Bump the minor-patch group across 1 directory with 6 updates

[dependabot]

Bumps the minor-patch group with 6 updates in the /backend directory:

Package	From	To
lxml	6.1.2	6.1.3
alembic	1.19.1	1.20.0
cachetools	7.1.8	7.2.1
sqlalchemy	2.0.52	2.1.4
pytz	2026.3.post1	2026.5
sentry-sdk	2.68.1	2.71.0

Updates lxml from 6.1.2 to 6.1.3

Changelog

Sourced from lxml's changelog.

6.1.3 (2026-09-02)

Bugs fixed

• LP#2165901: External parameter entity parsing was allowed by default (with resolve_entities="internal"). Issue found by Tomer Fichman.

Commits

• 3c1a4c7 Prepare release of 6.1.3.
• c1191fc Update changelog.
• 03ec312 Disable parameter entity parsing when internal-only entity parsing is requested.
• 11d03e9 Build: Prevent duplicate Py3.8 wheel builds.
• 9efc586 Build: Exclude musllinux-ARM from Py3.8 wheel building to prevent slow emulat...
• 9716fb1 Build: Include older PyPy versions.
• 0f3327d Build: Exclude Win-Aarch64 from wheel build.
• 6967c96 Build: Make all built wheels downloadable even if they don't pass the release...
• 061218d Build: Exclude Py3.15 i686 wheels from validation (because they are intention...
• ce9fe0d Build: Fix Py3.8 windows build.
• See full diff in compare view

Updates alembic from 1.19.1 to 1.20.0

Release notes

Sourced from alembic's releases.

1.20.0

Released: September 11, 2026

usecase

• [usecase] [batch] Added a warning for the case where an unnamed CHECK constraint on a reflected table is omitted from a batch "recreate" operation. An unnamed CHECK constraint can't be reliably carried over in a batch recreate as it may refer to columns that are being dropped or changed. This omission was previously a silent operation. The presence of any ~sqlalchemy.schema.CheckConstraint in Operations.batch_alter_table.table_args is taken to indicate that the case has been accommodated, and no warning is emitted.

  References: #1846

• [usecase] [autogenerate] Autogenerate now renders a warning comment above any rendered Operations.drop_constraint() directive for which the constraint name is None, as is the case when a constraint that has no name in the model is dropped, most typically within the downgrade() function of a migration that adds an unnamed constraint. A warning is also emitted on the console when the migration script is generated. The directive requires a non-None name in order to be able to emit a "DROP CONSTRAINT" command.

  References: #916

bug

• [bug] [batch] Fixed bug in batch mode where adding a column with a type that generates its own CHECK constraint, such as ~sqlalchemy.types.Boolean or ~sqlalchemy.types.Enum with ~sqlalchemy.types.Boolean.create_constraint set to True, would emit the constraint twice when the table was recreated, once under the name generated by the naming convention in use and once under the name given to the type. The constraint is now emitted once, using the same name that would be used outside of batch mode.

  References: #1768

• [bug] [batch] Fixed bug in batch mode where a CHECK constraint generated by a type such as ~sqlalchemy.types.Boolean or ~sqlalchemy.types.Enum would lose the name established for it by the naming convention in use when the table was recreated, as the constraint was regenerated against the temporary table used for the recreate operation. The naming convention is now resolved against the name of the table being replaced.

... (truncated)

Commits

• See full diff in compare view

Updates cachetools from 7.1.8 to 7.2.1

Changelog

Sourced from cachetools's changelog.

v7.2.1 (2026-10-05)

• Improve error handling for RRCache.popitem() when the cache is empty.

• Minor style and documentation improvements.

• Update CI environment.

v7.2.0 (2026-09-16)

• Deprecate use of cache=None to suppress caching with the @cached decorator.

• Add support for Python 3.15.

• Minor test improvements.

• Minor documentation updates.

Commits

• 9976f1a Release v7.2.1.
• ffe21c4 Fix #430: Honor falsey getsizeof callables (#431)
• 110fe5d Bump codecov/codecov-action
• 11153c9 Prefer pyright file-level comments over relaxing rules globally.
• bcf9e81 Fix #423: Detect an empty RRCache before calling choice.
• eadb91c docs: clarify that unbounded TTL caches still expire entries
• 3c082c6 Release v7.2.0.
• ff9a394 Minor documentation updates.
• 9b7fe6c Deprecate @​cached(cache=None).
• 72adda6 Minor test improvements.
• Additional commits viewable in compare view

Updates sqlalchemy from 2.0.52 to 2.1.4

Release notes

Sourced from sqlalchemy's releases.

2.1.4

Released: October 7, 2026

orm

• [orm] [bug] [regression] Fixed regression caused by #13333 where assigning a MetaData object to the metadata attribute of a mapped Declarative class, in order to place that class's Table in a MetaData collection other than that of the _orm.registry, would emit a warning that the attribute name metadata should be left reserved. The warning is now emitted only when the metadata attribute is assigned to an object other than a MetaData.

  References: #13659

engine

• [engine] [bug] [regression] Fixed regression from the 1.4 series where the DBAPI cursor used for a compiled statement that returns no rows, which includes DDL constructs such as CreateTable and DropTable as well as the SAVEPOINT, ROLLBACK TO SAVEPOINT and RELEASE SAVEPOINT statements emitted by _engine.Connection.begin_nested(), was not closed after execution, and was instead left to be released when garbage collected. The cursor is now closed immediately, as was the case in 1.3 and as is already the case for INSERT, UPDATE, DELETE and _sql.text() statements.

