[dependabot]

Bumps filelock from 3.32.3 to 4.0.3.

Release notes

Sourced from filelock's releases.

4.0.3

What's Changed

• 🐛 fix(api): skip the fork audit hook on CPython <3.12 by @​gaborbernat in tox-dev/filelock#747

Full Changelog: tox-dev/filelock@4.0.2...4.0.3

4.0.2

What's Changed

• docs: create the data directory in the async cache example by @​agammann in tox-dev/filelock#740
• fix: ignore broken sphinx-llm release by @​gaborbernat in tox-dev/filelock#742
• 🐛 fix(api): serialize concurrent transitions on shared locks by @​gaborbernat in tox-dev/filelock#745
• 🐛 fix(async-rw): give each task its own hold by @​gaborbernat in tox-dev/filelock#746

New Contributors

• @​agammann made their first contribution in tox-dev/filelock#740

Full Changelog: tox-dev/filelock@4.0.1...4.0.2

4.0.1

What's Changed

• fix: reject invalid poll_interval before sleep by @​Pitchfork-and-Torch in tox-dev/filelock#739

New Contributors

• @​Pitchfork-and-Torch made their first contribution in tox-dev/filelock#739

Full Changelog: tox-dev/filelock@4.0.0...4.0.1

4.0.0

What's Changed

• 🐛 fix(soft-rw): replace the state mutex with a generation log by @​gaborbernat in tox-dev/filelock#738

Full Changelog: tox-dev/filelock@3.32.7...4.0.0

3.32.7

What's Changed

• Fix final symlink test on musl by @​lprnmns in tox-dev/filelock#737
• 📝 docs: say acquire() falls back to the lock's blocking attribute by @​hxperl in tox-dev/filelock#733

... (truncated)

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

---

4.0.5 (2026-09-28)

---

• Fix MarkerSoftFileLock acquisition and prevent contenders from evicting live protocol-2 owners after two seconds. Reclaim recognized records after owner death; preserve unknown contracts. :pr:749
• Honor instance timeout and blocking settings in sync and async ReadWriteLock acquisition, including waits between tasks on one instance. Preserve explicit per-call overrides. :pr:750
• Skip access-denial checks when the process can read mode-0o000 files. Keep mode-bit checks enabled for privileged processes on filesystems that support POSIX permissions. :pr:753
• Skip vanished StrictSoftFileLock claims after a read-permission retry expires. Recheck the directory before raising a protocol error so concurrent removal does not turn a stale claim listing into an acquisition failure. :pr:754
• Reject negative timeouts other than -1 in blocking AsyncReadWriteLock and AsyncSoftReadWriteLock acquisitions. Keep -1 as an unlimited wait and ignore timeouts when blocking=False. :pr:755

---

4.0.4 (2026-09-26)

---

• Hostnames that still differ after their first 253 escaped characters now publish distinct owners, so a soft lock no longer takes another such host's live holder for its own and reclaims its marker. :pr:748

---

4.0.3 (2026-09-23)

---

• Importing filelock on CPython 3.10 or 3.11 no longer makes new threads fail with RuntimeError: Cannot install a trace function while another trace function is being installed under coverage or a debugger. filelock skips its fork-safety audit hook there, so forking from inside a thread's own lock-state transition no longer raises immediately on those versions. :pr:747

---

4.0.2 (2026-09-23)

---

• Concurrent acquire() and release() on a thread_local=False lock no longer leak the OS lock, close a descriptor twice, drop a lease token, or leave a false deadlock after a cross-thread release (:issue:744). :pr:745
• :class:~filelock.AsyncReadWriteLock and :class:~filelock.AsyncSoftReadWriteLock now give each asyncio task its own hold, so tasks sharing one instance no longer enter the write lock together. :pr:746
• Correct the async cache example to create its data directory and clarify automatic creation of lock-file parent directories. :pr:740
• Exclude sphinx-llm 1.1.0 from documentation dependencies because its Markdown builder emits unknown-node warnings. :pr:742

... (truncated)

Commits

• 5283806 Release 4.0.3
• fd10e07 🐛 fix(api): skip the fork audit hook on CPython <3.12 (#747)
• 2d4530f Release 4.0.2
• 6c46312 🐛 fix(async-rw): give each task its own hold (#746)
• fe0e99d 🐛 fix(api): serialize concurrent transitions on shared locks (#745)
• b26beda build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-acti...
• 10572ec fix: ignore broken sphinx-llm release (#742)
• 6c10af3 [pre-commit.ci] pre-commit autoupdate (#741)
• 9380408 docs: create the data directory in the async cache example (#740)
• b5016c4 Release 4.0.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • No end-user-facing changes are included in this update. The changes do not alter visible features, app functionality, or user workflows. Users can continue using the product as before; no new actions or configuration are required.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 250e886d-ba7b-4394-ad5d-1d9c3ab5dc93

📥 Commits

Reviewing files that changed from the base of the PR and between 127108a and 3759882.

📒 Files selected for processing (2)

• requirements-core.txt
• requirements-test.txt

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

---

📝 Walkthrough

Walkthrough

The core and test requirements now use filelock version 4.0.3: the core requirement sets it as the minimum, and the test requirement pins it.

Changes

filelock requirements

Layer / File(s)	Summary
Align filelock requirement versions requirements-core.txt, requirements-test.txt	The core minimum and test pin for filelock are both set to 4.0.3.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: d-ogi

Merge Risk: ⚪ Minimal · up to 37598

No actionable issue with the dependency update is established; it is mergeable after normal checks.

Architecture Summary

Architecture risk: 🔵 Low · up to 37598

The change affects 2 systems.

Changed systems: requirements-core.txt, requirements-test.txt

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — requirements-core.txt (service) was modified; 1 changed file maps to changed impact.
• observed — requirements-test.txt (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in requirements-core.txt: Raises the filelock minimum version from 3.16 to 4.0.3.
• observed — Modified behavior in requirements-test.txt: The pinned filelock version changes from 3.32.3 to 4.0.3.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description explains the dependency update and includes release notes, but it omits the required Problem and resulting behavior, Scope, Validation, and Review checklist sections.	Add all required template sections. Describe the problem and resulting behavior, affected components and compatibility risks, exact validation commands with environments and results or reasons for skipped checks, and complete the review che…

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the dependency and the version change from 3.32.3 to 4.0.3.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Description check

Resolution

Add all required template sections. Describe the problem and resulting behavior, affected components and compatibility risks, exact validation commands with environments and results or reasons for skipped checks, and complete the review checklist.

• Fix all pre-merge checks with AI

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Superseded by #104.