[dependabot]

Bumps the python-minor-patch group with 2 updates in the /backend/python/pydevlake directory: mysqlclient and jsonpointer.
Bumps the python-minor-patch group with 1 update in the /grafana/scripts directory: sqlglot.

Updates mysqlclient from 2.3.0 to 2.3.1

Release notes

Sourced from mysqlclient's releases.

v2.3.1

This security release fixes SQL injection through Python set query parameters when NO_BACKSLASH_ESCAPES is enabled. See GHSA-m9c3-99x3-77g6 for details.

What's Changed

• Bump codecov/codecov-action from 7.0.0 to 7.1.0 in the all-dependencies group by @​dependabot[bot] in PyMySQL/mysqlclient#803
• Bump the all-dependencies group across 1 directory with 2 updates by @​dependabot[bot] in PyMySQL/mysqlclient#806
• Adopt GitHub Actions workflow dependency lockfile by @​methane in PyMySQL/mysqlclient#811
• Fix crash on connection attribute lookup with non-string names by @​methane in PyMySQL/mysqlclient#810
• release v2.3.1 by @​methane in PyMySQL/mysqlclient#813

Full Changelog: PyMySQL/mysqlclient@v2.3.0...v2.3.1

Changelog

Sourced from mysqlclient's changelog.

What's new in 2.3.1

Release: 2026-11-10

• Security fix: Escape Python set query parameters using the connection's character set and SQL mode. This fixes SQL injection when NO_BACKSLASH_ESCAPES is enabled and an attacker controls a set member. frozenset parameters now use the same escaping. See GHSA-m9c3-99x3-77g6 <https://github.com/PyMySQL/mysqlclient/security/advisories/GHSA-m9c3-99x3-77g6>_.

• Deprecate MySQLdb.converters.Set2Str.

• Connection.literal() now applies built-in handling only to exact built-in types. Subclasses use the connection's converter mapping.

• Fix crashes when looking up connection attributes with a non-string name or a string containing lone surrogates. (#810)

======================

Commits

• 79db3b4 release v2.3.1 (#813)
• cdf32b5 docs: use GitHub Security Advisories for vulnerability reports
• 2d99fe2 Fix crash on connection attribute lookup with non-string names (#810)
• 58850aa Adopt GitHub Actions workflow dependency lockfile (#811)
• ff9e96d Bump the all-dependencies group across 1 directory with 2 updates (#806)
• ab40ed4 Bump codecov/codecov-action from 7.0.0 to 7.1.0 (#803)
• 58bbe3f agent: Add AGENTS.md
• See full diff in compare view

Updates jsonpointer from 3.10 to 3.11

Release notes

Sourced from jsonpointer's releases.

3.11

What's Changed

• Allow reflected equality for non-pointer objects by @​wynneyin in stefankoegl/python-json-pointer#112

New Contributors

• @​wynneyin made their first contribution in stefankoegl/python-json-pointer#112

Full Changelog: stefankoegl/python-json-pointer@v3.10...v3.11

Commits

• 26d99df bump version to 3.11
• a52a5ff Merge pull request #112 from wynneyin/fix/reflected-equality
• 9854838 Allow reflected equality for non-pointer objects
• See full diff in compare view

Updates sqlglot from 30.30.0 to 30.31.0

Commits

• 447a8a8 fix(optimizer): resolve outer columns before inner table aliases in postgres ...
• 326acdc fix(teradata): preserve nested TITLE function calls (#8976)
• c14c969 feat(teradata): parse TITLE display headings [CODEX] (#8974)
• 6b1cfde Sync w/ integration tests
• 4f6e8d8 feat(Snowflake): Support Snowflake TO_JSON varchar type (#8975)
• 0c1b5ee fix(generator): guard modulo by zero when transpiling from safe-division dial...
• 7740638 fix(schema): invalidate all cached lookups in MappingSchema.add_table (#8960)
• 547fee8 fix(optimizer): don't simplify zoned DATE_TRUNC/TIMESTAMP_TRUNC [CLAUDE] (#8971)
• e0a6385 perf(optimizer): skip comparison pairs that can never combine in simplify [CL...
• 6922013 fix(postgres): preserve omitted REGEXP_REPLACE replacement [CODEX] (#8969)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions