Bump filelock from 4.0.1 to 4.0.3

[dependabot]

Bumps filelock from 4.0.1 to 4.0.3.

Release notes

Sourced from filelock's releases.

4.0.3

What's Changed

• 🐛 fix(api): skip the fork audit hook on CPython <3.12 by @​gaborbernat in tox-dev/filelock#747

Full Changelog: tox-dev/filelock@4.0.2...4.0.3

4.0.2

What's Changed

• docs: create the data directory in the async cache example by @​agammann in tox-dev/filelock#740
• fix: ignore broken sphinx-llm release by @​gaborbernat in tox-dev/filelock#742
• 🐛 fix(api): serialize concurrent transitions on shared locks by @​gaborbernat in tox-dev/filelock#745
• 🐛 fix(async-rw): give each task its own hold by @​gaborbernat in tox-dev/filelock#746

New Contributors

• @​agammann made their first contribution in tox-dev/filelock#740

Full Changelog: tox-dev/filelock@4.0.1...4.0.2

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

---

4.0.4 (2026-09-26)

---

• Hostnames that still differ after their first 253 escaped characters now publish distinct owners, so a soft lock no longer takes another such host's live holder for its own and reclaims its marker. :pr:748

---

4.0.3 (2026-09-23)

---

• Importing filelock on CPython 3.10 or 3.11 no longer makes new threads fail with RuntimeError: Cannot install a trace function while another trace function is being installed under coverage or a debugger. filelock skips its fork-safety audit hook there, so forking from inside a thread's own lock-state transition no longer raises immediately on those versions. :pr:747

---

4.0.2 (2026-09-23)

---

• Concurrent acquire() and release() on a thread_local=False lock no longer leak the OS lock, close a descriptor twice, drop a lease token, or leave a false deadlock after a cross-thread release (:issue:744). :pr:745
• :class:~filelock.AsyncReadWriteLock and :class:~filelock.AsyncSoftReadWriteLock now give each asyncio task its own hold, so tasks sharing one instance no longer enter the write lock together. :pr:746
• Correct the async cache example to create its data directory and clarify automatic creation of lock-file parent directories. :pr:740
• Exclude sphinx-llm 1.1.0 from documentation dependencies because its Markdown builder emits unknown-node warnings. :pr:742

---

4.0.1 (2026-09-19)

---

• poll_interval is now validated at construction, on the setter, and on acquire(): a negative, non-finite, or non-numeric value raises :class:ValueError/:class:TypeError immediately instead of failing inside time.sleep. :pr:739

---

4.0.0 (2026-09-17)

---

• The :class:~filelock.SoftReadWriteLock on-disk protocol is a generation log under <path>.rw, and a process running an earlier release does not see it: an old and a new participant on one lock path do not exclude each other. Stop every participant, upgrade them all, then restart them; the new code ignores leftover .state, .write and .readers/ files, and you can delete them. The filesystem must provide no-replace hard links, as

... (truncated)

Commits

• 5283806 Release 4.0.3
• fd10e07 🐛 fix(api): skip the fork audit hook on CPython <3.12 (#747)
• 2d4530f Release 4.0.2
• 6c46312 🐛 fix(async-rw): give each task its own hold (#746)
• fe0e99d 🐛 fix(api): serialize concurrent transitions on shared locks (#745)
• b26beda build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-acti...
• 10572ec fix: ignore broken sphinx-llm release (#742)
• 6c10af3 [pre-commit.ci] pre-commit autoupdate (#741)
• 9380408 docs: create the data directory in the async cache example (#740)
• See full diff in compare view

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ COPYPASTE	jscpd	yes		no		no	4.17s
✅ JSON	prettier	7	0	0		0	0.47s
✅ JSON	v8r	7		0		0	3.15s
✅ MARKDOWN	markdownlint	68	0	0		0	1.12s
✅ MARKDOWN	markdown-table-formatter	68	0	0		0	0.17s
✅ PYTHON	black	2040	0	0		0	33.0s
✅ PYTHON	isort	2040	0	0		0	1.6s
✅ REPOSITORY	betterleaks	yes		no		no	0.83s
✅ REPOSITORY	checkov	yes		no		no	24.45s
✅ REPOSITORY	git_diff	yes		no		no	0.07s
✅ REPOSITORY	secretlint	yes		no		no	3.61s
✅ REPOSITORY	syft	yes		no		no	1.76s
✅ REPOSITORY	trivy-sbom	yes		no		no	1.26s
✅ YAML	prettier	11	0	0		0	0.4s
✅ YAML	v8r	11		0		0	6.99s
✅ YAML	yamllint	11		0		0	0.24s

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: MAKEFILE_CHECKMAKE. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@10.1.0 --custom-flavor-setup --custom-flavor-linters PYTHON_BLACK,PYTHON_ISORT,COPYPASTE_JSCPD,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY_SBOM,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository