX_DEPTH: 5
       - task: python:format
 
   # Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/check-action-metadata-task/Taskfile.yml
   action:validate:
     desc: Validate GitHub Actions metadata against JSON schema
     vars:
@@ -55,7 +55,7 @@
             -s "{{.ACTION_METADATA_SCHEMA_PATH}}" \
             -d "action.yml"
 
   # Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/check-workflows-task/Taskfile.yml
   ci:validate:
     desc: Validate GitHub Actions workflows against their JSON schema
     vars:
@@ -88,7 +88,7 @@
     # This is an "umbrella" task used to call any documentation generation processes the project has.
     # It can be left empty if there are none.
 
   # Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/check-files-task/Taskfile.yml
   general:check-filenames:
     desc: Check for non-portable filenames
     cmds:
@@ -121,7 +121,7 @@
           echo
           echo "Prohibited characters found in filenames"
           echo "See:"
           echo "https://learn.microsoft.com/en-us/windows/win32/fileio/naming-a-file#naming-conventions:~:text=except%20for%20the%20following"
           false
         }
       - |
@@ -154,11 +154,11 @@
           echo
           echo "Reserved filenames found"
           echo "See:"
           echo "https://learn.microsoft.com/en-us/windows/win32/fileio/naming-a-file#naming-conventions:~:text=use%20the%20following-,reserved%20names,-for%20the%20name"
           false
         }
 
   # Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/check-general-formatting-task/Taskfile.yml
   general:check-formatting:
     desc: Check basic formatting style of all files
     cmds:
@@ -170,7 +170,7 @@
         fi
       - ec
 
   # Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/spell-check-task/Taskfile.yml
   general:check-spelling:
     desc: Check for commonly misspelled words
     deps:
@@ -180,7 +180,7 @@
     cmds:
       - poetry run codespell
 
   # Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/check-files-task/Taskfile.yml
   general:check-symlinks:
     desc: Check for bad symlinks
     cmds:
@@ -207,7 +207,7 @@
           false
         }
 
   # Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/spell-check-task/Taskfile.yml
   general:correct-spelling:
     desc: Correct commonly misspelled words where possible
     deps:
@@ -381,10 +381,42 @@
           -r "{{.STYLELINTRC_SCHEMA_PATH}}" \
           -d "{{.PROJECT_FOLDER}}/{{.INSTANCE_PATH}}"
 
+  poetry:install:
+    desc: Install Poetry
+    run: once
+    vars:
+      PYTHON_PATH:
+        sh: task utility:normalize-path RAW_PATH="$(which python)"
+    cmds:
+      - |
+        if ! which pipx &>/dev/null; then
+          echo "pipx not found or not in PATH."
+          echo "Please install: https://pipx.pypa.io/stable/installation/#installing-pipx"
+          exit 1
+        fi
+      - |
+        if ! which yq &>/dev/null; then
+          echo "yq not found or not in PATH."
+          echo "Please install: https://github.com/mikefarah/yq/#install"
+          exit 1
+        fi
+      - |
+        pipx install \
+          --python "{{.PYTHON_PATH}}" \
+          "poetry==$( \
+            yq \
+              --input-format toml \
+              --output-format yaml \
+              '.tool.poetry.group.pipx.dependencies.poetry' \
+              < pyproject.toml
+          )"
+
   # Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/poetry-task/Taskfile.yml
   poetry:install-deps:
     desc: Install dependencies managed by Poetry
     run: when_changed
+    deps:
+      - task: poetry:install
     cmds:
       - |
         poetry install \

action.yml

@@ -87,7 +87,13 @@ runs:
         # Install Poetry.
         pipx install \
           --python "$(which python)" \
-          poetry==1.4.0
+            "poetry==$( \
+              yq \
+                --input-format toml \
+                --output-format yaml \
+                '.tool.poetry.group.pipx.dependencies.poetry' \
+                < pyproject.toml
+            )"
 
         # Install Python dependencies.
         poetry install \

pyproject.toml

@@ -32,6 +32,14 @@ optional = true
 [tool.poetry.group.external.dependencies]
 pyserial = "3.5"
 
+# The dependencies in this group are installed using pipx; NOT Poetry. The use of a `poetry` section is a hack required
+# in order to be able to manage updates of these dependencies via Dependabot, as used for all other dependencies.
+[tool.poetry.group.pipx]
+optional = true
+
+[tool.poetry.group.pipx.dependencies]
+poetry = "1.4.0"
+
 [build-system]
 requires = ["poetry-core"]
 build-backend = "poetry.core.masonry.api"