chore(deps): update alembic requirement from <2.0,>=1.13 to >=1.18.4,<2.0

[dependabot]

Updates the requirements on alembic to permit the latest version.

Release notes

Sourced from alembic's releases.

1.18.4

Released: February 10, 2026

bug

• [bug] [operations] Reverted the behavior of Operations.add_column() that would automatically render the "PRIMARY KEY" keyword inline when a Column with primary_key=True is added. The automatic behavior, added in version 1.18.2, is now opt-in via the new Operations.add_column.inline_primary_key parameter. This change restores the ability to render a PostgreSQL SERIAL column, which is required to be primary_key=True, while not impacting the ability to render a separate primary key constraint. This also provides consistency with the Operations.add_column.inline_references parameter and gives users explicit control over SQL generation.

  To render PRIMARY KEY inline, use the Operations.add_column.inline_primary_key parameter set to True:

  op.add_column( "my_table", Column("id", Integer, primary_key=True), inline_primary_key=True )References: #1232

Commits

• See full diff in compare view

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[cmeans]

[QA] Dependabot batch review — Signoff

Verdict: Ready for QA Signoff. This is a minimum-version-floor bump — upper bound unchanged, CI green (lint/typecheck/test 3.10+3.11+3.12/codecov all pass), single-line pyproject.toml change, no behavior change, no breaking version transition.

Reviewed as part of the dependabot batch (#252/#253/#254/#255/#256). All 5 PRs are the same shape: pyproject.toml minimum-floor bump within the existing major-version range.

CHANGELOG check: these minimum-floor bumps are not user-visible, not behavior changes, and not noteworthy code changes per feedback_changelog_per_pr — no CHANGELOG entry needed. The compatible version range narrows from below but the upper bound (the thing that matters for breaking changes) is unchanged.

Merge-order note: all 5 touch pyproject.toml so they will conflict with each other after the first one merges. Merge sequentially; dependabot will auto-rebase the remaining PRs after each merge.

[cmeans]

[QA] Dependabot batch — Ready for QA Signoff. Min-floor bump only, upper bound unchanged, CI all green. Merge sequentially (all 5 touch pyproject.toml). Applying label as final act.

[cmeans]

@dependabot rebase

[cmeans]

LGTM