dependabot[bot] opened a new pull request, #75510: URL: https://github.com/apache/airflow/pull/75510
Bumps the 3-4-uv-dependency-updates group in /dev/breeze with 2 updates: [filelock](https://github.com/tox-dev/py-filelock) and [prek](https://github.com/j178/prek). Updates `filelock` from 4.2.1 to 4.2.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/py-filelock/releases";>filelock's releases</a>.</em></p> <blockquote> <h2>4.2.4</h2> <ul> <li>Keep GitHub Release notes free of extra blank lines while retaining the PyPI and version comparison links. <a href="https://redirect.github.com/tox-dev/py-filelock/issues/863";>#863</a></li> </ul> <p><a href="https://pypi.org/project/filelock/4.2.4/";>PyPI release</a></p> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/4.2.3...4.2.4";>https://github.com/tox-dev/filelock/compare/4.2.3...4.2.4</a></p> <h2>4.2.3</h2> <ul> <li>Creating a lock on a Python 3.15 interpreter without <code>types.LazyImportType</code> no longer triggers <code>AttributeError</code> at exit. <a href="https://redirect.github.com/tox-dev/py-filelock/issues/860";>#860</a></li> <li>Handle <code>EFTYPE</code> when a no-follow open refuses a symlink in a soft reader/writer lock's protocol tree, so heartbeat reports lost ownership rather than a transient refresh error.</li> </ul> <p><a href="https://pypi.org/project/filelock/4.2.3/";>PyPI release</a></p> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/4.2.2...4.2.3";>https://github.com/tox-dev/filelock/compare/4.2.2...4.2.3</a></p> <h2>4.2.2</h2> <ul> <li>Fix a lock on a relative path that stayed held after a later <code>with lock:</code> ended, when an earlier <code>acquire()</code> had failed because the working directory no longer exists. That call still raises <code>FileNotFoundError</code>, and it now leaves the lock's hold count unchanged. <a href="https://redirect.github.com/tox-dev/py-filelock/issues/856";>#856</a></li> </ul> <p><a href="https://pypi.org/project/filelock/4.2.2/";>PyPI release</a></p> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/4.2.1...4.2.2";>https://github.com/tox-dev/filelock/compare/4.2.1...4.2.2</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst";>filelock's changelog</a>.</em></p> <blockquote> <p>########### Changelog ###########</p> <p>.. towncrier-draft-entries:: Unreleased</p> <p>.. towncrier release notes start</p> <hr /> <p>4.2.4 (2026-10-19)</p> <hr /> <ul> <li>Keep GitHub Release notes free of extra blank lines while retaining the PyPI and version comparison links. :pr:<code>863</code></li> </ul> <hr /> <p>4.2.3 (2026-10-19)</p> <hr /> <ul> <li>Creating a lock on a Python 3.15 interpreter without <code>types.LazyImportType</code> no longer triggers <code>AttributeError</code> at exit. :pr:<code>860</code></li> <li>Handle <code>EFTYPE</code> when a no-follow open refuses a symlink in a soft reader/writer lock's protocol tree, so heartbeat reports lost ownership rather than a transient refresh error.</li> </ul> <hr /> <p>4.2.2 (2026-10-18)</p> <hr /> <ul> <li>Fix a lock on a relative path that stayed held after a later <code>with lock:</code> ended, when an earlier <code>acquire()</code> had failed because the working directory no longer exists. That call still raises :class:<code>FileNotFoundError</code>, and it now leaves the lock's hold count unchanged. :pr:<code>856</code></li> </ul> <hr /> <p>4.2.1 (2026-10-17)</p> <hr /> <ul> <li>On a singleton wrapper, :meth:<code>AsyncReadWriteLock.close() <filelock.AsyncReadWriteLock.close></code> and :meth:<code>AsyncSoftReadWriteLock.close() <filelock.AsyncSoftReadWriteLock.close></code> end only the holds that tasks acquired through that wrapper. A reader that arrives during <code>close()</code> gets the closed error instead of joining the ending hold. After synchronous code closes or force-releases the shared lock, the wrappers refuse to admit readers into the ended hold, and <code>close()</code> on such a wrapper returns. Closing one wrapper no longer ends a task's nested hold taken through another wrapper on the same path. :pr:<code>832</code></li> <li>:class:<code>~filelock.ReadWriteLock</code> locks again after a <code>release()</code> that an exception from a signal handler interrupted. The async read-write wrappers stop admitting readers into such a level. The async read-write locks forget a hold whose backend release failed after the backend let go, and they free the memory of each acquire that times out or is canceled. :class:<code>~filelock.AsyncFileLock</code> returns from <code>release()</code> after a few hundred acquires gave up behind a waiting one. An exception from a signal handler delivered while an :class:<code>~filelock.AsyncFileLock</code> call joins its queue no longer blocks every later call on that lock. :pr:<code>833</code></li> <li>Fix :class:<code>~filelock.ReadWriteLock</code> acting on <code>-journal</code>, <code>-wal</code> or <code>-shm</code> files another process puts beside its database: a write could land in another file, a reader could get in beside a writer, and an acquire could fail. SQLite now opens the database by name only in a directory no other account can write, and through a private hard link elsewhere. On Windows the directory's access control list decides. Where hard links are unavailable, keep the database</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/filelock/commit/22f0776dd499690d71d2e6d2f95e1662a76db75d";><code>22f0776</code></a> Release 4.2.4</li> <li><a href="https://github.com/tox-dev/filelock/commit/9d278ed268586d561f903aebc693908b99329a98";><code>9d278ed</code></a> Document GitHub Release note cleanup (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/863";>#863</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/3c337980bffcb15a4a3aa4c5f61a652b31181822";><code>3c33798</code></a> 🐛 fix(release): trim GitHub release notes (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/862";>#862</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/e7379240003b1c5a990b012624a5cb5e55f72b9d";><code>e737924</code></a> Release 4.2.3</li> <li><a href="https://github.com/tox-dev/filelock/commit/84dc80cf65493c8232033ecff41d1edac38c6808";><code>84dc80c</code></a> 👷 ci: collect required checks (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/857";>#857</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/cb8b57e471bcd505848991951541fdb5bff3ef02";><code>cb8b57e</code></a> fix(api): guard lazy import exit hook (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/861";>#861</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/dd341acfb4efbe3b0c9a686e7815e18e11582c4b";><code>dd341ac</code></a> Handle NetBSD EFTYPE for replaced soft-RW protocol directories (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/859";>#859</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/db47f34032dd72e865e296a8a13fbce539ba2c8a";><code>db47f34</code></a> Release 4.2.2</li> <li><a href="https://github.com/tox-dev/filelock/commit/caaff8ad35b9140f4f1ec43cb2aba452af7d67b5";><code>caaff8a</code></a> fix(api): keep the hold count when the lock path cannot be resolved (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/856";>#856</a>)</li> <li>See full diff in <a href="https://github.com/tox-dev/py-filelock/compare/4.2.1...4.2.4";>compare view</a></li> </ul> </details> <br /> Updates `prek` from 0.5.5 to 0.5.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/j178/prek/releases";>prek's releases</a>.</em></p> <blockquote> <h2>0.5.6</h2> <h2>Release Notes</h2> <p>Released on 2026-10-19.</p> <h3>Enhancements</h3> <ul> <li>Add builtin hook <code>check-commit-trailers</code> (<a href="https://redirect.github.com/j178/prek/pull/2885";>#2885</a>)</li> <li>Add builtin hook <code>check-signed-commit</code> (<a href="https://redirect.github.com/j178/prek/pull/2725";>#2725</a>)</li> </ul> <h3>Performance</h3> <ul> <li>Enable PGO for native release builds (<a href="https://redirect.github.com/j178/prek/pull/2890";>#2890</a>)</li> <li>Reduce hook process launches with balanced batches (<a href="https://redirect.github.com/j178/prek/pull/2907";>#2907</a>)</li> <li>Resolve hook commands before batching (<a href="https://redirect.github.com/j178/prek/pull/2840";>#2840</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>Accept UTF-8 BOM in <code>check-json</code> (<a href="https://redirect.github.com/j178/prek/pull/2879";>#2879</a>)</li> <li>Preserve unquoted dotted revisions in <code>prek update</code> (<a href="https://redirect.github.com/j178/prek/pull/2853";>#2853</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Document standalone installer options (<a href="https://redirect.github.com/j178/prek/pull/2859";>#2859</a>)</li> <li>Update benchmarks for prek 0.5.5 (<a href="https://redirect.github.com/j178/prek/pull/2786";>#2786</a>)</li> </ul> <h3>Other changes</h3> <ul> <li>Enable ICF for release builds (<a href="https://redirect.github.com/j178/prek/pull/2891";>#2891</a>)</li> <li>Update uv to 0.13.0 (<a href="https://redirect.github.com/j178/prek/pull/2856";>#2856</a>)</li> </ul> <h3>Contributors</h3> <ul> <li><a href="https://github.com/ebuildy";><code>@ebuildy</code></a></li> <li><a href="https://github.com/j178";><code>@j178</code></a></li> <li><a href="https://github.com/shaanmajid";><code>@shaanmajid</code></a></li> </ul> <h2>Install prek 0.5.6</h2> <h3>Install prebuilt binaries via shell script</h3> <pre lang="sh"><code>curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.5.6/prek-installer.sh | sh </code></pre> <h3>Install prebuilt binaries via powershell script</h3> <pre lang="sh"><code>powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.6/prek-installer.ps1 | iex" </code></pre> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/j178/prek/blob/main/CHANGELOG.md";>prek's changelog</a>.