diff --git a/constraints.txt b/constraints.txt
index 5850246..086159e 100644
--- a/constraints.txt
+++ b/constraints.txt
@@ -9,7 +9,7 @@ aiohttp>=3.14.0,<4.0.0
 
 # Security-critical indirect dependencies
 # filelock: GHSA-qmgc-5h2g-mvrw (TOCTOU) - fixed in 3.20.3
-filelock>=4.1.1,<5.0.0
+filelock>=4.2.0,<5.0.0
 # virtualenv: GHSA-597g-3phw-6986 (TOCTOU) - fix pending release (>20.36.1)
 # Using latest available until patch is released
 virtualenv>=21.14.6,<22.0.0