dependabot[bot] opened a new pull request, #64011: URL: https://github.com/apache/airflow/pull/64011
Bumps the pip-dependency-updates group with 2 updates in the / directory: [filelock](https://github.com/tox-dev/py-filelock) and [virtualenv](https://github.com/pypa/virtualenv). Updates `filelock` from 3.25.0 to 3.25.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/py-filelock/releases";>filelock's releases</a>.</em></p> <blockquote> <h2>3.25.2</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>🐛 fix(unix): suppress EIO on close in Docker bind mounts by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/513";>tox-dev/filelock#513</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.25.1...3.25.2";>https://github.com/tox-dev/filelock/compare/3.25.1...3.25.2</a></p> <h2>3.25.1</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>📝 docs(logo): add branded project logo by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/507";>tox-dev/filelock#507</a></li> <li>🐛 fix(win): restore best-effort lock file cleanup on release by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/511";>tox-dev/filelock#511</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.25.0...3.25.1";>https://github.com/tox-dev/filelock/compare/3.25.0...3.25.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst";>filelock's changelog</a>.</em></p> <blockquote> <p>########### Changelog ###########</p> <hr /> <p>3.25.2 (2026-03-11)</p> <hr /> <ul> <li>🐛 fix(unix): suppress EIO on close in Docker bind mounts :pr:<code>513</code></li> </ul> <hr /> <p>3.25.1 (2026-03-09)</p> <hr /> <ul> <li>[pre-commit.ci] pre-commit autoupdate :pr:<code>510</code> - by :user:<code>pre-commit-ci[bot]</code></li> <li>🐛 fix(win): restore best-effort lock file cleanup on release :pr:<code>511</code></li> <li>[pre-commit.ci] pre-commit autoupdate :pr:<code>508</code> - by :user:<code>pre-commit-ci[bot]</code></li> <li>📝 docs(logo): add branded project logo :pr:<code>507</code></li> </ul> <hr /> <p>3.25.0 (2026-03-01)</p> <hr /> <ul> <li>✨ feat(async): add AsyncReadWriteLock :pr:<code>506</code></li> <li>Standardize .github files to .yaml suffix</li> <li>build(deps): bump actions/download-artifact from 7 to 8 :pr:<code>503</code> - by :user:<code>dependabot[bot]</code></li> <li>build(deps): bump actions/upload-artifact from 6 to 7 :pr:<code>502</code> - by :user:<code>dependabot[bot]</code></li> <li>Move SECURITY.md to .github/SECURITY.md</li> <li>Add security policy</li> <li>Add permissions to check workflow :pr:<code>500</code></li> <li>[pre-commit.ci] pre-commit autoupdate :pr:<code>499</code> - by :user:<code>pre-commit-ci[bot]</code></li> </ul> <hr /> <p>3.24.3 (2026-02-19)</p> <hr /> <ul> <li>🐛 fix(unix): handle ENOENT race on FUSE/NFS during acquire :pr:<code>495</code></li> <li>🐛 fix(ci): add trailing blank line after changelog entries :pr:<code>492</code></li> </ul> <hr /> <p>3.24.2 (2026-02-16)</p> <hr /> <ul> <li>🐛 fix(rw): close sqlite3 cursors and skip SoftFileLock Windows race :pr:<code>491</code></li> <li>🐛 fix(test): resolve flaky write non-starvation test :pr:<code>490</code></li> <li>📝 docs: restructure using Diataxis framework :pr:<code>489</code></li> </ul> <hr /> <p>3.24.1 (2026-02-15)</p> <hr /> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/filelock/commit/5b9872c523b20db569d8832da4fb640e9c175ce6";><code>5b9872c</code></a> Release 3.25.2</li> <li><a href="https://github.com/tox-dev/filelock/commit/42b740aa076e81332402a16244c7cea60ac78851";><code>42b740a</code></a> 🐛 fix(unix): suppress EIO on close in Docker bind mounts (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/513";>#513</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/d8b04b5018932f53b3d2743fadac507dd616af5c";><code>d8b04b5</code></a> Release 3.25.1</li> <li><a href="https://github.com/tox-dev/filelock/commit/0633386072b71dfd27c6799323aecca45fb6a094";><code>0633386</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/510";>#510</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/7f2247d81bc8eab802821cd40437a61c40368d17";><code>7f2247d</code></a> 🐛 fix(win): restore best-effort lock file cleanup on release (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/511";>#511</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/5ae1c4e36548fc0ff6e24a26cb4187b65f2cdccb";><code>5ae1c4e</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/508";>#508</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/bcffcfea7a8f616968e7cc45c047cc0d4142a064";><code>bcffcfe</code></a> 📝 docs(logo): add branded project logo (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/507";>#507</a>)</li> <li>See full diff in <a href="https://github.com/tox-dev/py-filelock/compare/3.25.0...3.25.2";>compare view</a></li> </ul> </details> <br /> Updates `virtualenv` from 21.1.0 to 21.