build(deps): bump the ci-python-tools group across 1 directory with 3 updates

[dependabot]

Bumps the ci-python-tools group with 3 updates in the /.github/requirements directory: filelock, platformdirs and virtualenv.

Updates filelock from 3.32.5 to 3.32.7

Release notes

Sourced from filelock's releases.

3.32.7

What's Changed

• Fix final symlink test on musl by @​lprnmns in tox-dev/filelock#737
• 📝 docs: say acquire() falls back to the lock's blocking attribute by @​hxperl in tox-dev/filelock#733

New Contributors

• @​hxperl made their first contribution in tox-dev/filelock#733

Full Changelog: tox-dev/filelock@3.32.6...3.32.7

3.32.6

What's Changed

• 🐛 fix(lease): reject a duration no marker can carry by @​lprnmns in tox-dev/filelock#723
• 🐛 fix(soft-rw): reject non-finite timing options by @​lprnmns in tox-dev/filelock#724
• fix: preserve exception notes when copying and pickling by @​jackwalkerlabs in tox-dev/filelock#729
• test(soft-rw): reuse existing test module by @​gaborbernat in tox-dev/filelock#730
• fix: respect ACL write access when the owner write bit is absent by @​jackwalkerlabs in tox-dev/filelock#728
• Fix SoftReadWriteLock state lock timeout by @​Sohel2309 in tox-dev/filelock#726

New Contributors

• @​jackwalkerlabs made their first contribution in tox-dev/filelock#729
• @​Sohel2309 made their first contribution in tox-dev/filelock#726

Full Changelog: tox-dev/filelock@3.32.5...3.32.6

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

---

4.0.1 (2026-09-19)

---

• poll_interval is now validated at construction, on the setter, and on acquire(): a negative, non-finite, or non-numeric value raises :class:ValueError/:class:TypeError immediately instead of failing inside time.sleep. :pr:739

---

4.0.0 (2026-09-17)

---

• The :class:~filelock.SoftReadWriteLock on-disk protocol is a generation log under <path>.rw, and a process running an earlier release does not see it: an old and a new participant on one lock path do not exclude each other. Stop every participant, upgrade them all, then restart them; the new code ignores leftover .state, .write and .readers/ files, and you can delete them. The filesystem must provide no-replace hard links, as it must for :class:~filelock.StrictSoftFileLock, so a runtime without os.link raises :class:~filelock.SoftFileLockProtocolError on acquire. Constructing a singleton again with a different on_compromise, or with poll_interval at or above stale_threshold, now raises :class:ValueError. :pr:735
• :class:~filelock.SoftReadWriteLock exposes :attr:~filelock.SoftReadWriteLock.generation as a fencing token for the protected resource and reports a lost hold through on_compromise and :attr:~filelock.SoftReadWriteLock.compromise. :pr:735
• :class:~filelock.SoftReadWriteLock no longer deadlocks when a holder dies on another host mid-transition, and release() no longer waits on a mutex a dead host left behind (:pr:725, :pr:735). The state mutex is gone. Each transition is one atomic snapshot commit, and liveness is a heartbeat nonce read on the observer's own clock rather than an mtime read against another host's. :pr:735

---

3.32.7 (2026-09-16)

---

• Validate final-symlink refusal by error number so the test works across libc implementations. :pr:737
• Document that :meth:~filelock.BaseFileLock.acquire reads blocking=None as the lock's blocking attribute and raises :class:~filelock.Timeout after one attempt when blocking=False. :pr:733

---

3.32.6 (2026-09-08)

---

• SoftFileLease and AsyncSoftFileLease now reject a boolean or non-finite lease_duration, which used to publish an owner record their own owner property reads back as malformed. :pr:723
• Reject non-finite heartbeat, stale, and polling intervals in SoftReadWriteLock and AsyncSoftReadWriteLock, including cached singleton construction and overflow in the default stale threshold. :pr:724

... (truncated)

