Bump sqlalchemy from 1.4.23 to 1.4.35 in /base

[dependabot[bot]]

Bumps sqlalchemy from 1.4.23 to 1.4.35.

Release notes

Sourced from sqlalchemy's releases.

1.4.35

Released: April 6, 2022

sql

• [sql] [bug] Fixed bug in newly implemented FunctionElement.table_valued.joins_implicitly feature where the parameter would not automatically propagate from the original TableValuedAlias object to the secondary object produced when calling upon TableValuedAlias.render_derived() or TableValuedAlias.alias().

  Additionally repaired these issues in TableValuedAlias:

  -   repaired a potential memory issue which could occur when
      repeatedly calling `TableValuedAlias.render_derived()` against
      successive copies of the same object (for .alias(), we currently
      have to still continue chaining from the previous element.  not sure
      if this can be improved but this is standard behavior for .alias()
      elsewhere)
  
  repaired issue where the individual element types would be lost when
  calling upon TableValuedAlias.render_derived() or
  TableValuedAlias.alias().
  

References: #7890

[sql] [bug] [regression] Fixed regression caused by #7823 which impacted the caching system, such that bound parameters that had been "cloned" within ORM operations, such as polymorphic loading, would in some cases not acquire their correct execution-time value leading to incorrect bind values being rendered.

References: #7903

1.4.34

Released: March 31, 2022

orm

• [orm] [bug] [regression] Fixed regression caused by #7861 where invoking an Insert construct which contained ORM entities directly via _orm.Session.execute() would fail.

  References: #7878

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #749.