fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 (#3002)

pythonhubdev · web-flow · commit 7c284221b475 · 2026-01-02T07:16:46.000-08:00
diff --git a/pyproject.toml b/pyproject.toml
@@ -45,7 +45,7 @@ dynamic = [
 ]
 dependencies = [
   "distlib>=0.3.7,<1",
-  "filelock>=3.12.2,<4",
+  "filelock>=3.20.1,<4",
   "importlib-metadata>=6.6; python_version<'3.8'",
   "platformdirs>=3.9.1,<5",
   "typing-extensions>=4.13.2; python_version<'3.11'",

Original file line number	Diff line number	Diff line change
`@@ -45,7 +45,7 @@ dynamic = [`
`45`	`45`	`]`
`46`	`46`	`dependencies = [`
`47`	`47`	`"distlib>=0.3.7,<1",`
`48`		`- "filelock>=3.12.2,<4",`
	`48`	`+ "filelock>=3.20.1,<4",`
`49`	`49`	`"importlib-metadata>=6.6; python_version<'3.8'",`
`50`	`50`	`"platformdirs>=3.9.1,<5",`
`51`	`51`	`"typing-extensions>=4.13.2; python_version<'3.11'",`