An open index of dependabot pull requests across open source projects.

Bump the minor-and-patch group across 1 directory with 4 updates

Open
Number: #67
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 2
Created: September 15, 2025 at 04:23 AM UTC
(19 days ago)
Updated: September 22, 2025 at 04:23 AM UTC
(12 days ago)
Labels:
dependencies
Assignees:
randroid88
Description:

Bumps the minor-and-patch group with 4 updates in the /backend directory: sqlalchemy, redis, pydantic and alembic.

Updates sqlalchemy from 2.0.41 to 2.0.43

Release notes

Sourced from sqlalchemy's releases.

2.0.43

Released: August 11, 2025

orm

  • [orm] [bug] Fixed issue where using the post_update feature would apply incorrect "pre-fetched" values to the ORM objects after a multi-row UPDATE process completed. These "pre-fetched" values would come from any column that had an Column.onupdate callable or a version id generator used by orm.Mapper.version_id_generator; for a version id generator that delivered random identifiers like timestamps or UUIDs, this incorrect data would lead to a DELETE statement against those same rows to fail in the next step.

    References: #12748

  • [orm] [bug] Fixed issue where _orm.mapped_column.use_existing_column parameter in _orm.mapped_column() would not work when the _orm.mapped_column() is used inside of an Annotated type alias in polymorphic inheritance scenarios. The parameter is now properly recognized and processed during declarative mapping configuration.

    References: #12787

  • [orm] [bug] Improved the implementation of the _orm.selectin_polymorphic() inheritance loader strategy to properly render the IN expressions using chunks of 500 records each, in the same manner as that of the _orm.selectinload() relationship loader strategy. Previously, the IN expression would be arbitrarily large, leading to failures on databases that have limits on the size of IN expressions including Oracle Database.

    References: #12790

engine

  • [engine] [usecase] Added new parameter create_engine.skip_autocommit_rollback which provides for a per-dialect feature of preventing the DBAPI .rollback() from being called under any circumstances, if the connection is detected as being in "autocommit" mode. This improves upon a critical performance issue identified in MySQL dialects where the network overhead of the .rollback() call remains prohibitive even if autocommit mode is set.

    References: #12784

postgresql

... (truncated)

Commits

Updates redis from 6.2.0 to 6.4.0

Release notes

Sourced from redis's releases.

6.4.0

Changes

🚀 New Features

  • Added epsilon property to the vsim command (#3723)

🧰 Maintenance

  • Updating the latest Redis image for github pipeline testing (#3726)

We'd like to thank all the contributors who worked on this release! @​htemelski-redis @​elena-kolevska @​petyaslavova @​vladvildanov

6.3.0

Changes

🚀 New Features

  • Add support for new BITOP operations: DIFF, DIFF1, ANDOR, ONE (#3690)
  • Support new VAMANA vector index type (#3702)
  • Add new stream commands (#3711)
  • add async Retry eq and hash & fix ExponentialWithJitterBackoff eq (#3668)

🐛 Bug Fixes

  • Fixing sentinel command execution to allow returning of actual responses when meaningful - behaviour controlled by 'return_responses' argument. (#3191)
  • Annotate deprecated_args decorator to preserve wrapped function type signature (#3701)
  • Fix ConnectionPool to raise MaxConnectionsError instead of Connection… (#3698)
  • add async Retry eq and hash & fix ExponentialWithJitterBackoff eq (#3668)
  • SentinelManagedConnection searches for new master upon connection failure (#3560) (#3601)

🧰 Maintenance

  • fix: avoid instantiating a connection on repr_ (#3653)
  • Fixing the return type hint for the transaction method in the standalone client. (#3660)
  • Bump rojopolis/spellcheck-github-actions from 0.48.0 to 0.49.0 (#3665)
  • Dropping integration tests with Redis 6.2 from pipeline actions. (#3659)
  • Remove deprecated arg from call to ClusterPipeline (#3670)
  • TransactionStrategy reset: UNWATCH only when status is watching (#3671)
  • KeyT for set operations (#3190)
  • Removing references to old docs site 'https://redis-py.readthedocs.io/' replaced by 'https://redis.readthedocs.io/' (#3674)
  • Removing unnecessary check for tests using AsyncMock (#3432)
  • Updating test images for github pipeline execution (#3678)
  • Updating the latest Redis image for pipeline testing (#3695)
  • Bump rojopolis/spellcheck-github-actions from 0.49.0 to 0.51.0 (#3689)
  • DOC-5225 testable probabilistic dt examples (#3691)
  • Update README.md (#3699)
  • Convert the value to int type only if it exists in CLIENT INFO (#3688)
  • Fix compatibility with latest pytest-asyncio version(1.1.0) (#3708)
  • DOC-5424 time series examples (#3705)
  • Adding information in connection pool class doc string for available SSLConnection class, that can be used for SSL connections (#3710)

... (truncated)

Commits
  • fff669d Updated package version
  • 43ce2a4 Updating the latest Redis image for github pipeline testing (#3726)
  • 64426cb Added epsilon property to the vsim command (#3723)
  • 67ab74d Add new stream commands (#3711)
  • 4c9512b Adding information in connection pool class doc string for available SSLConne...
  • 31399ed SentinelManagedConnection searches for new master upon connection failure (#3...
  • 7291deb add async Retry __eq__ and __hash__ & fix ExponentialWithJitterBackof...
  • 4cf094f Fix ConnectionPool to raise MaxConnectionsError instead of Connection… (#3698)
  • a001416 DOC-5424 time series examples (#3705)
  • 2b1ff53 Fix compatibility with latest pytest-asyncio version(1.1.0) (#3708)
  • Additional commits viewable in compare view

Updates pydantic from 2.11.7 to 2.11.9

Release notes

Sourced from pydantic's releases.

v2.11.9 2025-09-13

What's Changed

Fixes

Full Changelog: https://github.com/pydantic/pydantic/compare/v2.11.8...v2.11.9

v2.11.8 2025-09-13

v2.11.8 (2025-09-13)

What's Changed

Fixes

Full Changelog: https://github.com/pydantic/pydantic/compare/v2.11.7...v2.11.8

Changelog

Sourced from pydantic's changelog.

v2.11.9 (2025-09-13)

GitHub release

What's Changed

Fixes

v2.11.8 (2025-09-13)

GitHub release

What's Changed

Fixes

Commits

Updates alembic from 1.16.4 to 1.16.5

Release notes

Sourced from alembic's releases.

1.16.5

Released: August 27, 2025

bug

  • [bug] [mysql] Fixed Python-side autogenerate rendering of index expressions in MySQL dialect by aligning it with SQLAlchemy's MySQL index expression rules. Pull request courtesy david-fed.

    References: #1492

  • [bug] [config] Fixed issue where new pyproject.toml config would fail to parse the integer value used for the truncate_slug_length parameter. Pull request courtesy Luís Henrique Allebrandt Schunemann.

    References: #1709

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Package:
pydantic
Ecosystem:
pip
Version Change:
2.11.7 → 2.11.9
Update Type:
Patch
Package:
alembic
Ecosystem:
pip
Version Change:
1.16.4 → 1.16.5
Update Type:
Patch
Package:
sqlalchemy
Ecosystem:
pip
Version Change:
2.0.41 → 2.0.43
Update Type:
Patch
Package:
redis
Ecosystem:
pip
Version Change:
6.2.0 → 6.4.0
Update Type:
Minor
Technical Details
ID: 8129136
UUID: 3416228859
Node ID: PR_kwDOOctpPM6oi9D7
Host: GitHub
Repository: Randroids-Dojo/typescript-and-python-bootstrap