dependabot[bot] opened a new pull request, #25855:
URL: https://github.com/apache/beam/pull/25855

   Updates the requirements on 
[sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) to permit the latest 
version.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/sqlalchemy/sqlalchemy/releases";>sqlalchemy's 
releases</a>.</em></p>
   <blockquote>
   <h1>2.0.6</h1>
   <p>Released: March 13, 2023</p>
   <h2>orm</h2>
   <ul>
   <li>
   <p><strong>[orm] [bug]</strong> Fixed bug where the &quot;active 
history&quot; feature was not fully
   implemented for composite attributes, making it impossible to receive
   events that included the &quot;old&quot; value.   This seems to have been 
the case
   with older SQLAlchemy versions as well, where &quot;active_history&quot; 
would
   be propagated to the underlying column-based attributes, but an event
   handler listening to the composite attribute itself would not be given
   the &quot;old&quot; value being replaced, even if the composite() were set up
   with active_history=True.</p>
   <p>Additionally, fixed a regression that's local to 2.0 which disallowed
   active_history on composite from being assigned to the impl with
   <code>attr.impl.active_history=True</code>.</p>
   <p>References: <a 
href="https://www.sqlalchemy.org/trac/ticket/9460";>#9460</a></p>
   </li>
   <li>
   <p><strong>[orm] [bug]</strong> Fixed regression involving pickling of 
Python rows between the cython and
   pure Python implementations of <code>Row</code>, which occurred as part of
   refactoring code for version 2.0 with typing. A particular constant were
   turned into a string based <code>Enum</code> for the pure Python version of
   <code>Row</code> whereas the cython version continued to use an integer
   constant, leading to deserialization failures.</p>
   <p>References: <a 
href="https://www.sqlalchemy.org/trac/ticket/9418";>#9418</a></p>
   </li>
   </ul>
   <h2>sql</h2>
   <ul>
   <li>
   <p><strong>[sql] [bug] [regression]</strong> Fixed regression where the fix 
for <a href="https://www.sqlalchemy.org/trac/ticket/8098";>#8098</a>, which was 
released in
   the 1.4 series and provided a layer of concurrency-safe checks for the
   lambda SQL API, included additional fixes in the patch that failed to be
   applied to the main branch. These additional fixes have been applied.</p>
   <p>References: <a 
href="https://www.sqlalchemy.org/trac/ticket/9461";>#9461</a></p>
   </li>
   <li>
   <p><strong>[sql] [bug]</strong> Fixed regression where the 
<code>_sql.select()</code> construct would not be able
   to render if it were given no columns and then used in the context of an
   EXISTS, raising an internal exception instead. While an empty 
&quot;SELECT&quot; is
   not typically valid SQL, in the context of EXISTS databases such as
   PostgreSQL allow it, and in any case the condition now no longer raises
   an internal exception.</p>
   <p>References: <a 
href="https://www.sqlalchemy.org/trac/ticket/9440";>#9440</a></p>
   </li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li>See full diff in <a 
href="https://github.com/sqlalchemy/sqlalchemy/commits";>compare view</a></li>
   </ul>
   </details>
   <br />
   
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to