upgrade urllib3 and filelock

[jsjiang]

@sfisher Hi Scott,
Here are the changes:

• upgrade filelock to 3.20.1 or newer to resolve a security alert.
• update urllib3 from "2.6.0" to "^2.6.0" to allow compatible updates, which is consistent with the versioning pattern used for all other dependencies in this file.

Please review and let me know if you have quesitons.

Thank you

Jing

[Copilot]

Pull request overview

This PR upgrades two dependencies to address a security alert and improve version flexibility: filelock is upgraded from ^3.18.0 to ^3.20.1, and urllib3 is changed from an exact version "2.6.0" to a caret range "^2.6.0" to allow compatible minor version updates.

Key changes:

• Upgrade filelock minimum version to 3.20.1 to resolve a security vulnerability
• Change urllib3 from exact version pinning to caret versioning for flexible updates
• Update poetry.lock with resulting dependency version changes

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
pyproject.toml	Updated filelock to ^3.20.1 and urllib3 to ^2.6.0 with caret versioning
poetry.lock	Reflects the dependency resolution with filelock 3.20.2, urllib3 2.6.2, and transitive dependency updates (boto3, botocore, certifi, sqlparse, tzdata)

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sfisher]

Looks good to me. Thanks, @jsjiang .