Skip to content

[Dependency] Bump sqlalchemy from 2.0.47 to 2.0.48 in /.setup/pip#12730

Merged
williamjallen merged 1 commit into
mainfrom
dependabot/pip/dot-setup/pip/sqlalchemy-2.0.48
Apr 30, 2026
Merged

[Dependency] Bump sqlalchemy from 2.0.47 to 2.0.48 in /.setup/pip#12730
williamjallen merged 1 commit into
mainfrom
dependabot/pip/dot-setup/pip/sqlalchemy-2.0.48

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026

Copy link
Copy Markdown
Contributor

Bumps sqlalchemy from 2.0.47 to 2.0.48.

Release notes

Sourced from sqlalchemy's releases.

2.0.48

Released: March 2, 2026

engine

  • [engine] [bug] Fixed a critical issue in Engine where connections created in conjunction with the DialectEvents.do_connect() event listeners would receive shared, mutable collections for the connection arguments, leading to a variety of potential issues including unlimited growth of the argument list as well as elements within the parameter dictionary being shared among concurrent connection calls. In particular this could impact do_connect routines making use of complex mutable authentication structures.

    References: #13144

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@github-project-automation github-project-automation Bot moved this to Seeking Reviewer in Submitty Development Apr 1, 2026
@github-actions github-actions Bot added the Abandoned PR - Needs New Owner No activity on PR for more than 2 weeks -- seeking new owner to complete label Apr 16, 2026
@github-project-automation github-project-automation Bot moved this from Seeking Reviewer to Awaiting Maintainer Review in Submitty Development Apr 30, 2026
@williamjallen
williamjallen merged commit bc7cdf9 into main Apr 30, 2026
68 of 72 checks passed
@williamjallen
williamjallen deleted the dependabot/pip/dot-setup/pip/sqlalchemy-2.0.48 branch April 30, 2026 21:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Abandoned PR - Needs New Owner No activity on PR for more than 2 weeks -- seeking new owner to complete dependencies

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

1 participant