Build: Bump duckdb from 1.4.4 to 1.5.0

[dependabot]

Bumps duckdb from 1.4.4 to 1.5.0.

Release notes

Sourced from duckdb's releases.

DuckDB Python 1.5.0 "Variegata"

This is the 1.5.0 release of DuckDB's Python bindings. For a list of changes in DuckDB core, have a look at the DuckDB release notes and the blogpost.

Breaking Changes

• Dropped Python 3.9 support. The minimum supported version is now Python 3.10.
• Removed deprecated duckdb.typing and duckdb.functional modules. These were deprecated in 1.4.0. Use duckdb.sqltypes and duckdb.func instead.
• Renamed column parameter to expression in relational API functions (e.g., min, max, sum, mean, etc.) to better reflect that these accept expressions, not just column names.
• Deprecated fetch_arrow_table() and fetch_record_batch() on connections and relations. Use the new to_arrow_table() and to_arrow_reader() methods instead.

New Features

• Polars LazyFrame projection and filter pushdown. DuckDB can now push down projections and filters when scanning Polars LazyFrames, including support for cast nodes and unstrict casts.
• Polars Int128 / UInt128 support.
• VARIANT type support — Python conversion, NumPy array wrapping, and type stubs.
• TIME_NS type support — nanosecond-precision time values across Python, NumPy, and Spark type systems.
• Profiling API — new get_profiling_info() and get_profiling_json() methods on connections, plus a refactored query_graph module with improved HTML visualization (dark mode, expandable phases, depth).
• to_arrow_table() and to_arrow_reader() — new methods on connections and relations as the preferred Arrow export API.

Performance

• __arrow_c_stream__ on relations — relations now export via the Arrow PyCapsule interface using PhysicalArrowCollector for zero-copy streaming.
• Unified Arrow stream scanning via __arrow_c_stream__, with filter pushdown only when pyarrow is present.
• Arrow schema caching to avoid repeated lookups during scanning.
• Arrow object type caching to avoid repeated detection.
• Empty params treated as None for .sql() — avoids unnecessary parameter binding overhead.
• Simplified GIL management for FetchRow.

Bug Fixes

• Fixed Python object leak in scalar UDFs — PyObject_CallObject return values are now properly stolen to avoid reference count leaks.
• Fixed reference cycle between connections and relations that could prevent garbage collection.
• Relations now hold a reference to their connection, preventing premature connection closure.
• Fixed fsspec race condition in the Python filesystem implementation.
• Fixed numeric conversion logic — improved handling of large integers (fallback to VARCHAR) and UNION types.
• pyarrow.dataset import is now optional — no longer fails if pyarrow is installed without the dataset module.
• Thrown a reasonable error when an Arrow array stream has already been consumed.

Build & Packaging

• jemalloc enabled on Linux x86_64 only (aligned with DuckDB core), removed as a separately bundled extension.
• MSVC runtime linked statically on Windows — eliminates the VS2019 workaround from duckdb/duckdb#17991.

Commits

• 87e7928 pin release
• a85f289 [duckdb-labs bot] Bump DuckDB submodule (#365)
• e0ebd50 Bump submodule
• 2955da9 [duckdb-labs bot] Bump DuckDB submodule (#360)
• 7ca17e5 Bump submodule
• fb7cee8 Pin submodule to release hash
• 6b092b0 [duckdb-labs bot] Bump DuckDB submodule (#355)
• 3e7a6d3 Bump submodule
• 55013e1 Allow strict casts of literals only in polars lazyframe pushdown (#348)
• b8d19d0 Fix failing tests
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)