From d88dc15c42d929a35400aac93f70e2cbdc112926 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Oct 2026 09:07:16 +0000 Subject: [PATCH] deps(deps): update filelock requirement Updates the requirements on [filelock](https://github.com/tox-dev/py-filelock) to permit the latest version. - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](https://github.com/tox-dev/py-filelock/compare/4.0.3...4.0.9) --- updated-dependencies: - dependency-name: filelock dependency-version: 4.0.9 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- constraints.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/constraints.txt b/constraints.txt index 1fc1cf4..643e588 100644 --- a/constraints.txt +++ b/constraints.txt @@ -9,7 +9,7 @@ aiohttp>=3.14.0,<4.0.0 # Security-critical indirect dependencies # filelock: GHSA-qmgc-5h2g-mvrw (TOCTOU) - fixed in 3.20.3 -filelock>=4.0.3,<5.0.0 +filelock>=4.0.9,<5.0.0 # virtualenv: GHSA-597g-3phw-6986 (TOCTOU) - fix pending release (>20.36.1) # Using latest available until patch is released virtualenv>=21.12.1,<22.0.0