Bump the python-packages group with 5 updates

[dependabot]

Bumps the python-packages group with 5 updates:

Package	From	To
sqlalchemy	2.0.44	2.0.45
sqlalchemy-utils	0.42.0	0.42.1
fastapi	0.124.0	0.124.4
coverage	7.12.0	7.13.0
mypy	1.19.0	1.19.1

Updates sqlalchemy from 2.0.44 to 2.0.45

Release notes

Sourced from sqlalchemy's releases.

2.0.45

Released: December 9, 2025

orm

• [orm] [bug] Fixed issue where calling Mapper.add_property() within mapper event hooks such as MapperEvents.instrument_class(), MapperEvents.after_mapper_constructed(), or MapperEvents.before_mapper_configured() would raise an AttributeError because the mapper's internal property collections were not yet initialized. The Mapper.add_property() method now handles early-stage property additions correctly, allowing properties including column properties, deferred columns, and relationships to be added during mapper initialization events. Pull request courtesy G Allajmi.

  References: #12858

• [orm] [bug] Fixed issue in Python 3.14 where dataclass transformation would fail when a mapped class using MappedAsDataclass included a relationship() referencing a class that was not available at runtime (e.g., within a TYPE_CHECKING block). This occurred when using Python 3.14's PEP 649 deferred annotations feature, which is the default behavior without a from __future__ import annotations directive.

  References: #12952

examples

• [examples] [bug] Fixed the "short_selects" performance example where the cache was being used in all the examples, making it impossible to compare performance with and without the cache. Less important comparisons like "lambdas" and "baked queries" have been removed.

sql

• [sql] [bug] Some improvements to the _sql.ClauseElement.params() method to replace bound parameters in a query were made, however the ultimate issue in #12915 involving ORM _orm.aliased() cannot be fixed fully until 2.1, where the method is being rewritten to work without relying on Core cloned traversal.

  References: #12915

• [sql] [bug] Fixed issue where using the ColumnOperators.in_() operator with a nested CompoundSelect statement (e.g. an INTERSECT of UNION queries) would raise a NotImplementedError when the

... (truncated)

Commits

• See full diff in compare view

Updates sqlalchemy-utils from 0.42.0 to 0.42.1

Release notes

Sourced from sqlalchemy-utils's releases.

0.42.1

• Fix AttributeError with Sequence defaults in instant_defaults_listener by @​wadinj in kvesteri/sqlalchemy-utils#793

Changelog

Sourced from sqlalchemy-utils's changelog.

0.42.1 (2025-12-12) ^^^^^^^^^^^^^^^^^^^

• Fix AttributeError with Sequence defaults in instant_defaults_listener (#793)

Commits

• ed0cc46 Bump version to 0.42.1
• 11cf519 Bump urllib3 from 2.5.0 to 2.6.0 in /requirements/docs
• 881fed4 Merge pull request #797 from kvesteri/dependabot/github_actions/github-action...
• 81a5f82 Bump actions/checkout from 5 to 6 in the github-actions group
• e8b12f8 Merge pull request #794 from kvesteri/dependabot/github_actions/github-action...
• 19570dc Bump actions/setup-python from 5 to 6 in the github-actions group
• 4a7d764 Fix AttributeError with Sequence defaults in instant_defaults_listener (#...
• 9645938 Fix AttributeError with Sequence defaults in instant_defaults_listener
• e4b9f72 Merge pull request #792 from kvesteri/dependabot/github_actions/github-action...
• 755064d Bump actions/checkout from 4 to 5 in the github-actions group
• Additional commits viewable in compare view

Updates fastapi from 0.124.0 to 0.124.4

Release notes

Sourced from fastapi's releases.

0.124.4

Fixes

• 🐛 Fix parameter aliases. PR #14371 by @​YuriiMotov.

0.124.3

Fixes

• 🐛 Fix support for tagged union with discriminator inside of Annotated with Body(). PR #14512 by @​tiangolo.

Refactors

• ✅ Add set of tests for request parameters and alias. PR #14358 by @​YuriiMotov.

Docs

• 📝 Tweak links format. PR #14505 by @​tiangolo.
• 📝 Update docs about re-raising validation errors, do not include string as is to not leak information. PR #14487 by @​tiangolo.
• 🔥 Remove external links section. PR #14486 by @​tiangolo.

Translations

• 🌐 Sync Russian docs. PR #14509 by @​YuriiMotov.
• 🌐 Sync German docs. PR #14488 by @​nilslindemann.

Internal

• 👷 Tweak coverage to not pass Smokeshow max file size limit. PR #14507 by @​tiangolo.
• ✅ Expand test matrix to include Windows and MacOS. PR #14171 by @​svlandeg.

0.124.2

Fixes

• 🐛 Fix support for if TYPE_CHECKING, non-evaluated stringified annotations. PR #14485 by @​tiangolo.

0.124.1

Fixes

• 🐛 Fix handling arbitrary types when using arbitrary_types_allowed=True. PR #14482 by @​tiangolo.

Docs

• 📝 Add variants for code examples in "Advanced User Guide". PR #14413 by @​YuriiMotov.
• 📝 Update tech stack in project generation docs. PR #14472 by @​alejsdev.