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pypa/virtualenv/releases";>virtualenv's releases</a>.</em></p> <blockquote> <h2>21.2.0</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>Move SECURITY.md to .github/SECURITY.md by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3077";>pypa/virtualenv#3077</a></li> <li>Standardize .github files to .yaml suffix by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3079";>pypa/virtualenv#3079</a></li> <li>Add type annotations to embed wheel generator output by <a href="https://github.com/rahuldevikar";><code>@rahuldevikar</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3085";>pypa/virtualenv#3085</a></li> <li>fix broken README heading introduced in docs restructure by <a href="https://github.com/rahuldevikar";><code>@rahuldevikar</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3088";>pypa/virtualenv#3088</a></li> <li>🐛 fix(bash): use BASH_SOURCE in activate relocation by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3091";>pypa/virtualenv#3091</a></li> <li>🐛 fix(create): prevent venv from racing virtualenv on gitignore creation by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3092";>pypa/virtualenv#3092</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/21.1.0...21.2.0";>https://github.com/pypa/virtualenv/compare/21.1.0...21.2.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst";>virtualenv's changelog</a>.</em></p> <blockquote> <h1>Features - 21.2.0</h1> <ul> <li>Update embed wheel generator (<code>tasks/upgrade_wheels.py</code>) to include type annotations in generated output - by :user:<code>rahuldevikar</code>. (:issue:<code>3075</code>)</li> </ul> <h1>Bugfixes - 21.2.0</h1> <ul> <li>Pass <code>--without-scm-ignore-files</code> to subprocess venv on Python 3.13+ so virtualenv controls <code>.gitignore</code> creation, fixing flaky <code>test_create_no_seed</code> and <code>--no-vcs-ignore</code> being ignored in subprocess path - by :user:<code>gaborbernat</code>. (:issue:<code>3089</code>)</li> <li>Use <code>BASH_SOURCE[0]</code> instead of <code>$0</code> in the bash activate script relocation fallback, fixing incorrect <code>PATH</code> when sourcing the activate script from a different directory - by :user:<code>gaborbernat</code>. (:issue:<code>3090</code>)</li> </ul> <hr /> <p>v21.1.0 (2026-02-27)</p> <hr /> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/virtualenv/commit/0b6f4445da2560cb11c4808ead464d94ffdf1b05";><code>0b6f444</code></a> release 21.2.0</li> <li><a href="https://github.com/pypa/virtualenv/commit/e1af35dc7808e75410c55490c35421f461af2920";><code>e1af35d</code></a> 🐛 fix(create): prevent venv from racing virtualenv on gitignore creation (<a href="https://redirect.github.com/pypa/virtualenv/issues/3092";>#3092</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/f05bf08f6e2b6fe313aa7378475a30d6151180e2";><code>f05bf08</code></a> 🐛 fix(bash): use BASH_SOURCE in activate relocation (<a href="https://redirect.github.com/pypa/virtualenv/issues/3091";>#3091</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/0cd0e09526863f46f91a4afc057f179fdacf3878";><code>0cd0e09</code></a> fix broken README heading introduced in docs restructure (<a href="https://redirect.github.com/pypa/virtualenv/issues/3088";>#3088</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/b7ab17e4739322cf2793ff348e8b2c15c6ebcffe";><code>b7ab17e</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/3087";>#3087</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/f2062bc8ece1d142523209af4785d302f83e6807";><code>f2062bc</code></a> chore(deps): bump astral-sh/setup-uv from 4 to 7 (<a href="https://redirect.github.com/pypa/virtualenv/issues/3086";>#3086</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/eb27e55d716d8836b24296efa3a73b98ff1b29e8";><code>eb27e55</code></a> Add type annotations to embed wheel generator output (<a href="https://redirect.github.com/pypa/virtualenv/issues/3085";>#3085</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/fbb3bd183f2f98bfa68211e014db8995dae64b79";><code>fbb3bd1</code></a> chore(deps): bump peter-evans/create-pull-request from 7 to 8 (<a href="https://redirect.github.com/pypa/virtualenv/issues/3081";>#3081</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/a1d3963f1c078a2a7b56af14cf824e254531de65";><code>a1d3963</code></a> chore(deps): bump actions/setup-python from 5 to 6 (<a href="https://redirect.github.com/pypa/virtualenv/issues/3080";>#3080</a>)</li> <li><a href="https://github.com/pypa/virtualenv/commit/e768d5632065d45a06c4d2e99610e1c92a267166";><code>e768d56</code></a> chore(deps): bump actions/upload-artifact from 4 to 7 (<a href="https://redirect.github.com/pypa/virtualenv/issues/3082";>#3082</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pypa/virtualenv/compare/21.1.0...21.2.0";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
