Bump sqlparse to 0.6.0 to address CVEs (#2479)