Internal

• ✅ Add test for Pydantic v2, dataclasses, UUID, and __annotations__. PR #14477 by @​tiangolo.

Commits

• b1d9769 🔖 Release version 0.124.4
• 89157a8 📝 Update release notes
• d86c474 🐛 Fix parameter aliases (#14371)
• 3fe6522 🔖 Release version 0.124.3
• 80d1f73 📝 Update release notes
• c0556ac 🐛 Fix support for tagged union with discriminator inside of Annotated with ...
• 1fcec88 📝 Update release notes
• f8b216d 🌐 Sync Russian docs (#14509)
• 4b905b6 📝 Update release notes
• 6c54bce ✅ Add set of tests for request parameters and alias (#14358)
• Additional commits viewable in compare view

Updates coverage from 7.12.0 to 7.13.0

Changelog

Sourced from coverage's changelog.

Version 7.13.0 — 2025-12-08

• Feature: coverage.py now supports :file:.coveragerc.toml configuration files. These files use TOML syntax and take priority over :file:pyproject.toml but lower priority than :file:.coveragerc files. Closes issue 1643_ thanks to Olena Yefymenko <pull 1952_>_.

• Fix: we now include a permanent .pth file which is installed with the code, fixing issue 2084. In 7.12.1b1 this was done incorrectly: it didn't work when using the source wheel (py3-none-any). This is now fixed. Thanks, Henry Schreiner <pull 2100_>.

• Deprecated: when coverage.py is installed, it creates three command entry points: coverage, coverage3, and coverage-3.10 (if installed for Python 3.10). The second and third of these are not needed and will eventually be removed. They still work for now, but print a message about their deprecation.

.. _issue 1643: coveragepy/coveragepy#1643 .. _pull 1952: coveragepy/coveragepy#1952 .. _pull 2100: coveragepy/coveragepy#2100

.. _changes_7-12-1b1:

Version 7.12.1b1 — 2025-11-30

• Fix: coverage.py now includes a permanent .pth file in the distribution which is installed with the code. This fixes issue 2084_: failure to patch for subprocess measurement when site-packages is not writable.

.. _issue 2084: coveragepy/coveragepy#2084

.. _changes_7-12-0:

Commits

• 52fde9c docs: sample HTML for 7.13.0
• 69de009 docs: prep for 7.13.0
• 01387fc docs: tweak changes
• 60206e8 chore: make edit_for_release
• 78cfd57 docs: tweak CHANGES.rst
• 21e726f feat: support .coveragerc.toml for configuration (#1952)
• 3914e50 chore: bump the action-dependencies group with 2 updates (#2102)
• d5e7c3a test: no need to group tests by needs_pth
• ed516c4 test: fix metacov again
• da833a1 fix: use Development Status classifier properly. #2101
• Additional commits viewable in compare view

Updates mypy from 1.19.0 to 1.19.1

Changelog

Sourced from mypy's changelog.

Mypy 1.19.1

• Fix noncommutative joins with bounded TypeVars (Shantanu, PR 20345)
• Respect output format for cached runs by serializing raw errors in cache metas (Ivan Levkivskyi, PR 20372)
• Allow types.NoneType in match cases (A5rocks, PR 20383)
• Fix mypyc generator regression with empty tuple (BobTheBuidler, PR 20371)
• Fix crash involving Unpack-ed TypeVarTuple (Shantanu, PR 20323)
• Fix crash on star import of redefinition (Ivan Levkivskyi, PR 20333)
• Fix crash on typevar with forward ref used in other module (Ivan Levkivskyi, PR 20334)
• Fail with an explicit error on PyPy (Ivan Levkivskyi, PR 20389)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

• A5rocks
• BobTheBuidler
• bzoracler
• Chainfire
• Christoph Tyralla
• David Foster
• Frank Dana
• Guo Ci
• iap
• Ivan Levkivskyi
• James Hilton-Balfe
• jhance
• Joren Hammudoglu
• Jukka Lehtosalo
• KarelKenens
• Kevin Kannammalil
• Marc Mueller
• Michael Carlstrom
• Michael J. Sullivan
• Piotr Sawicki
• Randolf Scholz
• Shantanu
• Sigve Sebastian Farstad
• sobolevn
• Stanislav Terliakov
• Stephen Morton
• Theodore Ando
• Thiago J. Barbalho
• wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.18

We’ve just uploaded mypy 1.18.1 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance

... (truncated)

Commits

• 412c19a Bump version to 1.19.1
• 20aea0a Update changelog for 1.19.1 (#20414)
• 2b23b50 Serialize raw errors in cache metas (#20372)
• f60f90f Fail on PyPy in main instead of setup.py (#20389)
• 58d485b Fail with an explicit error on PyPy (#20384)
• a4b31a2 Allow types.NoneType in match cases (#20383)
• 8a6eff4 [mypyc] fix generator regression with empty tuple (#20371)
• 70eceea Fix noncommutative joins with bounded TypeVars (#20345)
• 3890fc4 Fix crash involving Unpack-ed TypeVarTuple (#20323)
• c93d917 Fix crash on star import of redefinition (#20333)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Coverage Report •

File	Stmts	Miss	Cover	Missing
TOTAL	5089	294	94%

report-only-changed-files is enabled. No files were changed during this commit :)