Bump sqlfluff from 4.0.4 to 4.1.0 in /src by dependabot[bot] · Pull Request #4448 · HTTPArchive/almanac.httparchive.org

dependabot · 2026-04-01T14:46:53Z

Bumps sqlfluff from 4.0.4 to 4.1.0.

Release notes

[4.1.0] - 2026-03-26

Highlights

This minor release expands SQLFluff in four meaningful ways: recursion protection, more complete Rust-backed execution, broader dialect support, and better performance on large templated projects.

Security improvements that protect against resource exhaustion through malicious queries by limiting recursion within the parser. Users can configure the new max_parse_depth config setting to enable deeper parsing in their project if necessary.

Rust support moves forward again, with Python now able to call Rust apply logic, full lazy evaluation in the Rust parser, and more parallel and streaming work in the lint/fix pipeline.

Oracle and T-SQL both received major grammar expansions, alongside important new support across ClickHouse, DuckDB, Databricks, Trino, Hive/SparkSQL, BigQuery, Snowflake, PostgreSQL, and others.

The dbt templater now includes support for the dbt return builtin, improved thread handling from profiles, and fixes for several Jinja edge cases.

Users also gain more indentation configuration flexibility, plus a wide set of rule and parser correctness fixes. Specifically, the ability to skip enforcement of implicit indents for specific dialect elements.

Also, welcome to the nineteen new contributors! Thanks for your contributions! 🏆

What’s Changed

Oracle: add missing grant privileges CONNECT/RESOURCE/TRIGGER (#7677) @saulotoledo

Add double precision type for T-SQL (#7620) @grv87

Fix RF01/RF02 false positives for Redshift UNPIVOT output aliases (#7602) @copilot-swe-agent[bot]

Fix crash on malformed inline config using = syntax (#7672) @shi-vy

Recursion check (#7473) @alanmcruickshank

chore(rust): bump cargo deps (#7675) @keraion

fix(rust): place remaining vdebug behind verbose-debug feature (#7674) @keraion

chore: Update deprecated gitwildmatch to gitignore (#7673) @keraion

Oracle: implement CREATE PACKAGE BODY parsing (#7671) @saulotoledo

Oracle: recognize pseudo-functions USER/UID/SESSION_USER/ORA_ROWSCN (#7663) @saulotoledo

Oracle: support seq.CURRVAL in dotted sequence references (#7665) @saulotoledo

dbt templater: respect threads config from profiles.yml (#7669) @shauneccles

PR Acceptance guidelines (#7661) @alanmcruickshank

Fix for empty iterator bug that can occur from Jinja loops (#7643) @shi-vy

Oracle: support trigger predicate chains in IF/ELSIF/CASE (#7660) @saulotoledo

ST05: fix dropping expression CTEs from WITH clause (#7536) @copilot-swe-agent[bot]

Fix placeholder colon param incorrectly prefixed with table alias when followed by :: cast (#7615) @copilot-swe-agent[bot]

build: remove dangling noqa and update docs (#7658) @mxr

Oracle: parse TABLESPACE/STORAGE and other table/index options (#7642) @saulotoledo

Add Hive/SparkSQL support for FROM ... INSERT ... multi-insert statements (#7633) @copilot-swe-agent[bot]

Add ClickHouse support for SELECT * APPLY(...) (#7654) @copilot-swe-agent[bot]

Handle set expressions in Databricks SQL function RETURN bodies (#7655) @copilot-swe-agent[bot]

fix: Remove platformdirs version pin, support both < 4.6 and >= 4.6 (#7656) @gboutry

fix(bigquery): Parse table types in tvf parameters #7650 (#7652) @keraion

Fix RF03 false positive for lambda params in Databricks (#7646) @shauneccles

trino: Add OFFSET clause support (#7618) @copilot-swe-agent[bot]

RF01: ignore Oracle sequence NEXTVAL/CURRVAL pseudocolumn references (#7638) @ReinerBRO

Parse bracketed EXCEPT set expressions in Greenplum (#7632) @copilot-swe-agent[bot]

Fix LT05 duplicating Jinja macro lines when breaking long lines (#7640) @shauneccles

Add SQLite RF06 keyword autofix (#7622) @mxr

Oracle: added missing ALTER SESSION statement (#7630) @saulotoledo

Oracle: accept PROFILE DEFAULT in CREATE USER grammar (#7628) @saulotoledo

chore(Rust): update Rust dependencies (#7625) @keraion

Fix ignore = templating disabling all lint rules with Python templater (#7617) @copilot-swe-agent[bot]

feat(rust): Call Rust's apply from Python (#7599) @keraion

... (truncated)

Changelog

Sourced from sqlfluff's changelog.

[4.1.0] - 2026-03-26

Highlights

This minor release expands SQLFluff in four meaningful ways: recursion protection, more complete Rust-backed execution, broader dialect support, and better performance on large templated projects.

Security improvements that protect against resource exhaustion through malicious queries by limiting recursion within the parser. Users can configure the new max_parse_depth config setting to enable deeper parsing in their project if necessary.

Rust support moves forward again, with Python now able to call Rust apply logic, full lazy evaluation in the Rust parser, and more parallel and streaming work in the lint/fix pipeline.

Oracle and T-SQL both received major grammar expansions, alongside important new support across ClickHouse, DuckDB, Databricks, Trino, Hive/SparkSQL, BigQuery, Snowflake, PostgreSQL, and others.

The dbt templater now includes support for the dbt return builtin, improved thread handling from profiles, and fixes for several Jinja edge cases.

Users also gain more indentation configuration flexibility, plus a wide set of rule and parser correctness fixes. Specifically, the ability to skip enforcement of implicit indents for specific dialect elements.

Also, welcome to the nineteen new contributors! Thanks for your contributions! 🏆

What’s Changed

Oracle: add missing grant privileges CONNECT/RESOURCE/TRIGGER #7677 @saulotoledo

Add double precision type for T-SQL #7620 @grv87

Fix RF01/RF02 false positives for Redshift UNPIVOT output aliases #7602 [@copilot-swe-agent[bot]](https://github.com/[copilot-swe-agent[bot]](https://github.com/apps/copilot-swe-agent))

Fix crash on malformed inline config using = syntax #7672 @shi-vy

Recursion check #7473 @alanmcruickshank

chore(rust): bump cargo deps #7675 @keraion

fix(rust): place remaining vdebug behind verbose-debug feature #7674 @keraion

chore: Update deprecated gitwildmatch to gitignore #7673 @keraion

Oracle: implement CREATE PACKAGE BODY parsing #7671 @saulotoledo

Oracle: recognize pseudo-functions USER/UID/SESSION_USER/ORA_ROWSCN #7663 @saulotoledo

Oracle: support seq.CURRVAL in dotted sequence references #7665 @saulotoledo

dbt templater: respect threads config from profiles.yml #7669 @shauneccles

PR Acceptance guidelines #7661 @alanmcruickshank

Fix for empty iterator bug that can occur from Jinja loops #7643 @shi-vy

Oracle: support trigger predicate chains in IF/ELSIF/CASE #7660 @saulotoledo

ST05: fix dropping expression CTEs from WITH clause #7536 [@copilot-swe-agent[bot]](https://github.com/[copilot-swe-agent[bot]](https://github.com/apps/copilot-swe-agent))

Fix placeholder colon param incorrectly prefixed with table alias when followed by :: cast #7615 [@copilot-swe-agent[bot]](https://github.com/[copilot-swe-agent[bot]](https://github.com/apps/copilot-swe-agent))

build: remove dangling noqa and update docs #7658 @mxr

Oracle: parse TABLESPACE/STORAGE and other table/index options #7642 @saulotoledo

Add Hive/SparkSQL support for FROM ... INSERT ... multi-insert statements #7633 [@copilot-swe-agent[bot]](https://github.com/[copilot-swe-agent[bot]](https://github.com/apps/copilot-swe-agent))

Add ClickHouse support for SELECT * APPLY(...) #7654 [@copilot-swe-agent[bot]](https://github.com/[copilot-swe-agent[bot]](https://github.com/apps/copilot-swe-agent))

Handle set expressions in Databricks SQL function RETURN bodies #7655 [@copilot-swe-agent[bot]](https://github.com/[copilot-swe-agent[bot]](https://github.com/apps/copilot-swe-agent))

fix: Remove platformdirs version pin, support both < 4.6 and >= 4.6 #7656 @gboutry

fix(bigquery): Parse table types in tvf parameters #7650 #7652 @keraion

Fix RF03 false positive for lambda params in Databricks #7646 @shauneccles

... (truncated)

Commits

ec5ed61 Prep version 4.1.0 (#7679)
15fe8c7 Oracle: add missing grant privileges CONNECT/RESOURCE/TRIGGER (#7677)
0209818 Add double precision type for T-SQL (#7620)
414bbd2 Fix RF01/RF02 false positives for Redshift UNPIVOT output aliases (#7602)
15d1db0 Fix crash on malformed inline config using = syntax (#7672)
5292030 Recusion check (#7473)
5d8e4e0 chore(rust): bump cargo deps (#7675)
c346dda fix(rust): place remaining vdebug behind verbose-debug feature (#7674)
94fa88c chore: Update deprecated gitwildmatch to gitignore (#7673)
ccc67b5 Oracle: implement CREATE PACKAGE BODY parsing (#7671)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sqlfluff](https://github.com/sqlfluff/sqlfluff) from 4.0.4 to 4.1.0. - [Release notes](https://github.com/sqlfluff/sqlfluff/releases) - [Changelog](https://github.com/sqlfluff/sqlfluff/blob/main/CHANGELOG.md) - [Commits](sqlfluff/sqlfluff@4.0.4...4.1.0) --- updated-dependencies: - dependency-name: sqlfluff dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

… allow_implicit_indents to implicit_indents

max-ostapenko · 2026-04-02T18:35:06Z

@dependabot rebase

dependabot · 2026-04-02T18:35:10Z

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 1, 2026

dependabot Bot requested a review from a team April 1, 2026 14:46

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 1, 2026

max-ostapenko added 2 commits April 2, 2026 18:12

Update sqlfluff configuration: set max_parse_depth to 1000 and rename…

f9e519c

… allow_implicit_indents to implicit_indents

Update GitHub Actions to use AUTO_MERGE_PAT for token authentication

0565bb6

max-ostapenko merged commit b88d11e into main Apr 2, 2026
9 of 12 checks passed

max-ostapenko deleted the dependabot/pip/src/sqlfluff-4.1.0 branch April 2, 2026 18:37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump sqlfluff from 4.0.4 to 4.1.0 in /src#4448

Bump sqlfluff from 4.0.4 to 4.1.0 in /src#4448
max-ostapenko merged 3 commits intomainfrom
dependabot/pip/src/sqlfluff-4.1.0

dependabot Bot commented on behalf of github Apr 1, 2026

Uh oh!

max-ostapenko commented Apr 2, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 1, 2026

[4.1.0] - 2026-03-26

Highlights

What’s Changed

[4.1.0] - 2026-03-26

Highlights

What’s Changed

Uh oh!

max-ostapenko commented Apr 2, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant