From 22be122bf5159994a33269dffa86dee5a487b958 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 22 Sep 2026 11:38:43 +0000 Subject: [PATCH] deps(deps): update filelock requirement Updates the requirements on [filelock](https://github.com/tox-dev/py-filelock) to permit the latest version. - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](https://github.com/tox-dev/py-filelock/compare/3.32.5...4.0.1) --- updated-dependencies: - dependency-name: filelock dependency-version: 4.0.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- constraints.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/constraints.txt b/constraints.txt index 0502f54..32d571d 100644 --- a/constraints.txt +++ b/constraints.txt @@ -9,7 +9,7 @@ aiohttp>=3.14.0,<4.0.0 # Security-critical indirect dependencies # filelock: GHSA-qmgc-5h2g-mvrw (TOCTOU) - fixed in 3.20.3 -filelock>=3.32.5,<4.0.0 +filelock>=4.0.1,<5.0.0 # virtualenv: GHSA-597g-3phw-6986 (TOCTOU) - fix pending release (>20.36.1) # Using latest available until patch is released virtualenv>=21.7.16,<22.0.0