Fix SQLAlchemy `and` operator misuse causing broken query predicates and cross-tournament access - #1721

Merged

evroon merged 5 commits into

copilot/fix-sqlalchemy-column-expressions

Jul 28, 2026

Commits on Jul 28, 2026

Fix SQLAlchemy and-operator security vulnerability and add cross-tournament regression test

Copilot
authored and
evroon
committed
808ca04
Fix mypy errors: use select_from() instead of chaining join() on Select

Copilot
authored and
evroon
committed
e4673d9
Fix pylint errors: rename shadowed stages variable, wrap long import lines

Copilot
authored and
evroon
committed
b46b0dd
Fix ruff formatting in bracket/routes/util.py
Copilot
authored
3bc663b
Revert round/match JOINs, keep only and→& for team and courts
Copilot
authored
a04bfd7