Bump filelock from 3.29.0 to 4.0.10

[dependabot]

Bumps filelock from 3.29.0 to 4.0.10.

Release notes

Sourced from filelock's releases.

4.0.10

What's Changed

• ♻️ refactor(util): test helpers via public locks by @​gaborbernat in tox-dev/filelock#764
• 🐛 fix(singleton): reject conflicting async and lease options by @​kokotatan in tox-dev/filelock#765

New Contributors

• @​kokotatan made their first contribution in tox-dev/filelock#765

Full Changelog: tox-dev/filelock@4.0.9...4.0.10

4.0.9

What's Changed

• 📝 docs(util): correct write and break guarantees by @​pralav-25 in tox-dev/filelock#762
• 🐛 fix(read-write): close db fd after connect by @​gaborbernat in tox-dev/filelock#763

New Contributors

• @​pralav-25 made their first contribution in tox-dev/filelock#762

Full Changelog: tox-dev/filelock@4.0.8...4.0.9

4.0.8

What's Changed

• 🐛 fix(read-write): refuse cross-thread write release by @​feiiiiii5 in tox-dev/filelock#761

Full Changelog: tox-dev/filelock@4.0.7...4.0.8

4.0.7

What's Changed

• 🐛 fix(mode): require owner read and write by @​gaborbernat in tox-dev/filelock#760

Full Changelog: tox-dev/filelock@4.0.6...4.0.7

4.0.6

What's Changed

• fix(read-write): validate reentrant timeouts by @​feiiiiii5 in tox-dev/filelock#756

Full Changelog: tox-dev/filelock@4.0.5...4.0.6

... (truncated)

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

---

4.0.12 (2026-10-05)

---

• Fix read-lock acquisition on SQLite versions older than 3.33.0 by using sqlite_master for the schema probe. :pr:769

---

4.0.11 (2026-10-05)

---

• ReadWriteLock and AsyncReadWriteLock use a validated private hard link when /dev/fd has no entry for the database descriptor, supporting NetBSD's static descriptor directory beyond descriptor 63. The temporary location must share a filesystem with the database. The symlink refusal test accepts NetBSD's error wording.

---

4.0.10 (2026-10-03)

---

• Reusing a singleton AsyncFileLock with another loop, executor or run_in_executor, or a singleton SoftFileLease with another lease_duration, heartbeat_interval or on_compromise, now raises ValueError instead of returning the lock with its original options. :pr:765

---

4.0.9 (2026-10-01)

---

• ReadWriteLock and AsyncReadWriteLock close the descriptor that checks the database path once SQLite has connected, so on PyPy a dropped lock leaves no descriptor open until garbage collection runs. :pr:763
• ReadWriteLock and AsyncReadWriteLock refuse a symlink at the database path instead of following it, so a user who can create names in a shared lock directory cannot point the lock at another file (GHSA-j8f7-rjxc-mr56).

---

4.0.8 (2026-10-01)

---

• ReadWriteLock.release() and SoftReadWriteLock.release() from a thread that does not hold the write lock now raise RuntimeError instead of dropping the holder's lock and letting a second writer in. :pr:761

---

4.0.7 (2026-09-29)

---

... (truncated)

Commits

• 1f0632b Release 4.0.10
• c9c65ab 🐛 fix(singleton): reject conflicting async and lease options (#765)
• bc2405b ♻️ refactor(util): test helpers via public locks (#764)
• 7b00bb8 Release 4.0.9
• 4944624 🐛 fix(read-write): close db fd after connect (#763)
• 162060e 📝 docs(util): correct write and break guarantees (#762)
• 4d45e83 Merge commit from fork
• 9376e9b Release 4.0.8
• 34f4657 🐛 fix(read-write): refuse cross-thread write release (#761)
• 9ed62ac Release 4.0.7
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)