build(deps): bump sqlalchemy from 2.0.52 to 2.1.3

[dependabot]

Bumps sqlalchemy from 2.0.52 to 2.1.3.

Release notes

Sourced from sqlalchemy's releases.

2.1.3

Released: October 2, 2026

orm

• [orm] [bug] [regression] Fixed regression where columns delivered to a mapped class from an unmapped _orm.MappedAsDataclass mixin, or from a class decorated with _orm.unmapped_dataclass(), would not be placed in the _schema.Table in the order in which they were declared on the mixin; columns that had no dataclass default, such as a primary key column with no _orm.mapped_column.default, or which made use of _orm.mapped_column.default_factory, would be moved after the remaining columns of the mixin.

  References: #13634

sql

• [sql] [bug] [regression] Fixed regression caused by the new implementation of ExecutableStatement.params() where parameter values established using this method would not be rendered when compiling the statement with the literal_binds compiler option, instead rendering NULL with a warning.

  References: #13635

2.1.2

Released: October 2, 2026

orm

• [orm] [bug] [regression] Fixed regression caused by #5987 where the selectinload() loader strategy would ignore additional criteria present in the _orm.relationship.primaryjoin of a many-to-many relationship, such as a comparison against a column on the association table or on the parent table, loading related rows that should have been excluded. The omit_join optimization for many-to-many relationships is now only used when the primaryjoin consists solely of comparisons between the parent's primary key columns and the association table.

  References: #13626

engine

... (truncated)

Commits

• See full diff in compare view

[cursor]

Not approved. This is a semver-minor SQLAlchemy bump (2.0.52 → 2.1.3) in a production lockfile with no applicable approval policy, so human review is needed. No reviewers were assigned.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}