dependabot[bot] opened a new pull request, #70404: URL: https://github.com/apache/airflow/pull/70404
Bumps the uv-dependency-updates group in /dev/breeze with 2 updates: [filelock](https://github.com/tox-dev/py-filelock) and [gitpython](https://github.com/gitpython-developers/GitPython). Updates `filelock` from 3.31.0 to 3.31.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/py-filelock/releases";>filelock's releases</a>.</em></p> <blockquote> <h2>3.31.1</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>♻️ refactor(coverage): key exclusions on probed capability by <a href="https://github.com/gaborbernat";><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/679";>tox-dev/filelock#679</a></li> <li>scope a lease's claim to the context that acquired it by <a href="https://github.com/dxbjavid";><code>@dxbjavid</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/680";>tox-dev/filelock#680</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.31.0...3.31.1";>https://github.com/tox-dev/filelock/compare/3.31.0...3.31.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst";>filelock's changelog</a>.</em></p> <blockquote> <p>########### Changelog ###########</p> <p>.. towncrier-draft-entries:: Unreleased</p> <p>.. towncrier release notes start</p> <hr /> <p>3.32.0 (2026-07-21)</p> <hr /> <ul> <li><code>SoftReadWriteLock</code> closes the directory handle it opens to scan for readers as soon as a scan stops early, rather than holding it until the generator is collected. :pr:<code>685</code></li> <li>Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:<code>683</code></li> <li>The source distribution ships the capability probes the tests import, and reading one no longer needs <code>coverage</code> installed, so the suite runs from an unpacked sdist instead of failing on a missing <code>coverage_pragmas</code>. :pr:<code>685</code></li> </ul> <hr /> <p>3.31.2 (2026-07-21)</p> <hr /> <ul> <li><code>filelock</code> imports again on runtimes whose <code>errno</code> omits <code>ENOTSUP</code>, such as GraalPy, where importing the package raised <code>ImportError</code>. It probes the code instead, preferring <code>ENOTSUP</code>, falling back to <code>EOPNOTSUPP</code> where that name is absent, and dropping to <code>ENOSYS</code>/<code>EXDEV</code> where neither exists. Platforms defining <code>ENOTSUP</code> keep their behavior. :pr:<code>681</code></li> </ul> <hr /> <p>3.31.1 (2026-07-20)</p> <hr /> <ul> <li>A <code>SoftFileLease</code> acquired on one thread keeps its claim when another thread fails to acquire the same lease object, so its heartbeat carries on refreshing the marker instead of being torn down and letting a peer take the live claim. :pr:<code>680</code></li> </ul> <hr /> <p>3.31.0 (2026-07-18)</p> <hr /> <ul> <li>Support Termux/Android, whose CPython ships without <code>os.link</code> and reports <code>sys.platform == "android"</code>. <code>import filelock</code> and both <code>FileLock</code> and <code>SoftFileLock</code> now work there, <code>StrictSoftFileLock</code> reports its missing hard-link support only when acquired, and process liveness reads <code>/proc</code> on Android instead of PID-only checks. :pr:<code>678</code></li> <li><code>StrictSoftFileLock</code> no longer lets two processes hold the lock at once under heavy contention. A holder now keeps its intent claim for the whole hold, so a contender whose directory scan races the holder's freshly linked claim can no longer miss it and win alongside it. A held lock now exposes both an <code>intent</code> and a <code>held</code> claim. :pr:<code>678</code></li> </ul> <hr /> <p>3.30.3 (2026-07-17)</p> <hr /> <ul> <li><code>AsyncFileLock</code> and <code>AsyncSoftFileLock</code> no longer raise a deadlock <code>RuntimeError</code> when a different asyncio task</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/filelock/commit/c1b2e6fdbb8f2307e06dbc1543314194e3250139";><code>c1b2e6f</code></a> Release 3.31.1</li> <li><a href="https://github.com/tox-dev/filelock/commit/9fd7de55e1109fee751173ad3842cf909349ce9f";><code>9fd7de5</code></a> scope a lease's claim to the context that acquired it (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/680";>#680</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/2b3ad2c561889f340975bc62a48969e1fb4109d6";><code>2b3ad2c</code></a> ♻️ refactor(coverage): key exclusions on probed capability (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/679";>#679</a>)</li> <li>See full diff in <a href="https://github.com/tox-dev/py-filelock/compare/3.31.0...3.31.1";>compare view</a></li> </ul> </details> <br /> Updates `gitpython` from 3.1.52 to 3.1.53 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gitpython-developers/GitPython/releases";>gitpython's releases</a>.</em></p> <blockquote> <h2>3.1.53 - Security</h2> <h2>What's Changed</h2> <ul> <li>feat(submodule): add deinit method to Submodule (<a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2014";>#2014</a>) by <a href="https://github.com/mvanhorn";><code>@mvanhorn</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2129";>gitpython-developers/GitPython#2129</a></li> <li>typing: introduce sensible basedpyright defaults by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2174";>gitpython-developers/GitPython#2174</a></li> <li>fix: make <code>submodule.update()</code> after <code>submodule.deinit()</code> work by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2175";>gitpython-developers/GitPython#2175</a></li> <li>Fix commit hooks respecting core.hooksPath by <a href="https://github.com/Siesta0217";><code>@Siesta0217</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2159";>gitpython-developers/GitPython#2159</a></li> <li>fix: validate config section delimiters by <a href="https://github.com/Byron";><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2176";>gitpython-developers/GitPython#2176</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Siesta0217";><code>@Siesta0217</code></a> made their first contribution in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2159";>gitpython-developers/GitPython#2159</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gitpython-developers/GitPython/compare/3.1.52...3.1.53";>https://github.com/gitpython-developers/GitPython/compare/3.1.52...3.1.53</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gitpython-developers/GitPython/commit/faf3c09038b03bc2bdd8545ef34bbf6d7f1cd11f";><code>faf3c09</code></a> prepare for security fix</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/6a5eb6a53407cfd7964447fa417d73a7ab32e700";><code>6a5eb6a</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2176";>#2176</a> from gitpython-developers/fix-config-injection</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/1ed1b924f4e2d2ee7bab296df77b978af21853f1";><code>1ed1b92</code></a> fix: validate config section delimiters</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/354eb2fc505042d2f4cd913783b689bce6c49fd3";><code>354eb2f</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2159";>#2159</a> from Siesta0217/fix-core-hooks-path-commit-hooks</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/9bc287a2b1eb331b6051d2ba704a603c3e0ddc6f";><code>9bc287a</code></a> Address review feedback about hook resolution</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/406b98e1695dfaa706304103b0d524515ace2ebf";><code>406b98e</code></a> fix: respect core.hooksPath for commit hooks</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/5bc256060cfaf8f32100780f17e0846f3e69d8b7";><code>5bc2560</code></a> upate contributing guide to avoid agent impersonation</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/15527ef14a87fcc3e047d94a84938122e05d0c7e";><code>15527ef</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2175";>#2175</a> from gitpython-developers/submodule-deinit-fix</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/b9d82c08210d107af9e2bdf7e368fb2f9dfec296";><code>b9d82c0</code></a> fix: make <code>submodule.update()</code> after <code>submodule.deinit()</code> work</li> <li><a href="https://github.com/gitpython-developers/GitPython/commit/f89e18c94e362c20cd2be8436ad91e769c5aa40a";><code>f89e18c</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2174";>#2174</a> from gitpython-developers/basedpyright</li> <li>Additional commits viewable in <a href="https://github.com/gitpython-developers/GitPython/compare/3.1.52...3.1.53";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
