Bump pgcli from 4.5.0 to 4.6.0

[dependabot]

Bumps pgcli from 4.5.0 to 4.6.0.

Changelog

Sourced from pgcli's changelog.

4.6.0 (2026-08-26)

Internal:

• Make the external-editor behave scenario less flaky: the expect_exact timeouts in tests/features/steps/iocommands.py were as low as 1-2 seconds, which intermittently expired on loaded CI runners and reported Scenario: edit sql in file with external editor as an error. Raised to 10 seconds; passing runs are unaffected because pexpect returns as soon as the expected text appears.

Bug fixes:

• Restore cursor shape behaviour for Emacs mode
• Fix TypeError: cannot use a string pattern on a bytes-like object when completion metadata comes back as bytes (e.g. SQL_ASCII client encoding).
• Suggest columns, not datatypes, after a column literally named type in a SELECT list.
• Allow sqlparse 0.6.x. sqlparse 0.6.0 fixes several denial-of-service issues (CVE-2026-59893, CVE-2026-54284, CVE-2026-71491) and a string-escaping bug (CVE-2026-59894); the previous <0.6 cap prevented users from installing the fixed release.

Features:

• Add a --timeout command line option and a connect_timeout config value (default 30 seconds) for the connection timeout. Precedence, highest first: --timeout, then a connect_timeout in the connection string, then $PGCONNECT_TIMEOUT, then the config value. libpq's own default is 0, which waits until the operating system gives up on the TCP connection, so an unreachable host used to hang for minutes.
• Honor the PSQL_EDITOR environment variable when opening the external editor (\\e, \\ev, \\ef, \\ne), matching psql's precedence of PSQL_EDITOR, then EDITOR, then VISUAL (issue 1398).
• Add \\ne <name> to edit a named query in the external editor. Loads the named query's SQL into $EDITOR; on save it is written back to the [named queries] section, creating it if it does not exist. Complements \\ns (save) by making longer queries easier to edit (issue 1430).
• Enable .pgpass support for SSH tunnel connections.
  • Preserve original hostname for .pgpass lookup using PostgreSQL's hostaddr parameter
  • SSH tunnel endpoint (127.0.0.1) is passed via hostaddr, keeping host for .pgpass
  • Works with both DSN and host/port connection styles

Commits

• 787a77a Releasing version 4.6.0
• ff853cb Changelog update to release 4.6.0. (#1623)
• fe6c158 Allow sqlparse 0.6.x
• 17135da Honor PSQL_EDITOR when opening the external editor
• 5d5e082 Add \ne to edit a named query in the external editor (#1609)
• ea6c30d Suggest columns after a column named type (#1611)
• 4beae47 fix: decode bytes identifiers in completion metadata (#1612)
• fab13f0 Restore cursor shape behaviour for Emacs mode (#1610)
• d69ecbe Enable .pgpass support for SSH tunnel connections (#1546)
• 7da5cd2 Adding port so keyring is not overwritten (#1536)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)