Skip to content

chore(deps-dev): bump portalocker from 2.10.1 to 4.4.1 - #1609

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/portalocker-4.4.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/portalocker-4.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps portalocker from 2.10.1 to 4.4.1.

Release notes

Sourced from portalocker's releases.

v4.4.1

4.4.1:

  • open_atomic now anchors a relative destination when the context is entered, so a working-directory change inside the body no longer makes publication raise FileNotFoundError or leaves the temporary file behind after a failing body. As a consequence the name of the yielded handle and the paths in its FileExistsError messages are now absolute. Reported and fixed by Luochenchen.
  • Refreshed the pinned revisions of the CI actions, setup-uv and codeql-action among them. No library code changed for this.

v4.4.0

4.4.0:

  • Deprecated passing a bool as timeout or check_interval. bool subclasses int, so Lock(timeout=True) has always meant one second and timeout=False zero, rather than anything the caller intended. The value is still honoured and now warns, and it raises TypeError in 5.0. Reported and originally patched by Jon Bailey.
  • Pull requests no longer fail on lint findings ruff can fix by itself. CI applies those fixes and the autofix.ci app commits them to the branch, forks included, so the build only stops for findings that need a decision, such as whether a pytest.raises pattern was meant as a regular expression. No library code changed for this.

v4.3.2

4.3.2:

  • Restored the coverage badge. CI now merges the coverage data from every matrix cell, holds the merged result to the same 100% threshold each cell already enforces, and uploads it to Coveralls, so the badge measures a build instead of repeating a fixed claim. This release carries that README to PyPI. No library code changed.
  • Refreshed the pinned revisions of the CI actions, setup-uv across a major version among them.

v4.3.1

4.3.1:

  • Refreshed the README in Markdown and added a branded documentation landing page, light and dark logos, and links to the locking guides. README examples now run directly from their Markdown source in tests.
  • Corrected the Linux mandatory-locking advice and clarified that Redis subscription removal and local loss detection can happen at different times during a network failure.
  • Capped Redis retry sleeps at the acquisition deadline. A large check_interval no longer adds a full interval after the timeout. Reply polling retains its final read so buffered holder responses are

... (truncated)

Changelog

Sourced from portalocker's changelog.

4.4.1:

  • open_atomic now anchors a relative destination when the context is entered, so a working-directory change inside the body no longer makes publication raise FileNotFoundError or leaves the temporary file behind after a failing body. As a consequence the name of the yielded handle and the paths in its FileExistsError messages are now absolute. Reported and fixed by Luochenchen.
  • Refreshed the pinned revisions of the CI actions, setup-uv and codeql-action among them. No library code changed for this.

4.4.0:

  • Deprecated passing a bool as timeout or check_interval. bool subclasses int, so Lock(timeout=True) has always meant one second and timeout=False zero, rather than anything the caller intended. The value is still honoured and now warns, and it raises TypeError in 5.0. Reported and originally patched by Jon Bailey.
  • Pull requests no longer fail on lint findings ruff can fix by itself. CI applies those fixes and the autofix.ci app commits them to the branch, forks included, so the build only stops for findings that need a decision, such as whether a pytest.raises pattern was meant as a regular expression. No library code changed for this.

4.3.2:

  • Restored the coverage badge. CI now merges the coverage data from every matrix cell, holds the merged result to the same 100% threshold each cell already enforces, and uploads it to Coveralls, so the badge measures a build instead of repeating a fixed claim. This release carries that README to PyPI. No library code changed.
  • Refreshed the pinned revisions of the CI actions, setup-uv across a major version among them.

4.3.1:

  • Refreshed the README in Markdown and added a branded documentation landing page, light and dark logos, and links to the locking guides. README examples now run directly from their Markdown source in tests.
  • Corrected the Linux mandatory-locking advice and clarified that Redis subscription removal and local loss detection can happen at different times during a network failure.
  • Capped Redis retry sleeps at the acquisition deadline. A large check_interval no longer adds a full interval after the timeout. Reply polling retains its final read so buffered holder responses are processed before deciding that a holder is unavailable.
  • Fixed cancelled Redis acquisition leaving a subscription or elected writer behind. Cancellation during setup or between attempts now releases resources, preserves the original exception and permits reuse.

... (truncated)

Commits
  • baaf554 Prepare 4.4.1 with the open_atomic chdir fix
  • dfc0f1c Merge pull request #154 from harbinresearcher/codex/preserve-atomic-path-afte...
  • 40606e9 Merge pull request #152 from wolph/dependabot/github_actions/develop/actions-...
  • 6608d70 fix: anchor atomic output paths before entering the body
  • b01f12a Bump the actions group with 3 updates
  • c490bea Prepare 4.4.0 with the bool timeout deprecation
  • 9905718 Deprecate bool for Lock timeout and check_interval
  • f9253cc Merge pull request #149 from wolph/dependabot/github_actions/develop/actions-...
  • 6c44f07 Let ruff fix what it can before the lint gate runs
  • 4193d14 Bump shogo82148/actions-setup-redis in the actions group
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
portalocker [>= 3.dev0, < 4]

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [portalocker](https://github.com/wolph/portalocker) from 2.10.1 to 4.4.1.
- [Release notes](https://github.com/wolph/portalocker/releases)
- [Changelog](https://github.com/wolph/portalocker/blob/develop/CHANGELOG.rst)
- [Commits](wolph/portalocker@v2.10.1...v4.4.1)

---
updated-dependencies:
- dependency-name: portalocker
  dependency-version: 4.4.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 23, 2026 19:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 23, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants