Skip to content

Bump filelock from 3.32.0 to 4.0.4 - #67

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/filelock-3.32.6
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/filelock-3.32.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps filelock from 3.32.0 to 4.0.4.

Release notes

Sourced from filelock's releases.

4.0.4

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@4.0.3...4.0.4

4.0.3

What's Changed

Full Changelog: tox-dev/filelock@4.0.2...4.0.3

4.0.2

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@4.0.1...4.0.2

4.0.1

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@4.0.0...4.0.1

4.0.0

What's Changed

... (truncated)

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start


4.0.6 (2026-09-28)


  • Reject negative blocking timeouts other than -1 before reentrant ReadWriteLock and SoftReadWriteLock acquisition. Preserve unlimited waits and nonblocking acquisition. :pr:756

4.0.5 (2026-09-28)


  • Fix MarkerSoftFileLock acquisition and prevent contenders from evicting live protocol-2 owners after two seconds. Reclaim recognized records after owner death; preserve unknown contracts. :pr:749
  • Honor instance timeout and blocking settings in sync and async ReadWriteLock acquisition, including waits between tasks on one instance. Preserve explicit per-call overrides. :pr:750
  • Skip access-denial checks when the process can read mode-0o000 files. Keep mode-bit checks enabled for privileged processes on filesystems that support POSIX permissions. :pr:753
  • Skip vanished StrictSoftFileLock claims after a read-permission retry expires. Recheck the directory before raising a protocol error so concurrent removal does not turn a stale claim listing into an acquisition failure. :pr:754
  • Reject negative timeouts other than -1 in blocking AsyncReadWriteLock and AsyncSoftReadWriteLock acquisitions. Keep -1 as an unlimited wait and ignore timeouts when blocking=False. :pr:755

4.0.4 (2026-09-26)


  • Hostnames that still differ after their first 253 escaped characters now publish distinct owners, so a soft lock no longer takes another such host's live holder for its own and reclaims its marker. :pr:748

4.0.3 (2026-09-23)


  • Importing filelock on CPython 3.10 or 3.11 no longer makes new threads fail with RuntimeError: Cannot install a trace function while another trace function is being installed under coverage or a debugger. filelock skips its fork-safety audit hook there, so forking from inside a thread's own lock-state transition no longer raises immediately on those versions. :pr:747

4.0.2 (2026-09-23)


... (truncated)

Commits
  • 8ffba8a Release 4.0.4
  • 79a2e81 🐛 fix(identity): digest the cut tail of long hostnames (#748)
  • 5283806 Release 4.0.3
  • fd10e07 🐛 fix(api): skip the fork audit hook on CPython <3.12 (#747)
  • 2d4530f Release 4.0.2
  • 6c46312 🐛 fix(async-rw): give each task its own hold (#746)
  • fe0e99d 🐛 fix(api): serialize concurrent transitions on shared locks (#745)
  • b26beda build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-acti...
  • 10572ec fix: ignore broken sphinx-llm release (#742)
  • 6c10af3 [pre-commit.ci] pre-commit autoupdate (#741)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/filelock-3.32.6 branch from 66c7a84 to 646e8c4 Compare September 14, 2026 23:01
@dependabot dependabot Bot changed the title chore(deps): bump filelock from 3.32.0 to 3.32.6 chore(deps): bump filelock from 3.32.0 to 4.0.0 Sep 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/filelock-3.32.6 branch from 646e8c4 to c0aa2cf Compare September 21, 2026 18:56
@dependabot dependabot Bot changed the title chore(deps): bump filelock from 3.32.0 to 4.0.0 Bump filelock from 3.32.0 to 4.0.1 Sep 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/filelock-3.32.6 branch 2 times, most recently from cdb8997 to a1356e1 Compare September 24, 2026 22:31
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.32.0 to 4.0.4.
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.32.0...4.0.4)

---
updated-dependencies:
- dependency-name: filelock
  dependency-version: 3.32.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump filelock from 3.32.0 to 4.0.1 Bump filelock from 3.32.0 to 4.0.4 Sep 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/filelock-3.32.6 branch from a1356e1 to 24ae9f2 Compare September 29, 2026 19:09
@dependabot @github

dependabot Bot commented on behalf of github Sep 29, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #80.

@dependabot dependabot Bot closed this Sep 29, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/filelock-3.32.6 branch September 29, 2026 19:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants