Skip to content

Commit ab4f655

Browse files
Bump filelock from 3.20.0 to 3.20.1 (#11852)
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.20.0 to 3.20.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/py-filelock/releases">filelock's releases</a>.</em></p> <blockquote> <h2>3.20.1</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>CVE-2025-68146: Fix TOCTOU symlink vulnerability in lock file creation by <a href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/461">tox-dev/filelock#461</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.20.0...3.20.1">https://github.com/tox-dev/filelock/compare/3.20.0...3.20.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/filelock/commit/377f62251d7cdf30768cc9ee1eb31cea1551c71b"><code>377f622</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/460">#460</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/4724d7f8c3393ec1f048c93933e6e3e6ec321f0e"><code>4724d7f</code></a> Fix TOCTOU symlink vulnerability in lock file creation (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/461">#461</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/cb69414a2327cf0a9887e12054d1dc112ee700af"><code>cb69414</code></a> Bump actions/upload-artifact from 5 to 6 (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/459">#459</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/0769294f14a6c62eea64741722f7acef5386b4cd"><code>0769294</code></a> Bump actions/download-artifact from 6 to 7 (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/458">#458</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/414193a188892bd376eb5c56eb45a9cf8ecc9284"><code>414193a</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/457">#457</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/1456797beb94ad59e5627462ad29f7ed3a966626"><code>1456797</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/456">#456</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/8d6bf90af313ac7fd6e41ef2b715d91dd6858f5c"><code>8d6bf90</code></a> Bump actions/checkout from 5 to 6 (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/455">#455</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/f7edeebddf79c210db2a6af145d33849e93c5550"><code>f7edeeb</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/454">#454</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/fb0923562189078b524ad3bd978e5e743dea9b2f"><code>fb09235</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/453">#453</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/f5825d867707b432e1c93f85833ce8d3766c986c"><code>f5825d8</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/452">#452</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tox-dev/py-filelock/compare/3.20.0...3.20.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=filelock&package-manager=pip&previous-version=3.20.0&new-version=3.20.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent ef53f7b commit ab4f655

3 files changed

Lines changed: 3 additions & 3 deletions

File tree

requirements/constraints.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,7 @@ exceptiongroup==1.3.1
6969
# via pytest
7070
execnet==2.1.2
7171
# via pytest-xdist
72-
filelock==3.20.0
72+
filelock==3.20.1
7373
# via virtualenv
7474
forbiddenfruit==0.1.4
7575
# via blockbuster

requirements/dev.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@ exceptiongroup==1.3.1
6767
# via pytest
6868
execnet==2.1.2
6969
# via pytest-xdist
70-
filelock==3.20.0
70+
filelock==3.20.1
7171
# via virtualenv
7272
forbiddenfruit==0.1.4
7373
# via blockbuster

requirements/lint.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ distlib==0.4.0
2929
# via virtualenv
3030
exceptiongroup==1.3.1
3131
# via pytest
32-
filelock==3.20.0
32+
filelock==3.20.1
3333
# via virtualenv
3434
forbiddenfruit==0.1.4
3535
# via blockbuster

0 commit comments

Comments
 (0)