Bump filelock from 4.1.0 to 4.1.1

[dependabot]

Bumps filelock from 4.1.0 to 4.1.1.

Release notes

Sourced from filelock's releases.

4.1.1

What's Changed

• feat(python): default to Python 3.15 by @​gaborbernat in tox-dev/filelock#816
• fix(rw): avoid macOS descriptor lookups by @​gaborbernat in tox-dev/filelock#820
• fix(tests): bound concurrent lock progress by @​gaborbernat in tox-dev/filelock#819
• test: make lock error checks deterministic by @​adenzhou1350 in tox-dev/filelock#817
• fix(read-write): reject a hostile pid in _owner_is_gone by @​dxbjavid in tox-dev/filelock#821

New Contributors

• @​adenzhou1350 made their first contribution in tox-dev/filelock#817

Full Changelog: tox-dev/filelock@4.1.0...4.1.1

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

---

4.2.0 (2026-10-14)

---

• import filelock is about twice as fast: lock types other than :class:~filelock.FileLock load on first use. :pr:831
• Fix :class:~filelock.StrictSoftFileLock raising :class:~filelock.SoftFileLockProtocolError on Windows when a contender read a claim whose owner was still finishing its unlink. :pr:829

---

4.1.2 (2026-10-14)

---

• Fix read-lock acquisition on SQLite versions older than 3.33.0 by using sqlite_master for the schema probe. :pr:770
• Raise IsADirectoryError (or PermissionError on Windows) for a directory lock path regardless of its write permissions. :pr:822
• Fix a forked child hanging at exit on PyPy when the parent forked while an :class:~filelock.AsyncReadWriteLock worker thread was between two operations. :pr:828
• Hash all cache keys in the lock filename recipe so short path-like keys stay in the chosen directory. The example also accepts path-derived surrogate escapes and works before the cache directory exists. :pr:824

---

4.1.1 (2026-10-11)

---

• Bound the shared-lock contention test by worker progress so slow CI machines can finish the workload. :pr:819
• Avoid the macOS /dev/fd lookup implicated in a kernel panic by opening SQLite through a validated hard link. The database directory must be writable and support hard links; alias creation failure raises OSError. :pr:820
• Ignore non-ASCII PID or start-time fields and out-of-range PIDs in ReadWriteLock hard-link directory names so forged owners cannot abort acquisition. :pr:821
• Use Python 3.15 for development and automation. :pr:816

---

4.1.0 (2026-10-09)

---

• Import :data:~filelock.OwnerMode, :data:~filelock.CompromiseReason and :data:~filelock.has_fcntl from filelock. :pr:790
• :class:~filelock.AcquireReturnProxy is generic in the lock type, so with lock.acquire() as held: types held as the lock's own class. :pr:803
• A :class:~filelock.Timeout from a soft lock names a holder on another host or in another PID namespace, which no contender ever reclaims. :pr:815
• :attr:~filelock.SoftFileLock.is_lock_held_by_us and :attr:~filelock.MarkerSoftFileLock.is_lock_held_by_us return

... (truncated)

Commits

• 5830a7e Release 4.1.1
• a5fb607 fix(read-write): reject a hostile pid in _owner_is_gone (#821)
• 4c6f32f test: make lock error checks deterministic (#817)
• f11f523 fix(tests): bound concurrent lock progress (#819)
• 5fd0c8f fix(rw): avoid macOS descriptor lookups (#820)
• 0c3aaab feat(python): default to Python 3.15 (#816)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ COPYPASTE	jscpd	yes		no		no	4.37s
✅ JSON	prettier	7	0	0		0	0.63s
✅ JSON	v8r	7		0		0	6.37s
✅ MARKDOWN	markdownlint	69	0	0		0	1.14s
✅ MARKDOWN	markdown-table-formatter	69	0	0		0	0.26s
✅ PYTHON	black	2041	0	0		0	29.3s
✅ PYTHON	isort	2041	2	0		0	1.52s
✅ REPOSITORY	betterleaks	yes		no		no	0.76s
✅ REPOSITORY	checkov	yes		no		no	20.13s
✅ REPOSITORY	git_diff	yes		no		no	0.08s
✅ REPOSITORY	secretlint	yes		no		no	3.57s
✅ REPOSITORY	syft	yes		no		no	1.73s
✅ REPOSITORY	trivy-sbom	yes		no		no	1.47s
✅ YAML	prettier	11	0	0		0	0.34s
✅ YAML	v8r	11		0		0	15.4s
✅ YAML	yamllint	11		0		0	0.19s

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: MAKEFILE_CHECKMAKE. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@10.1.0 --custom-flavor-setup --custom-flavor-linters PYTHON_BLACK,PYTHON_ISORT,COPYPASTE_JSCPD,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY_SBOM,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository