Skip to content

[Dependency] Bump sqlalchemy from 2.0.48 to 2.0.51 in /.setup/pip#12884

Merged
williamjallen merged 1 commit into
mainfrom
dependabot/pip/dot-setup/pip/sqlalchemy-2.0.50
Jun 30, 2026
Merged

[Dependency] Bump sqlalchemy from 2.0.48 to 2.0.51 in /.setup/pip#12884
williamjallen merged 1 commit into
mainfrom
dependabot/pip/dot-setup/pip/sqlalchemy-2.0.50

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Copy link
Copy Markdown
Contributor

Bumps sqlalchemy from 2.0.48 to 2.0.51.

Release notes

Sourced from sqlalchemy's releases.

2.0.51

Released: June 15, 2026

orm

  • [orm] [bug] Fixed issue where _orm.subqueryload() combined with PropComparator.of_type() and PropComparator.and_() would silently drop the additional filter criteria, causing all related objects to be loaded instead of only those matching the filter. The LoaderCriteriaOption was being constructed against the base entity rather than the effective entity indicated by PropComparator.of_type(). Pull request courtesy Arya Rizky.

    References: #13207

  • [orm] [bug] Fixed bug where a failure during tpc_prepare() within _orm.Session.commit() for a two-phase session would raise IllegalStateChangeError instead of the original database exception. The internal _prepare_impl() method's error handler was unable to invoke _orm.SessionTransaction.rollback() due to a state-change guard, preventing proper cleanup and masking the underlying error.

    References: #13356

engine

  • [engine] [bug] Fixed issue where Result.freeze() would lose track of ambiguous column names present in the original CursorResult, causing key-based access on the thawed result to silently return a value instead of raising InvalidRequestError. The SimpleResultMetaData now accepts and propagates ambiguous key information so that frozen, thawed, and pickled results raise consistently for duplicate column names. Pull request courtesy Saurabh Kohli.

    References: #9427

sql

  • [sql] [bug] Fixed issue where _sql.StatementLambdaElement would proxy attribute access through the cached "expected" expression rather than the resolved expression, causing stale closure-bound parameter values to be used when a lambda statement was extended with non-lambda criteria such as an additional .where() clause. Courtesy cjc0013.

    References: #10827

... (truncated)

Commits

@github-project-automation github-project-automation Bot moved this to Seeking Reviewer in Submitty Development Jun 3, 2026
@github-actions github-actions Bot added the Abandoned PR - Needs New Owner No activity on PR for more than 2 weeks -- seeking new owner to complete label Jun 18, 2026
@dependabot dependabot Bot changed the title [Dependency] Bump sqlalchemy from 2.0.48 to 2.0.50 in /.setup/pip [Dependency] Bump sqlalchemy from 2.0.48 to 2.0.51 in /.setup/pip Jun 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/dot-setup/pip/sqlalchemy-2.0.50 branch from 3a45c71 to df18769 Compare June 23, 2026 02:17
@williamjallen

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/pip/dot-setup/pip/sqlalchemy-2.0.50 branch from df18769 to 4cdd6ee Compare June 30, 2026 04:22
@github-project-automation github-project-automation Bot moved this from Seeking Reviewer to Awaiting Maintainer Review in Submitty Development Jun 30, 2026
@williamjallen
williamjallen merged commit 934dcb6 into main Jun 30, 2026
26 of 27 checks passed
@williamjallen
williamjallen deleted the dependabot/pip/dot-setup/pip/sqlalchemy-2.0.50 branch June 30, 2026 05:08
jndlansh pushed a commit to jndlansh/Submitty that referenced this pull request Jul 1, 2026
…bmitty#12884)

Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) from 2.0.48
to 2.0.51.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sqlalchemy/sqlalchemy/releases">sqlalchemy's
releases</a>.</em></p>
<blockquote>
<h1>2.0.51</h1>
<p>Released: June 15, 2026</p>
<h2>orm</h2>
<ul>
<li>
<p><strong>[orm] [bug]</strong> Fixed issue where
<code>_orm.subqueryload()</code> combined with
<code>PropComparator.of_type()</code> and
<code>PropComparator.and_()</code> would
silently drop the additional filter criteria, causing all related
objects
to be loaded instead of only those matching the filter.  The
<code>LoaderCriteriaOption</code> was being constructed against the base
entity rather than the effective entity indicated by
<code>PropComparator.of_type()</code>. Pull request courtesy Arya
Rizky.</p>
<p>References: <a
href="https://www.sqlalchemy.org/trac/ticket/13207">#13207</a></p>
</li>
<li>
<p><strong>[orm] [bug]</strong> Fixed bug where a failure during
<code>tpc_prepare()</code> within
<code>_orm.Session.commit()</code> for a two-phase session would raise
<code>IllegalStateChangeError</code> instead of the original database
exception. The internal <code>_prepare_impl()</code> method's error
handler
was unable to invoke <code>_orm.SessionTransaction.rollback()</code> due
to a state-change guard, preventing proper cleanup and masking the
underlying error.</p>
<p>References: <a
href="https://www.sqlalchemy.org/trac/ticket/13356">#13356</a></p>
</li>
</ul>
<h2>engine</h2>
<ul>
<li>
<p><strong>[engine] [bug]</strong> Fixed issue where
<code>Result.freeze()</code> would lose track of ambiguous
column names present in the original <code>CursorResult</code>, causing
key-based access on the thawed result to silently return a value instead
of
raising <code>InvalidRequestError</code>.  The
<code>SimpleResultMetaData</code> now accepts and propagates ambiguous
key
information so that frozen, thawed, and pickled results raise
consistently
for duplicate column names.  Pull request courtesy Saurabh Kohli.</p>
<p>References: <a
href="https://www.sqlalchemy.org/trac/ticket/9427">#9427</a></p>
</li>
</ul>
<h2>sql</h2>
<ul>
<li>
<p><strong>[sql] [bug]</strong> Fixed issue where
<code>_sql.StatementLambdaElement</code> would proxy
attribute access through the cached &quot;expected&quot; expression
rather than the
resolved expression, causing stale closure-bound parameter values to be
used when a lambda statement was extended with non-lambda criteria such
as
an additional <code>.where()</code> clause.  Courtesy cjc0013.</p>
<p>References: <a
href="https://www.sqlalchemy.org/trac/ticket/10827">#10827</a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/sqlalchemy/sqlalchemy/commits">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
prestoncarman added a commit that referenced this pull request Jul 1, 2026
* main: (78 commits)
  [Bugfix:TAGrading] Auto-open single file (#12625)
  [Feature:InstructorUI] Add sortable columns to manage students (#12957)
  [Dependency] Bump php-ds/php-ds from 1.7.0 to 2.0.1 in /site (#12827)
  [Refactor:TAGrading] Events Infrastructure & StatusBanner (#12941)
  [Dependency] Bump sqlalchemy from 2.0.48 to 2.0.51 in /.setup/pip (#12884)
  [Bugfix:Developer] trust hashicorp for vagrant install (#12968)
  [Feature:TAGrading] Backend for submission clustering (#12886)
  [Bugfix:InstructorUI] Missing Subsection in the Edit User form (#12955)
  [Bugfix:Submission] Warning Banners Accessibility Fix (#12956)
  [Bugfix:System] Preserve signup fields (#12939)
  [Bugfix:InstructorUI] Fix Csv Download of Subsections (#12954)
  [Bugfix:InstructorUI] Fix Manage Students Toggle Columns (#12953)
  [Feature:TAGrading] Persistent Auto-Open (#12931)
  [Bugfix:Submission] Dot File Upload (#12924)
  [Refactor:System] Declutter workers (#12815)
  [Bugfix:Developer] save/restore autograding_containers.json (#12952)
  [Bugfix:InstructorUI] Create Course Validation (#12949)
  [Testing:Notifications] Fix grade_inquiries.spec.js (#12950)
  [UI/UX:System] Add fullscreen button vue component (#12936)
  [Bugfix:TAGrading] Student Name Resize (#12946)
  ...

# Conflicts:
#	.pylintrc
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Abandoned PR - Needs New Owner No activity on PR for more than 2 weeks -- seeking new owner to complete dependencies

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

1 participant