deps: bump filelock from 3.32.2 to 4.0.3

[dependabot]

Bumps filelock from 3.32.2 to 4.0.3.

Release notes

Sourced from filelock's releases.

4.0.3

What's Changed

• 🐛 fix(api): skip the fork audit hook on CPython <3.12 by @​gaborbernat in tox-dev/filelock#747

Full Changelog: tox-dev/filelock@4.0.2...4.0.3

4.0.2

What's Changed

• docs: create the data directory in the async cache example by @​agammann in tox-dev/filelock#740
• fix: ignore broken sphinx-llm release by @​gaborbernat in tox-dev/filelock#742
• 🐛 fix(api): serialize concurrent transitions on shared locks by @​gaborbernat in tox-dev/filelock#745
• 🐛 fix(async-rw): give each task its own hold by @​gaborbernat in tox-dev/filelock#746

New Contributors

• @​agammann made their first contribution in tox-dev/filelock#740

Full Changelog: tox-dev/filelock@4.0.1...4.0.2

4.0.1

What's Changed

• fix: reject invalid poll_interval before sleep by @​Pitchfork-and-Torch in tox-dev/filelock#739

New Contributors

• @​Pitchfork-and-Torch made their first contribution in tox-dev/filelock#739

Full Changelog: tox-dev/filelock@4.0.0...4.0.1

4.0.0

What's Changed

• 🐛 fix(soft-rw): replace the state mutex with a generation log by @​gaborbernat in tox-dev/filelock#738

Full Changelog: tox-dev/filelock@3.32.7...4.0.0

3.32.7

What's Changed

• Fix final symlink test on musl by @​lprnmns in tox-dev/filelock#737
• 📝 docs: say acquire() falls back to the lock's blocking attribute by @​hxperl in tox-dev/filelock#733

... (truncated)

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

---

4.0.6 (2026-09-28)

---

• Reject negative blocking timeouts other than -1 before reentrant ReadWriteLock and SoftReadWriteLock acquisition. Preserve unlimited waits and nonblocking acquisition. :pr:756

---

4.0.5 (2026-09-28)

---

• Fix MarkerSoftFileLock acquisition and prevent contenders from evicting live protocol-2 owners after two seconds. Reclaim recognized records after owner death; preserve unknown contracts. :pr:749
• Honor instance timeout and blocking settings in sync and async ReadWriteLock acquisition, including waits between tasks on one instance. Preserve explicit per-call overrides. :pr:750
• Skip access-denial checks when the process can read mode-0o000 files. Keep mode-bit checks enabled for privileged processes on filesystems that support POSIX permissions. :pr:753
• Skip vanished StrictSoftFileLock claims after a read-permission retry expires. Recheck the directory before raising a protocol error so concurrent removal does not turn a stale claim listing into an acquisition failure. :pr:754
• Reject negative timeouts other than -1 in blocking AsyncReadWriteLock and AsyncSoftReadWriteLock acquisitions. Keep -1 as an unlimited wait and ignore timeouts when blocking=False. :pr:755

---

4.0.4 (2026-09-26)

---

• Hostnames that still differ after their first 253 escaped characters now publish distinct owners, so a soft lock no longer takes another such host's live holder for its own and reclaims its marker. :pr:748

---

4.0.3 (2026-09-23)

---

• Importing filelock on CPython 3.10 or 3.11 no longer makes new threads fail with RuntimeError: Cannot install a trace function while another trace function is being installed under coverage or a debugger. filelock skips its fork-safety audit hook there, so forking from inside a thread's own lock-state transition no longer raises immediately on those versions. :pr:747

---

4.0.2 (2026-09-23)

---

... (truncated)

Commits

• 5283806 Release 4.0.3
• fd10e07 🐛 fix(api): skip the fork audit hook on CPython <3.12 (#747)
• 2d4530f Release 4.0.2
• 6c46312 🐛 fix(async-rw): give each task its own hold (#746)
• fe0e99d 🐛 fix(api): serialize concurrent transitions on shared locks (#745)
• b26beda build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-acti...
• 10572ec fix: ignore broken sphinx-llm release (#742)
• 6c10af3 [pre-commit.ci] pre-commit autoupdate (#741)
• 9380408 docs: create the data directory in the async cache example (#740)
• b5016c4 Release 4.0.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Superseded by #33.