Commits

• 20929f7 Release 3.32.7
• 35f07c4 [pre-commit.ci] pre-commit autoupdate (#736)
• e860d39 📝 docs: say acquire() falls back to the lock's blocking attribute (#733)
• c530efe Fix final symlink test on musl (#737)
• 4efd93e Release 3.32.6
• 7b7b7a8 Fix SoftReadWriteLock state lock timeout (#726)
• f2f7b86 fix: respect ACL write access when the owner write bit is absent (#728)
• e947a69 test(soft-rw): reuse existing test module (#730)
• da3ae2b fix: preserve exception notes when copying and pickling (#729)
• ae9cb5b 🐛 fix(soft-rw): reject non-finite timing options (#724)
• Additional commits viewable in compare view

Updates platformdirs from 4.11.7 to 4.11.8

Release notes

Sourced from platformdirs's releases.

4.11.8

What's Changed

• fix: ignore relative XDG base directory paths by @​lakshayxi in tox-dev/platformdirs#540
• fix: return one user path for root under multipath by @​darrenhuai in tox-dev/platformdirs#538
• fix: preserve literal percent signs in user-dirs paths by @​jackwalkerlabs in tox-dev/platformdirs#542
• fix: retain Homebrew site directories inside virtual environments by @​jackwalkerlabs in tox-dev/platformdirs#543

New Contributors

• @​lakshayxi made their first contribution in tox-dev/platformdirs#540
• @​jackwalkerlabs made their first contribution in tox-dev/platformdirs#542

Full Changelog: tox-dev/platformdirs@4.11.7...4.11.8

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

---

4.11.12 (2026-09-22)

---

• Ignore relative paths in the XDG user directory environment variables, so XDG_DOCUMENTS_DIR=Documents no longer makes :func:~platformdirs.user_documents_dir and the other media directories return a path relative to the working directory. They now fall back to the platform default like the XDG Base Directory variables, and like the same keys read from user-dirs.dirs - by :user:darrenhuai. :pr:554
• Copy nested directories in the versioned data migration recipe. :pr:553
• Exclude sphinx-llm 1.1.0 from documentation dependencies because its Markdown builder emits unknown-node warnings. :pr:556

---

4.11.11 (2026-09-19)

---

• Reject appname, appauthor and version values that leave the platform base directory (a .. segment, a leading separator, a drive or a UNC share) with ValueError, so ensure_exists cannot create directories outside it - by :user:Pitchfork-and-Torch. :pr:552

---

4.11.10 (2026-09-18)

---

• With ensure_exists, the site_*_dir and site_*_path properties and the iter_*_dirs iterators only create the site directories they return or yield, instead of every entry in the site list - by :user:darrenhuai. :pr:550

---

4.11.9 (2026-09-16)

---

• Accept multipath in :func:~platformdirs.site_cache_dir and :func:~platformdirs.site_cache_path. Without it, the function API could not return the Homebrew cache prefix that :attr:~platformdirs.macos.MacOS.site_cache_dir adds under multipath - by :user:darrenhuai. :pr:544
• Parse Unix user-dirs.dirs line by line like xdg-user-dir. The INI parser raised on a repeated key or a line without =, and returned trailing comments and backslash escapes inside :func:~platformdirs.user_documents_dir and the other media directories. The last valid assignment now wins, and platformdirs unescapes the quoted value and ignores text after the closing quote - by :user:darrenhuai. :pr:545
• Read PUBLIC before the home directory in :func:~platformdirs.user_publicshare_dir on Windows, so it no longer raises RuntimeError when PUBLIC is set and the home directory cannot be determined - by :user:emme1t. :pr:546

... (truncated)

Commits

• c5ef1ed Release 4.11.8
• 0e85d6f fix: retain Homebrew site directories inside virtual environments (#543)
• b86a670 fix: preserve literal percent signs in user-dirs paths (#542)
• a6791c8 fix: return one user path for root under multipath (#538)
• 5550385 fix: ignore relative XDG base directory paths (#540)
• a209bf8 [pre-commit.ci] pre-commit autoupdate (#541)
• See full diff in compare view

Updates virtualenv from 21.7.8 to 21.7.10

Release notes

Sourced from virtualenv's releases.

