[dependabot]

Bumps sqlalchemy from 2.0.54 to 2.1.4.

Release notes

Sourced from sqlalchemy's releases.

2.1.4

Released: October 7, 2026

orm

• [orm] [bug] [regression] Fixed regression caused by #13333 where assigning a MetaData object to the metadata attribute of a mapped Declarative class, in order to place that class's Table in a MetaData collection other than that of the _orm.registry, would emit a warning that the attribute name metadata should be left reserved. The warning is now emitted only when the metadata attribute is assigned to an object other than a MetaData.

  References: #13659

engine

• [engine] [bug] [regression] Fixed regression from the 1.4 series where the DBAPI cursor used for a compiled statement that returns no rows, which includes DDL constructs such as CreateTable and DropTable as well as the SAVEPOINT, ROLLBACK TO SAVEPOINT and RELEASE SAVEPOINT statements emitted by _engine.Connection.begin_nested(), was not closed after execution, and was instead left to be released when garbage collected. The cursor is now closed immediately, as was the case in 1.3 and as is already the case for INSERT, UPDATE, DELETE and _sql.text() statements.

  This change is also backported to: 2.0.55

  References: #13640

• [engine] [bug] Fixed issue in the _engine.Connection.execution_options.logging_token option where setting the value to None or another false value would raise AttributeError if a logging token had not already been established on that _engine.Connection, such as on a newly checked out connection, when the option was set at the _engine.Engine level, or when the token was reset to None more than once. Regression introduced in 2.0.30 as part of #11210.

  This change is also backported to: 2.0.55

  References: #13641

• [engine] [bug] [regression] Fixed regression where iterating a Result directly would create reference cycles that prevented the Result along with the DBAPI

... (truncated)

Commits

• See full diff in compare view

[This-is-XiaoDeng]

已确认并修复兼容性 ✅

SQLAlchemy 2.1 的一个破坏性变更影响了本 PR：greenlet 不再默认安装（移入 sqlalchemy[asyncio] extra，见 What's New in SQLAlchemy 2.1)。本项目 utils/db.py 使用 create_async_engine（sqlite+aiosqlite），在 2.1.4 下启动即抛 ModuleNotFoundError: No module named 'greenlet'。

已在 42f00c8 修复：依赖声明改为 sqlalchemy[asyncio] (>=2.1.4,<3.0.0) 并重算 poetry.lock（greenlet 3.5.6 回到锁文件）。已验证：pytest 40 项全部通过；异步引擎建表、写入、过期清理冒烟测试正常。（已确认 declarative_base/Column/delete 等其余用法在 2.1 中无兼容问题。）