Skip to content

chore(deps-dev): bump portalocker from 2.10.1 to 4.4.2 - #1609

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/portalocker-4.4.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/portalocker-4.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

Bumps portalocker from 2.10.1 to 4.4.2.

Release notes

Sourced from portalocker's releases.

v4.4.2

4.4.2:

  • The build backend requirement is now uv_build>=0.11,<1 instead of <0.13. Every uv minor so far shipped without a change to the uv_build configuration, and the old bound only stopped other build frontends and distribution packagers, Fedora with uv 0.13 among them, from building the sdist. No library code changed for this. Reported and originally patched by Jeremy Cline.

v4.4.1

4.4.1:

  • open_atomic now anchors a relative destination when the context is entered, so a working-directory change inside the body no longer makes publication raise FileNotFoundError or leaves the temporary file behind after a failing body. As a consequence the name of the yielded handle and the paths in its FileExistsError messages are now absolute. Reported and fixed by Luochenchen.
  • Refreshed the pinned revisions of the CI actions, setup-uv and codeql-action among them. No library code changed for this.

v4.4.0

4.4.0:

  • Deprecated passing a bool as timeout or check_interval. bool subclasses int, so Lock(timeout=True) has always meant one second and timeout=False zero, rather than anything the caller intended. The value is still honoured and now warns, and it raises TypeError in 5.0. Reported and originally patched by Jon Bailey.
  • Pull requests no longer fail on lint findings ruff can fix by itself. CI applies those fixes and the autofix.ci app commits them to the branch, forks included, so the build only stops for findings that need a decision, such as whether a pytest.raises pattern was meant as a regular expression. No library code changed for this.

v4.3.2

4.3.2:

  • Restored the coverage badge. CI now merges the coverage data from every matrix cell, holds the merged result to the same 100% threshold each cell already enforces, and uploads it to Coveralls, so the badge measures a build instead of repeating a fixed claim. This release carries that README to PyPI. No library code changed.
  • Refreshed the pinned revisions of the CI actions, setup-uv across a major version among them.

v4.3.1

4.3.1:

... (truncated)

Changelog

Sourced from portalocker's changelog.

4.4.2:

  • The build backend requirement is now uv_build>=0.11,<1 instead of <0.13. Every uv minor so far shipped without a change to the uv_build configuration, and the old bound only stopped other build frontends and distribution packagers, Fedora with uv 0.13 among them, from building the sdist. No library code changed for this. Reported and originally patched by Jeremy Cline.

4.4.1:

  • open_atomic now anchors a relative destination when the context is entered, so a working-directory change inside the body no longer makes publication raise FileNotFoundError or leaves the temporary file behind after a failing body. As a consequence the name of the yielded handle and the paths in its FileExistsError messages are now absolute. Reported and fixed by Luochenchen.
  • Refreshed the pinned revisions of the CI actions, setup-uv and codeql-action among them. No library code changed for this.

4.4.0:

  • Deprecated passing a bool as timeout or check_interval. bool subclasses int, so Lock(timeout=True) has always meant one second and timeout=False zero, rather than anything the caller intended. The value is still honoured and now warns, and it raises TypeError in 5.0. Reported and originally patched by Jon Bailey.
  • Pull requests no longer fail on lint findings ruff can fix by itself. CI applies those fixes and the autofix.ci app commits them to the branch, forks included, so the build only stops for findings that need a decision, such as whether a pytest.raises pattern was meant as a regular expression. No library code changed for this.

4.3.2:

  • Restored the coverage badge. CI now merges the coverage data from every matrix cell, holds the merged result to the same 100% threshold each cell already enforces, and uploads it to Coveralls, so the badge measures a build instead of repeating a fixed claim. This release carries that README to PyPI. No library code changed.
  • Refreshed the pinned revisions of the CI actions, setup-uv across a major version among them.

4.3.1:

  • Refreshed the README in Markdown and added a branded documentation landing page, light and dark logos, and links to the locking guides. README examples now run directly from their Markdown source in tests.
  • Corrected the Linux mandatory-locking advice and clarified that Redis

... (truncated)

Commits
  • 2fb4ce9 Prepare 4.4.2 with the relaxed uv_build bound
  • baaf554 Prepare 4.4.1 with the open_atomic chdir fix
  • dfc0f1c Merge pull request #154 from harbinresearcher/codex/preserve-atomic-path-afte...
  • 40606e9 Merge pull request #152 from wolph/dependabot/github_actions/develop/actions-...
  • 6608d70 fix: anchor atomic output paths before entering the body
  • b01f12a Bump the actions group with 3 updates
  • c490bea Prepare 4.4.0 with the bool timeout deprecation
  • 9905718 Deprecate bool for Lock timeout and check_interval
  • f9253cc Merge pull request #149 from wolph/dependabot/github_actions/develop/actions-...
  • 6c44f07 Let ruff fix what it can before the lint gate runs
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
portalocker [>= 3.dev0, < 4]

@dependabot
dependabot Bot requested a review from a team as a code owner October 23, 2026 19:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 23, 2026
Bumps [portalocker](https://github.com/wolph/portalocker) from 2.10.1 to 4.4.2.
- [Release notes](https://github.com/wolph/portalocker/releases)
- [Changelog](https://github.com/wolph/portalocker/blob/develop/CHANGELOG.rst)
- [Commits](wolph/portalocker@v2.10.1...v4.4.2)

---
updated-dependencies:
- dependency-name: portalocker
  dependency-version: 4.4.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump portalocker from 2.10.1 to 4.4.1 chore(deps-dev): bump portalocker from 2.10.1 to 4.4.2 Nov 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/portalocker-4.4.1 branch from c7be899 to d510dc4 Compare November 9, 2026 15:50

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants