diff --git a/dev-requirements.txt b/dev-requirements.txt
index f3b24c91..672ad32a 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -1,4 +1,3 @@
-filelock
 packaging
 pytest
 pytest-cov
diff --git a/integration-tests/requirements.txt b/integration-tests/requirements.txt
index 3ef31e4e..c086c7fc 100644
--- a/integration-tests/requirements.txt
+++ b/integration-tests/requirements.txt
@@ -1,4 +1,3 @@
-filelock
 pytest
 pytest-cov
 pytest-asyncio
diff --git a/setup.py b/setup.py
index 4c22da66..0bb5a1ce 100644
--- a/setup.py
+++ b/setup.py
@@ -15,6 +15,7 @@
         "jinja2",
         "pluggy==1.*",
         "backoff",
+        "filelock",
         "requests",
         "bcrypt",
         "jupyterhub-traefik-proxy==1.*",
diff --git a/tljh/requirements-hub-env.txt b/tljh/requirements-hub-env.txt
index 25b29deb..0c455723 100644
--- a/tljh/requirements-hub-env.txt
+++ b/tljh/requirements-hub-env.txt
@@ -26,6 +26,3 @@ jupyterhub-idle-culler>=1.2.1,<2
 # ref: https://github.com/jupyterhub/the-littlest-jupyterhub/issues/289
 #
 pycurl>=7.45.2,<8
-
-# filelock is used to help us do atomic operations on config file(s)
-filelock>=3.15.4,<4