</em></p> <blockquote> <h2>0.5.6</h2> <p>Released on 2026-10-19.</p> <h3>Enhancements</h3> <ul> <li>Add builtin hook <code>check-commit-trailers</code> (<a href="https://redirect.github.com/j178/prek/pull/2885";>#2885</a>)</li> <li>Add builtin hook <code>check-signed-commit</code> (<a href="https://redirect.github.com/j178/prek/pull/2725";>#2725</a>)</li> </ul> <h3>Performance</h3> <ul> <li>Enable PGO for native release builds (<a href="https://redirect.github.com/j178/prek/pull/2890";>#2890</a>)</li> <li>Reduce hook process launches with balanced batches (<a href="https://redirect.github.com/j178/prek/pull/2907";>#2907</a>)</li> <li>Resolve hook commands before batching (<a href="https://redirect.github.com/j178/prek/pull/2840";>#2840</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>Accept UTF-8 BOM in <code>check-json</code> (<a href="https://redirect.github.com/j178/prek/pull/2879";>#2879</a>)</li> <li>Preserve unquoted dotted revisions in <code>prek update</code> (<a href="https://redirect.github.com/j178/prek/pull/2853";>#2853</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Document standalone installer options (<a href="https://redirect.github.com/j178/prek/pull/2859";>#2859</a>)</li> <li>Update benchmarks for prek 0.5.5 (<a href="https://redirect.github.com/j178/prek/pull/2786";>#2786</a>)</li> </ul> <h3>Other changes</h3> <ul> <li>Enable ICF for release builds (<a href="https://redirect.github.com/j178/prek/pull/2891";>#2891</a>)</li> <li>Update uv to 0.13.0 (<a href="https://redirect.github.com/j178/prek/pull/2856";>#2856</a>)</li> </ul> <h3>Contributors</h3> <ul> <li><a href="https://github.com/ebuildy";><code>@ebuildy</code></a></li> <li><a href="https://github.com/j178";><code>@j178</code></a></li> <li><a href="https://github.com/shaanmajid";><code>@shaanmajid</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/j178/prek/commit/ee8a6cce37fe70d21281910e673bceddc003cb40";><code>ee8a6cc</code></a> Bump version to 0.5.6 (<a href="https://redirect.github.com/j178/prek/issues/2909";>#2909</a>)</li> <li><a href="https://github.com/j178/prek/commit/36116817569560119b2891e4dcf061dbdcc8f16a";><code>3611681</code></a> Reduce hook process launches with balanced batches (<a href="https://redirect.github.com/j178/prek/issues/2907";>#2907</a>)</li> <li><a href="https://github.com/j178/prek/commit/1af6b80acdee193effce67850897560530663008";><code>1af6b80</code></a> Use PR head commits for CI change detection</li> <li><a href="https://github.com/j178/prek/commit/29455ef294ce0abf416da951e1249b03e18c4460";><code>29455ef</code></a> Update dependency zensical to >=0.0.69 (<a href="https://redirect.github.com/j178/prek/issues/2896";>#2896</a>)</li> <li><a href="https://github.com/j178/prek/commit/1fd9308df9d9fec874e1aad556ddd2dfa3e97e0d";><code>1fd9308</code></a> Update dependency prefix-dev/pixi to v0.81.0 (<a href="https://redirect.github.com/j178/prek/issues/2905";>#2905</a>)</li> <li><a href="https://github.com/j178/prek/commit/140ab6b9654f938b3c496a580a6a859a7616df06";><code>140ab6b</code></a> Update docker.io/astral/uv Docker tag to v0.13.0 (<a href="https://redirect.github.com/j178/prek/issues/2906";>#2906</a>)</li> <li><a href="https://github.com/j178/prek/commit/3574ba305692928d223e0154f44853fb0bedd196";><code>3574ba3</code></a> Update dependency cargo-zigbuild to >=0.23.4 (<a href="https://redirect.github.com/j178/prek/issues/2895";>#2895</a>)</li> <li><a href="https://github.com/j178/prek/commit/7c23eaeabcbdfdae0b56d37eaddc2061a51a7d8f";><code>7c23eae</code></a> Update Rust crate async_zip to 0.0.22 (<a href="https://redirect.github.com/j178/prek/issues/2898";>#2898</a>)</li> <li><a href="https://github.com/j178/prek/commit/09f486de46bd02c94d928e434fed8cdb45b64198";><code>09f486d</code></a> Update Rust crate indoc to v2.0.8 (<a href="https://redirect.github.com/j178/prek/issues/2899";>#2899</a>)</li> <li><a href="https://github.com/j178/prek/commit/4d677216f0bb073883b8ab45384df517d3197e49";><code>4d67721</code></a> Update Rust crate tokio-util to v0.7.20 (<a href="https://redirect.github.com/j178/prek/issues/2901";>#2901</a>)</li> <li>Additional commits viewable in <a href="https://github.com/j178/prek/compare/v0.5.5...v0.5.6";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
