Drop the filelock override once a litellm release allows filelock 4

Open
#383 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
3/5
Estimated time
1-2 days
Newbie friendliness
49/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Active
Tech stack
python
Domain
build-system

Research direction

Wait until a litellm release allows filelock 4, then read the lock headers in requirements.lock.txt and requirements-ci.lock.txt, the install locations listed in the issue, SECURITY.md, and CONTRIBUTING.md. Remove the override, recompile both locks, decide whether the listed installs should keep --no-deps, and update the security paragraph and lock recipe. Done when the locks use a compatible litellm release and the override file and references are removed.

Written by the indexing model from the issue text.

Description

dependencies

#375 locks filelock 4.2.4, which fixes the thirteen filelock 3.32.7 advisories, although every released litellm still declares filelock<4.0. litellm has lifted that cap on its main (filelock>=3.16.1,<5, BerriAI/litellm#49137, merged 2026-10-30); no release carries it yet (1.106.6 is the newest stable at the time of writing).

Once a litellm release allows filelock 4:

  • delete dokimi/requirements-overrides.txt;
  • drop --override=requirements-overrides.txt from the header commands of requirements.lock.txt and requirements-ci.lock.txt, and recompile both (this also moves litellm to the new release);
  • decide whether to keep --no-deps on the installs of requirements.lock.txt (12 workflow steps, .agent-eval/Dockerfile, make dev): the locks are the full closure, so it can stay, or it can go back to a resolving install;
  • update the filelock paragraph in SECURITY.md and the lock recipe in CONTRIBUTING.md.

Until then, pip install dokimi outside the locks still resolves a filelock below 4, as SECURITY.md says.

Dominant language
Python
Stars
11
Forks
9
Avg merge
1d 11h
Merged PRs (30d)
318

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from intel/dokimi

All issues in intel/dokimi

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.