build: bump the python-runtime group with 2 updates

[dependabot]

Updates the requirements on imapclient and filelock to permit the latest version.
Updates imapclient to 4.0.1

Release notes

Sourced from imapclient's releases.

4.0.1

What's Changed

Other Changes

• only build for published releases by @​mjs in mjs/imapclient#660

Full Changelog: mjs/imapclient@4.0.0...4.0.1

Commits

• 688788d bump version to 4.0.1
• 7aada12 Remove current version from README
• 0c8b553 only build for published releases
• 9d70877 bump version to 4.0.0
• b80fa15 add GitHub actions release workflow
• fa6bd69 docs: use RTD's native uv support
• fc04a4e docs: update .readthedocs.yaml to install deps via uv
• ed29039 fix: resolve mypy errors in version.py and response_types.py
• ebadf9e feat: expose interact and livetest as pyproject console scripts
• 65aa696 chore: convert project to uv
• Additional commits viewable in compare view

Updates filelock to 4.0.0

Release notes

Sourced from filelock's releases.

4.0.0

What's Changed

• 🐛 fix(soft-rw): replace the state mutex with a generation log by @​gaborbernat in tox-dev/filelock#738

Full Changelog: tox-dev/filelock@3.32.7...4.0.0

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

---

4.0.1 (2026-09-19)

---

• poll_interval is now validated at construction, on the setter, and on acquire(): a negative, non-finite, or non-numeric value raises :class:ValueError/:class:TypeError immediately instead of failing inside time.sleep. :pr:739

---

4.0.0 (2026-09-17)

---

• The :class:~filelock.SoftReadWriteLock on-disk protocol is a generation log under <path>.rw, and a process running an earlier release does not see it: an old and a new participant on one lock path do not exclude each other. Stop every participant, upgrade them all, then restart them; the new code ignores leftover .state, .write and .readers/ files, and you can delete them. The filesystem must provide no-replace hard links, as it must for :class:~filelock.StrictSoftFileLock, so a runtime without os.link raises :class:~filelock.SoftFileLockProtocolError on acquire. Constructing a singleton again with a different on_compromise, or with poll_interval at or above stale_threshold, now raises :class:ValueError. :pr:735
• :class:~filelock.SoftReadWriteLock exposes :attr:~filelock.SoftReadWriteLock.generation as a fencing token for the protected resource and reports a lost hold through on_compromise and :attr:~filelock.SoftReadWriteLock.compromise. :pr:735
• :class:~filelock.SoftReadWriteLock no longer deadlocks when a holder dies on another host mid-transition, and release() no longer waits on a mutex a dead host left behind (:pr:725, :pr:735). The state mutex is gone. Each transition is one atomic snapshot commit, and liveness is a heartbeat nonce read on the observer's own clock rather than an mtime read against another host's. :pr:735

---

3.32.7 (2026-09-16)

---

• Validate final-symlink refusal by error number so the test works across libc implementations. :pr:737
• Document that :meth:~filelock.BaseFileLock.acquire reads blocking=None as the lock's blocking attribute and raises :class:~filelock.Timeout after one attempt when blocking=False. :pr:733

---

3.32.6 (2026-09-08)

---

• SoftFileLease and AsyncSoftFileLease now reject a boolean or non-finite lease_duration, which used to publish an owner record their own owner property reads back as malformed. :pr:723
• Reject non-finite heartbeat, stale, and polling intervals in SoftReadWriteLock and AsyncSoftReadWriteLock, including cached singleton construction and overflow in the default stale threshold. :pr:724

... (truncated)

Commits

• 7e57436 Release 4.0.0
• f974328 🐛 fix(soft-rw): replace the state mutex with a generation log (#738)
• 20929f7 Release 3.32.7
• 35f07c4 [pre-commit.ci] pre-commit autoupdate (#736)
• e860d39 📝 docs: say acquire() falls back to the lock's blocking attribute (#733)
• c530efe Fix final symlink test on musl (#737)
• 4efd93e Release 3.32.6
• 7b7b7a8 Fix SoftReadWriteLock state lock timeout (#726)
• f2f7b86 fix: respect ACL write access when the owner write bit is absent (#728)
• e947a69 test(soft-rw): reuse existing test module (#730)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.