1.19.0 — password provider

Password provider release: a PostgreSQL pool can now call a function for its password each time it opens a connection, so short-lived credentials such as RDS IAM tokens are created at connect time instead of being refreshed on a timer. Highlights:

Added

• YaraOrm.set_password accepts a callable. The PostgreSQL pool calls it each time it opens a new connection and uses the string it returns, so an expiring credential such as an RDS IAM token is created at connect time instead of being refreshed on a timer. The callable runs on a worker thread, so a slow token fetch does not stall queries on connections already open. A plain string still works as before. Any other type raises TypeError. (#29, thanks @senhadjielrhazi)

Changed

• Dev tooling moves into pyproject.toml dependency groups. ruff and ty are pinned in a lint group (ruff==0.17.0, ty==0.0.86); build and test tools are in a test group; dev includes both. CI and make dev install them with pip install --group …, so a new ty release can no longer fail lint on unrelated pull requests. (#30)
• Build and docs minimums raised to maturin>=1.15.0 and mkdocs-material>=9.7.7.

Full details in CHANGELOG.md.