Skip to content

chore(deps-dev): bump filelock from 3.29.0 to 3.32.4 - #9089

Merged
roger-zhangg merged 1 commit into
developfrom
dependabot/pip/develop/filelock-3.29.4
Sep 2, 2026
Merged

roger-zhangg merged 1 commit into
developfrom
dependabot/pip/develop/filelock-3.29.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 17, 2026 •

Copy link
Copy Markdown
Contributor

Bumps filelock from 3.29.0 to 3.32.4.

Release notes

Sourced from filelock's releases.

3.32.4

What's Changed

Full Changelog: tox-dev/filelock@3.32.3...3.32.4

3.32.3

What's Changed

Full Changelog: tox-dev/filelock@3.32.2...3.32.3

3.32.2

What's Changed

Full Changelog: tox-dev/filelock@3.32.1...3.32.2

3.32.0

What's Changed

Full Changelog: tox-dev/filelock@3.31.2...3.32.0

3.31.2

... (truncated)

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start


3.32.5 (2026-08-31)


  • SoftFileLease.token and AsyncSoftFileLease.token now read None after a failed acquisition, so a contender turned away by a live holder no longer reports a token for a claim it never published. :pr:721
  • Document that mode has no setter: unlike poll_interval, timeout, blocking and lifetime, it is fixed at construction and lock.mode = ... raises AttributeError. :pr:716

3.32.4 (2026-08-23)


  • StrictSoftFileLock always retries a claim read whose first attempt reports the claim as pending, so a first read that itself outlasts the retry grace no longer fails closed on a claim it could have read. :pr:705
  • WindowsFileLock waits out a transient STATUS_ACCESS_DENIED from NtCreateFile for up to half a second before raising PermissionError, since a peer unlinking the lock file as it releases can answer that for a moment; a real denial still fails fast. :pr:705
  • Every lock class now escapes the hostname it publishes, so a host whose socket.gethostname() carries a space, a newline or a byte outside UTF-8 no longer writes a marker it reads back as malformed. Such a host used to lose a held SoftReadWriteLock read slot to a peer and could not take a write slot or a StrictSoftFileLock at all. :pr:709

3.32.3 (2026-08-13)


  • The fork-safety audit hook no longer prints Exception ignored in audit hook with a TypeError when an audit event fires during interpreter shutdown, after CPython has already cleared the module globals. :pr:701

3.32.2 (2026-07-29)


  • A SoftReadWriteLock or SoftFileLease acquire whose heartbeat thread fails to start now unlinks its marker and hands the claim back, instead of leaving an unrefreshed marker a peer takes while the caller believes it still holds the lock. :pr:691

3.32.1 (2026-07-26)


  • Canceling an AsyncSoftReadWriteLock acquire now releases the claim instead of leaking a marker whose heartbeat wedges every contender. :pr:686

... (truncated)

Commits
  • cb493d6 Release 3.32.4
  • fe07a11 escape the hostname every marker publishes (#709)
  • 232732f 🔧 chore: batch dependency updates weekly on Tuesday (#713)
  • 2966eb5 🧪 test(fork): fork once the event loop has closed (#714)
  • 61511eb build(deps): bump astral-sh/setup-uv from 10.0.0 to 10.0.1 (#712)
  • f12a52f build(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.0 (#711)
  • 54c7b6c [pre-commit.ci] pre-commit autoupdate (#710)
  • 49f8035 🧪 test: cover a reclaimed private record for real (#706)
  • bb16d39 🧪 test: deflake six scheduled-run failures (#704)
  • 13b82a6 🐛 fix: retry transient denials on open and claim read (#705)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 17, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 17, 2026 08:09
@dependabot dependabot Bot added python Pull requests that update Python code dependencies Pull requests that update a dependency file labels Jun 17, 2026
roger-zhangg
roger-zhangg previously approved these changes Jun 29, 2026

@roger-zhangg roger-zhangg left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good!

vicheey
vicheey previously approved these changes Jun 29, 2026

@vicheey vicheey left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - dependency update with passing CI

@roger-zhangg
roger-zhangg enabled auto-merge June 29, 2026 23:29
@roger-zhangg
roger-zhangg dismissed stale reviews from vicheey and themself via b2b5c45 June 29, 2026 23:29
@dependabot @github

dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor Author

A newer version of filelock exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

seshubaws
seshubaws previously approved these changes Jul 31, 2026
Vandita2020
Vandita2020 previously approved these changes Jul 31, 2026
@roger-zhangg
roger-zhangg added this pull request to the merge queue Jul 31, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Jul 31, 2026
@valerena

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.29.0 to 3.32.4.
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.29.0...3.32.4)

---
updated-dependencies:
- dependency-name: filelock
  dependency-version: 3.29.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump filelock from 3.29.0 to 3.29.4 chore(deps-dev): bump filelock from 3.29.0 to 3.32.4 Aug 31, 2026
@dependabot
dependabot Bot dismissed stale reviews from Vandita2020 and seshubaws via 5778396 August 31, 2026 20:58
@dependabot
dependabot Bot force-pushed the dependabot/pip/develop/filelock-3.29.4 branch from 1a977f1 to 5778396 Compare August 31, 2026 20:58

@roger-zhangg roger-zhangg left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving: routine dependency bump, all checks green. Diff is limited to version pins and their hashes; no source changes.

@roger-zhangg
roger-zhangg added this pull request to the merge queue Sep 1, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Sep 1, 2026
@roger-zhangg
roger-zhangg added this pull request to the merge queue Sep 1, 2026
Merged via the queue into develop with commit 7bd780e Sep 2, 2026
54 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/develop/filelock-3.29.4 branch September 2, 2026 00:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file pr/internal python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants