chore(deps): bump the runtime-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the runtime-dependencies group with 4 updates in the / directory: python-dotenv, sqlalchemy, prefect-dbt and meltano.

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

Commits

• 49515af Bump version: 1.2.2 → 1.2.3
• 8ac846f chore: add release runbook (RELEASING.md) and make release target
• bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
• f7b18d9 fix: round-trip backslashes through set_key (#680)
• 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
• f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
• 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
• 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
• 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
• 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
• Additional commits viewable in compare view

Updates sqlalchemy from 2.0.49 to 2.0.52

Release notes

Sourced from sqlalchemy's releases.

2.0.52

Released: August 11, 2026

platform

• [platform] [bug] Python 3.15 support has been added and tested, including minimal changes for full compatibility.

  References: #13477

orm

• [orm] [bug] Fixed a result-column misalignment bug in ORM-enabled UPDATE statements where synchronize_session="fetch" is in use, either explicitly or because the statement uses constructs such as CTEs that implicitly select for it. Columns in rows returned by .returning() could be returned under incorrect keys (e.g. row[SomeClass.a] returning the value of a different column), a problem most likely to manifest under concurrent workloads. ORM DELETE statements were not affected.

  References: #13439

• [orm] [bug] Fixed bug where a failed _orm.Session.bulk_insert_mappings(), _orm.Session.bulk_update_mappings() or _orm.Session.bulk_save_objects() call could leave the _orm.Session permanently in a "flushing" state, such as when the transaction could not be begun because a previous flush had left it needing a rollback. Unlike _orm.Session.flush(), the bulk methods set the internal flushing flag and began the transaction outside of the try/finally block that resets it, so that neither _orm.Session.rollback() nor _orm.Session.close() would clear it, and every subsequent flush would raise InvalidRequestError: Session is already flushing. Pull request courtesy Hamody We.

  References: #13485

• [orm] [bug] Fixed issue where unpickling an ORM object that were loaded using loader options making use of wildcard tokens, such as _orm.load_only() or _orm.raiseload() with "*", would fail with KeyError or IndexError if the process doing the unpickling had not yet constructed a loader path making use of that same token. This would typically be observed when the object were unpickled in a separate process, such as with the spawn or forkserver multiprocessing start methods, the latter of which became the default on POSIX platforms as of Python 3.14. The internal collection of these tokens is now established up front, so that it is identical in every process.

... (truncated)

Commits

• See full diff in compare view

Updates prefect-dbt from 0.7.23 to 0.7.25

Commits

• 963f8ce docs: Add release notes for 9 integration packages (#22239)
• 3953d74 Add cleanup reconciler for worker channel delivery (#22205)
• fcc7fe8 fix(prefect-gcp): retry transient errors on all Cloud Run V2 worker reads (#2...
• 594d969 docs: document prefect-redis settings namespace exception in integrations AGE...
• c91d9bc Add Redis cleanup queue backend to prefect-redis (#22109)
• 00b01ad fix(prefect-redis): add redis-py 8 compatible connection defaults (#22189)
• 894b1d0 fix(prefect-gcp): retry Cloud Run v2 execution polling (#22113)
• 595f083 fix(databricks): add partner user agent attribution (#22094)
• add4547 fix(prefect-gcp): retry transient errors during Cloud Run v2 readiness poll (...
• 8224470 fix(azure): retry transient 5xx errors in ACI container group polling (#22078)
• Additional commits viewable in compare view

Updates meltano from 4.2.0 to 4.2.2

Release notes

Sourced from meltano's releases.

v4.2.2 (2026-07-22)

🐛 Fixes

• #10190 Prevent include_paths from escaping project root (#10182)

v4.2.1 (2026-06-16)

🐛 Fixes

• #10106 Avoid swallowing PipelineWise plugin logs by setting the level for the root logger (#10104)

Changelog

Sourced from meltano's changelog.

v4.2.2 (2026-07-22)

🐛 Fixes

• #10190 Prevent include_paths from escaping project root (#10182)

v4.2.1 (2026-06-16)

🐛 Fixes

• #10106 Avoid swallowing PipelineWise plugin logs by setting the level for the root logger (#10104)

Commits

• 83d3c7f chore: Release v4.2.2 (#10194)
• bb27d68 fix(core): Prevent include_paths from escaping project root (#10182) (#10190)
• c428796 chore: Update dev dependencies (#10189)
• 6622cd0 chore: Release v4.2.1 (#10108)
• 0fe650d fix(core): Avoid swallowing Pipelinewise plugin logs by setting the level for...
• a1ed3d5 chore: Update integration tests
• 7429c9d chore: Update GitHub actions
• See full diff in compare view

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.