dependabot[bot] opened a new pull request, #4231: URL: https://github.com/apache/iceberg-python/pull/4231
Bumps [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) from 2.0.54 to 2.1.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sqlalchemy/sqlalchemy/releases";>sqlalchemy's releases</a>.</em></p> <blockquote> <h1>2.1.6</h1> <p>Released: October 21, 2026</p> <h2>orm</h2> <ul> <li> <p><strong>[orm] [bug]</strong> Fixed issue where a <code>Session</code> flush that replaced an expired object in the identity map with a newly flushed object of the same primary key would emit a SELECT to refresh the expired object, solely in order to determine whether to emit an "Identity map already had an identity" warning. This could occur when a row loaded within a transaction is rolled back and its primary key value is subsequently reused, and could lead to an <code>AttributeError</code> if the expired object were garbage collected during that load. The check now emits no SQL, and an expired object that is replaced in this way no longer causes the warning to be emitted.</p> <p>This change is also <strong>backported</strong> to: 2.0.56</p> <p>References: <a href="https://www.sqlalchemy.org/trac/ticket/13711";>#13711</a></p> </li> <li> <p><strong>[orm] [bug] [regression]</strong> Fixed regression caused by <a href="https://www.sqlalchemy.org/trac/ticket/13070";>#13070</a> where using more than one <code>orm.with_loader_criteria()</code> option for the same entity, where the criteria made use of correlated subqueries referring to that entity, would fail with a <code>RecursionError</code> when compiling.</p> <p>References: <a href="https://www.sqlalchemy.org/trac/ticket/13701";>#13701</a></p> </li> <li> <p><strong>[orm] [bug] [regression]</strong> Fixed regression caused by the new implementation of <code>.params()</code> for statements introduced in <a href="https://www.sqlalchemy.org/trac/ticket/7066";>#7066</a>, where parameter values passed to the <code>.params()</code> method of an ORM statement created using <code>Select.from_statement()</code> would not be applied when the statement was compiled without the compiled statement cache, such as when the cache was disabled or when the statement was stringified directly, leading to an error that a value is required for the bound parameter.</p> <p>References: <a href="https://www.sqlalchemy.org/trac/ticket/13709";>#13709</a></p> </li> </ul> <h2>orm extensions</h2> <ul> <li> <p><strong>[bug] [orm extensions]</strong> Fixed an issue in the <code>instrumentation_toplevel</code> extension where unrelated classes inheriting from <code>typing.Generic</code> could incorrectly raise a <code>TypeError</code> when using different instrumentation implementations. Pull request courtesy TomasCaruso10.</p> <p>This change is also <strong>backported</strong> to: 2.0.56</p> <p>References: <a href="https://www.sqlalchemy.org/trac/ticket/13680";>#13680</a></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/sqlalchemy/sqlalchemy/commits";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
