Commit 7e86374
chore(deps-dev): bump sqlalchemy from 2.0.50 to 2.0.51 (#1062)
Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) from 2.0.50
to 2.0.51.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sqlalchemy/sqlalchemy/releases">sqlalchemy's
releases</a>.</em></p>
<blockquote>
<h1>2.0.51</h1>
<p>Released: June 15, 2026</p>
<h2>orm</h2>
<ul>
<li>
<p><strong>[orm] [bug]</strong> Fixed issue where
<code>_orm.subqueryload()</code> combined with
<code>PropComparator.of_type()</code> and
<code>PropComparator.and_()</code> would
silently drop the additional filter criteria, causing all related
objects
to be loaded instead of only those matching the filter. The
<code>LoaderCriteriaOption</code> was being constructed against the base
entity rather than the effective entity indicated by
<code>PropComparator.of_type()</code>. Pull request courtesy Arya
Rizky.</p>
<p>References: <a
href="https://www.sqlalchemy.org/trac/ticket/13207">#13207</a></p>
</li>
<li>
<p><strong>[orm] [bug]</strong> Fixed bug where a failure during
<code>tpc_prepare()</code> within
<code>_orm.Session.commit()</code> for a two-phase session would raise
<code>IllegalStateChangeError</code> instead of the original database
exception. The internal <code>_prepare_impl()</code> method's error
handler
was unable to invoke <code>_orm.SessionTransaction.rollback()</code> due
to a state-change guard, preventing proper cleanup and masking the
underlying error.</p>
<p>References: <a
href="https://www.sqlalchemy.org/trac/ticket/13356">#13356</a></p>
</li>
</ul>
<h2>engine</h2>
<ul>
<li>
<p><strong>[engine] [bug]</strong> Fixed issue where
<code>Result.freeze()</code> would lose track of ambiguous
column names present in the original <code>CursorResult</code>, causing
key-based access on the thawed result to silently return a value instead
of
raising <code>InvalidRequestError</code>. The
<code>SimpleResultMetaData</code> now accepts and propagates ambiguous
key
information so that frozen, thawed, and pickled results raise
consistently
for duplicate column names. Pull request courtesy Saurabh Kohli.</p>
<p>References: <a
href="https://www.sqlalchemy.org/trac/ticket/9427">#9427</a></p>
</li>
</ul>
<h2>sql</h2>
<ul>
<li>
<p><strong>[sql] [bug]</strong> Fixed issue where
<code>_sql.StatementLambdaElement</code> would proxy
attribute access through the cached "expected" expression
rather than the
resolved expression, causing stale closure-bound parameter values to be
used when a lambda statement was extended with non-lambda criteria such
as
an additional <code>.where()</code> clause. Courtesy cjc0013.</p>
<p>References: <a
href="https://www.sqlalchemy.org/trac/ticket/10827">#10827</a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/sqlalchemy/sqlalchemy/commits">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Roy Moore <roy@moore.co.il>1 parent 3558785 commit 7e86374
2 files changed
Lines changed: 52 additions & 52 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
59 | 59 | | |
60 | 60 | | |
61 | 61 | | |
62 | | - | |
| 62 | + | |
63 | 63 | | |
64 | 64 | | |
65 | 65 | | |
| |||
87 | 87 | | |
88 | 88 | | |
89 | 89 | | |
90 | | - | |
91 | | - | |
| 90 | + | |
| 91 | + | |
92 | 92 | | |
93 | 93 | | |
94 | 94 | | |
95 | 95 | | |
96 | 96 | | |
97 | 97 | | |
98 | | - | |
99 | | - | |
| 98 | + | |
| 99 | + | |
100 | 100 | | |
101 | 101 | | |
102 | 102 | | |
| |||
122 | 122 | | |
123 | 123 | | |
124 | 124 | | |
125 | | - | |
| 125 | + | |
126 | 126 | | |
127 | 127 | | |
128 | 128 | | |
| |||
0 commit comments