From 71e90204271d1591bf0363abd47829ff01cd2c9e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Sep 2026 09:06:15 +0000 Subject: [PATCH] deps(deps): update filelock requirement Updates the requirements on [filelock](https://github.com/tox-dev/py-filelock) to permit the latest version. - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](https://github.com/tox-dev/py-filelock/compare/3.32.5...4.0.3) --- updated-dependencies: - dependency-name: filelock dependency-version: 4.0.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- constraints.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/constraints.txt b/constraints.txt index 0502f54..6e5380d 100644 --- a/constraints.txt +++ b/constraints.txt @@ -9,7 +9,7 @@ aiohttp>=3.14.0,<4.0.0 # Security-critical indirect dependencies # filelock: GHSA-qmgc-5h2g-mvrw (TOCTOU) - fixed in 3.20.3 -filelock>=3.32.5,<4.0.0 +filelock>=4.0.3,<5.0.0 # virtualenv: GHSA-597g-3phw-6986 (TOCTOU) - fix pending release (>20.36.1) # Using latest available until patch is released virtualenv>=21.7.16,<22.0.0