  This change is also backported to: 2.0.55

  References: #13640

• [engine] [bug] Fixed issue in the _engine.Connection.execution_options.logging_token option where setting the value to None or another false value would raise AttributeError if a logging token had not already been established on that _engine.Connection, such as on a newly checked out connection, when the option was set at the _engine.Engine level, or when the token was reset to None more than once. Regression introduced in 2.0.30 as part of #11210.

  This change is also backported to: 2.0.55

  References: #13641

• [engine] [bug] [regression] Fixed regression where iterating a Result directly would create reference cycles that prevented the Result along with the DBAPI

... (truncated)

Commits

• See full diff in compare view

Updates pytz from 2026.3.post1 to 2026.5

Commits

• 21be17f Add Python 3.14 to test suite
• fddd01c Bump version numbers to 2026.5 (2026e)
• 8f05ab3 IANA 2026e
• d79605f Squashed 'tz/' changes from d633fe7ed3..db07415c7d
• 1ac6e51 Bump version numbers to 2026.4 (2026d)
• 1672798 IANA 2026d
• 0b5995b Squashed 'tz/' changes from 71f28b9ab3..bac9223f4b
• e96461b Make deprecation notice louder
• 3c7af58 Merge branch 'nicoleman0-fix/timezone-non-string-input' into 2026d
• 234a247 Merge branch 'nicoleman0-fix/fixedoffset-basetzinfo' into 2026d
• Additional commits viewable in compare view

Updates sentry-sdk from 2.68.1 to 2.71.0

Release notes

Sourced from sentry-sdk's releases.

2.71.0

New Features ✨

• New integration: TypeSafe (#4733) by @​alexander-alderman-webb

  Add the TypeSafe integration to your sentry_sdk.init call:

import sentry_sdk
from sentry_sdk.integrations.typesafe import TypeSafeIntegration
sentry_sdk.init(
dsn="...",
traces_sample_rate=1.0,
integrations=[
TypeSafeIntegration(),
]
)

Typesafe

• Record gen_ai.output.messages by @​alexander-alderman-webb in #7720
• Set token usage attributes by @​alexander-alderman-webb in #7719
• Record gen_ai.input.messages by @​alexander-alderman-webb in #7718
• Record gen_ai.response.model by @​alexander-alderman-webb in #7717
• Add integration with system_one() patches by @​alexander-alderman-webb in #7716

Bug Fixes 🐛

• Keep event if processor raises by @​sentrivana in #7701
• Isolate user callbacks, emit client reports by @​sentrivana in #7692

Documentation 📚

• Promote data_collection in changelog by @​sentrivana in #7565

Internal Changes 🔧

• (aws-lambda) Add .gitignore to lambda handlers by @​pabloDeputter in #7638
• (litellm) Set LITELLM_LOCAL_MODEL_COST_MAP=true by @​alexander-alderman-webb in #7630
• (otlp) Adjust to OTLPSpanExporter._headers removal by @​alexander-alderman-webb in #7722
• Use top-level flush API in tests by @​sentrivana in #7725
• Unsample on sampler exception by @​sentrivana in #7723
• Use sentry_init fixture by @​sentrivana in #7577

2.70.0

New Features ✨

• New integration: Mistral AI (#4733) by @​alexander-alderman-webb

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.71.0

New Features ✨

• New integration: TypeSafe (#4733) by @​alexander-alderman-webb

  Add the TypeSafe integration to your sentry_sdk.init call:

import sentry_sdk
from sentry_sdk.integrations.typesafe import TypeSafeIntegration
sentry_sdk.init(
dsn="...",
traces_sample_rate=1.0,
integrations=[
TypeSafeIntegration(),
]
)

Typesafe

• Record gen_ai.output.messages by @​alexander-alderman-webb in #7720
• Set token usage attributes by @​alexander-alderman-webb in #7719
• Record gen_ai.input.messages by @​alexander-alderman-webb in #7718
• Record gen_ai.response.model by @​alexander-alderman-webb in #7717
• Add integration with system_one() patches by @​alexander-alderman-webb in #7716

Bug Fixes 🐛

• Keep event if processor raises by @​sentrivana in #7701
• Isolate user callbacks, emit client reports by @​sentrivana in #7692

Documentation 📚

• Promote data_collection in changelog by @​sentrivana in #7565

Internal Changes 🔧

• (aws-lambda) Add .gitignore to lambda handlers by @​pabloDeputter in #7638
• (litellm) Set LITELLM_LOCAL_MODEL_COST_MAP=true by @​alexander-alderman-webb in #7630
• (otlp) Adjust to OTLPSpanExporter._headers removal by @​alexander-alderman-webb in #7722
• Use top-level flush API in tests by @​sentrivana in #7725
• Unsample on sampler exception by @​sentrivana in #7723
• Use sentry_init fixture by @​sentrivana in #7577

2.70.0

New Features ✨

... (truncated)

Commits

• 7d02558 Update CHANGELOG.md
• e69596f release: 2.71.0
• dfc004a feat(typesafe): Record gen_ai.output.messages (#7720)
• d36887b feat(typesafe): Record token usage (#7719)
• 166b85a feat(typesafe): Record gen_ai.input.messages (#7718)
• 1bef565 chore: Use top-level flush API in tests (#7725)
• 38a946b feat(typesafe): Record gen_ai.response.model (#7717)
• cd3866d feat(typesafe): Add integration with system_one() patches (#7716)
• bd08efd ref: Unsample on sampler exception (#7723)
• ff7d0b2 test(otlp): Adjust to OTLPSpanExporter._headers removal (#7722)
• Additional commits viewable in compare view