Replace lockfile with fasteners or oslo.concurrency

[mrk-andreev]

• I have searched the issues of this repo and believe that this is not a duplicate.
• I have searched the FAQ and general documentation and believe that my question is not already covered.

Feature Request

Poetry use lockfile==0.12.2 that deprecated. https://pypi.org/project/lockfile/

Note: This package is deprecated. It is highly preferred that instead of using this code base that instead [fasteners](https://pypi.python.org/pypi/fasteners) or [oslo.concurrency](http://docs.openstack.org/developer/oslo.concurrency/) is used instead. For any questions or comments or further help needed please email [openstack-dev](http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev) and prefix your email subject with [oslo][pylockfile] (for a faster response).

I suggest to migrate to non-deprecated libraries.

[Secrus]

This is not our direct dependency, but a dependency of the cachecontrol library, which we use. We don't have direct influence over this. cachecontrol has already switched to a different library, but it was not released yet.

[bryteise]

This was true in October but now https://github.com/python-poetry/poetry/blob/master/src/poetry/utils/authenticator.py#L15 is using it directly. And it was added to the pyproject with #7169 which seems bad.

[mrk-andreev]

@Secrus

[Secrus]

The issue remains the same. we had to include lockfile as direct dependency, as we had customized our lock class. The lockfile will be removed when we drop cachecontrol or when cachecontrol changes their implementation (or just release new version, since the change was already made).

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.