Cap SQLAlchemy dependency at <3.0

sqlalchemy-dqlite subclasses the SQLite dialect and pins several
SQLAlchemy-internal class attributes that the framework reads via
explicit __dict__ lookups (engine/default.py's
_supports_statement_cache — see aio.py note). A future SQLAlchemy
3.x may reshape those internals and silently break the dialect at
runtime. Cap the dependency at <3.0 to force a deliberate audit
when SQLAlchemy 3 ships.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: antoineleclair

pyproject.toml

@@ -23,7 +23,7 @@ classifiers = [
     "Topic :: Database :: Front-Ends",
     "Typing :: Typed",
 ]
-dependencies = ["dqlite-dbapi>=0.1.0", "sqlalchemy>=2.0"]
+dependencies = ["dqlite-dbapi>=0.1.0", "sqlalchemy>=2.0,<3.0"]
 
 [tool.uv.sources]
 dqlite-dbapi = { path = "../python-dqlite-dbapi", editable = true }