From 53802267caa810e79b73272bdc471ce5ea80ae1e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 20 Oct 2026 09:05:36 +0000 Subject: [PATCH] deps(deps): update filelock requirement Updates the requirements on [filelock](https://github.com/tox-dev/py-filelock) to permit the latest version. - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](https://github.com/tox-dev/py-filelock/compare/4.1.1...4.2.0) --- updated-dependencies: - dependency-name: filelock dependency-version: 4.2.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- constraints.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/constraints.txt b/constraints.txt index 5850246..086159e 100644 --- a/constraints.txt +++ b/constraints.txt @@ -9,7 +9,7 @@ aiohttp>=3.14.0,<4.0.0 # Security-critical indirect dependencies # filelock: GHSA-qmgc-5h2g-mvrw (TOCTOU) - fixed in 3.20.3 -filelock>=4.1.1,<5.0.0 +filelock>=4.2.0,<5.0.0 # virtualenv: GHSA-597g-3phw-6986 (TOCTOU) - fix pending release (>20.36.1) # Using latest available until patch is released virtualenv>=21.14.6,<22.0.0