21.7.10

What's Changed

• 🔧 chore: check spelling with typos in pre-commit by @​even-even in pypa/virtualenv#3235
• 🐛 fix(activation): keep and restore the user's TCL_LIBRARY and TK_LIBRARY by @​darrenhuai in pypa/virtualenv#3234
• 🐛 fix(create): skip blank and comment lines in pyvenv.cfg by @​r3wretrhy in pypa/virtualenv#3232
• 🐛 fix(activation): restore PKG_CONFIG_PATH that was not set before by @​darrenhuai in pypa/virtualenv#3233

New Contributors

• @​r3wretrhy made their first contribution in pypa/virtualenv#3232

Full Changelog: pypa/virtualenv@21.7.9...21.7.10

21.7.9

What's Changed

• fix(test): EncodingWarning: 'encoding' argument not specified by @​even-even in pypa/virtualenv#3228
• 🐛 fix(config): ignore a config file that fails to parse instead of crashing by @​darrenhuai in pypa/virtualenv#3230
• 🐛 fix(util): replace a stale symlink instead of writing through it by @​darrenhuai in pypa/virtualenv#3229

Full Changelog: pypa/virtualenv@21.7.8...21.7.9

Changelog

Sourced from virtualenv's changelog.

Bugfixes - 21.7.10

• Skip blank lines, # comments and lines without = in pyvenv.cfg instead of raising ValueError - by :user:r3wretrhy. (:issue:3232)
• deactivate in bash, fish and PowerShell unsets PKG_CONFIG_PATH when activation found it unset, instead of keeping the environment's lib/pkgconfig. csh activation no longer drops a PKG_CONFIG_PATH the user had set. Activation in batch, fish, nushell and PowerShell no longer adds a trailing separator when PKG_CONFIG_PATH is unset, and PowerShell and nushell build the value with the host's path separators - by :user:darrenhuai. (:issue:3233)
• Activation in bash, csh, fish and PowerShell keeps the user's TCL_LIBRARY and TK_LIBRARY, and deactivate restores them. csh and PowerShell removed both variables on every activation, fish did so when the interpreter has tcl, and bash kept the environment's value after deactivate when the variable was unset before - by :user:darrenhuai. (:issue:3234)

---

v21.7.9 (2026-09-09)

---

Bugfixes - 21.7.9

• Replace dangling symlinks, including interpreter aliases, when recreating an environment. This prevents FileExistsError with --symlinks and writes outside the environment with --copies - by :user:darrenhuai. (:issue:3229)
• Ignore malformed or unreadable virtualenv.ini files and report the error in the log and --help. Accept a UTF-8 byte order mark, as written by PowerShell 5 and older Notepad versions - by :user:darrenhuai. (:issue:3230)

---

v21.7.8 (2026-09-01)

---

Commits

• 7af3724 release 21.7.10
• f90e927 🐛 fix(activation): restore PKG_CONFIG_PATH that was not set before (#3233)
• b5bd520 🐛 fix(create): skip blank and comment lines in pyvenv.cfg (#3232)
• 973298a 🐛 fix(activation): keep and restore the user's TCL_LIBRARY and TK_LIBRARY (#3...
• a438d8a 🔧 chore: check spelling with typos in pre-commit (#3235)
• ca4025d [pre-commit.ci] pre-commit autoupdate (#3236)
• abd3829 release 21.7.9
• 66fadcb 🐛 fix(util): replace a stale symlink instead of writing through it (#3229)
• 4b31a63 🐛 fix(config): ignore a config file that fails to parse instead of crashing (...
• f9010b3 [pre-commit.ci] pre-commit autoupdate (#3231)
• Additional commits viewable in compare view