dependabot[bot] opened a new pull request, #45114: URL: https://github.com/apache/superset/pull/45114
Bumps [sqlalchemy-continuum](https://github.com/sqlalchemy-continuum/sqlalchemy-continuum) from 1.7.0 to 1.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sqlalchemy-continuum/sqlalchemy-continuum/releases";>sqlalchemy-continuum's releases</a>.</em></p> <blockquote> <h2>1.8.0</h2> <h2>What's changed</h2> <h3>Added</h3> <ul> <li><strong>SQLAlchemy 2.1 support.</strong> The supported range is now <code>SQLAlchemy>=1.4.53,<2.2</code>. SQLAlchemy 2.1 requires Python 3.11+, so installs on Python 3.10 keep resolving to SQLAlchemy 2.0.</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>Transaction</code> model no longer picks up stray <code>registry</code>, <code>Base</code> and <code>user_cls</code> class attributes when <code>user_cls</code> is configured. <code>Transaction.registry</code> shadowed the declarative registry, and SQLAlchemy 2.1 raises an <code>SAWarning</code> for it.</li> <li>An exception during mapper configuration no longer silently disables version model building for every later configuration.</li> <li><code>generic_relationship</code> (used by <code>ActivityPlugin</code>) no longer raises <code>ValueError</code> on SQLAlchemy pre-release versions such as <code>2.1.0rc2</code>.</li> <li><code>count_versions()</code> no longer flushes pending session changes on SQLAlchemy 2.1, which autoflushes textual SQL. The count matches SQLAlchemy 1.4 and 2.0.</li> </ul> <h3>Changed</h3> <ul> <li>CI now tests SQLAlchemy 1.4, 2.0 and 2.1 as separate matrix legs, and the lint job runs the repository's pinned pre-commit hooks.</li> </ul> <h3>Upgrading to SQLAlchemy 2.1</h3> <ul> <li>SQLAlchemy 2.1 maps bare <code>postgresql://</code> URLs to psycopg 3 instead of psycopg2. Install psycopg 3 (<code>pip install "psycopg[binary]"</code>, or plain <code>psycopg</code> if the system libpq is available), or keep psycopg2 by using an explicit <code>postgresql+psycopg2://</code> URL. Continuum, including native versioning, works with either driver.</li> </ul> <p><strong>Full changelog</strong>: <a href="https://github.com/sqlalchemy-continuum/sqlalchemy-continuum/compare/1.7.0...1.8.0";>https://github.com/sqlalchemy-continuum/sqlalchemy-continuum/compare/1.7.0...1.8.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sqlalchemy-continuum/sqlalchemy-continuum/blob/main/docs/changelog.md";>sqlalchemy-continuum's changelog</a>.</em></p> <blockquote> <h2>1.8.0 (2026-09-28)</h2> <ul> <li>Add support for SQLAlchemy 2.1 (supported range is now <code>>=1.4.53,<2.2</code>; SQLAlchemy 2.1 itself requires Python 3.11+)</li> <li>Fix the <code>Transaction</code> model gaining stray <code>registry</code>, <code>Base</code> and <code>user_cls</code> class attributes when <code>user_cls</code> is configured; <code>registry</code> shadowed the declarative registry and raises an <code>SAWarning</code> on SQLAlchemy 2.1</li> <li>Fix an exception during mapper configuration silently disabling version model building for every later configuration</li> <li>Fix <code>generic_relationship</code> (used by <code>ActivityPlugin</code>) raising <code>ValueError</code> on SQLAlchemy pre-release versions such as <code>2.1.0rc2</code></li> <li><code>count_versions()</code> no longer flushes pending session changes on SQLAlchemy 2.1, which autoflushes textual SQL; the count matches 1.4 and 2.0</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sqlalchemy-continuum/sqlalchemy-continuum/commit/a84e82866450d4eb82ba356d922b42051af31724";><code>a84e828</code></a> Bump version to 1.8.0</li> <li><a href="https://github.com/sqlalchemy-continuum/sqlalchemy-continuum/commit/43915e89a560ca01de2d563bb4cf2bd77aac3b3b";><code>43915e8</code></a> Add support for SQLAlchemy 2.1 (<a href="https://redirect.github.com/sqlalchemy-continuum/sqlalchemy-continuum/issues/405";>#405</a>)</li> <li><a href="https://github.com/sqlalchemy-continuum/sqlalchemy-continuum/commit/560369ae380f31faffba35807c0ca00e77d2ce55";><code>560369a</code></a> Harden CI database service containers against startup flakes</li> <li><a href="https://github.com/sqlalchemy-continuum/sqlalchemy-continuum/commit/50edc400e2d838475a9fbb960607a2906d9b740c";><code>50edc40</code></a> Merge pull request <a href="https://redirect.github.com/sqlalchemy-continuum/sqlalchemy-continuum/issues/383";>#383</a> from sqlalchemy-continuum/dependabot/github_actions/g...</li> <li><a href="https://github.com/sqlalchemy-continuum/sqlalchemy-continuum/commit/104e2ef1e62b06f6e05783370d2b19793d34afc8";><code>104e2ef</code></a> Refresh uv.lock and tune Dependabot's uv ecosystem config</li> <li><a href="https://github.com/sqlalchemy-continuum/sqlalchemy-continuum/commit/f45d1cf65638a22cd96b04ba88b793ef82b1bf24";><code>f45d1cf</code></a> Bump the github-actions group with 2 updates</li> <li>See full diff in <a href="https://github.com/sqlalchemy-continuum/sqlalchemy-continuum/compare/1.7.0...1.8.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
