Skip to content

Comments

Bump mysql2 from 3.14.5 to 3.17.1#290

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/mysql2-3.17.1
Closed

Bump mysql2 from 3.14.5 to 3.17.1#290
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/mysql2-3.17.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 16, 2026

Bumps mysql2 from 3.14.5 to 3.17.1.

Release notes

Sourced from mysql2's releases.

v3.17.1

3.17.1 (2026-02-13)

Bug Fixes

  • expand object params after ON DUPLICATE KEY UPDATE preceded by SET (#4076) (4d2b930)

v3.17.0

3.17.0 (2026-02-10)

Bug Fixes

  • security: resolve a potential SQL injection bypass through objects (#4054) (7f133cc)

v3.16.3

3.16.3 (2026-02-03)

Bug Fixes

  • constants: remove unsupported CLIENT_DEPRECATE_EOF flag from constants (#4033) (46c3f60)

v3.16.2

3.16.2 (2026-01-26)

Bug Fixes

  • types: add missing ConnectionState type to Promise Connection interface (#4034) (2927949)

v3.16.1

3.16.1 (2026-01-15)

Bug Fixes

  • named-placeholders: improve handling of mixed/nested quotes in query parsing (#4011) (3e00cd7)

v3.16.0

3.16.0 (2025-12-16)

Features

  • BaseConnection: add state getter to track connection lifecycle (#3958) (a394487)

v3.15.3

3.15.3 (2025-10-21)

... (truncated)

Changelog

Sourced from mysql2's changelog.

3.17.1 (2026-02-13)

Bug Fixes

  • expand object params after ON DUPLICATE KEY UPDATE preceded by SET (#4076) (4d2b930)

3.17.0 (2026-02-10)

Bug Fixes

  • security: resolve a potential SQL injection bypass through objects (#4054) (7f133cc)

3.16.3 (2026-02-03)

Bug Fixes

  • constants: remove unsupported CLIENT_DEPRECATE_EOF flag from constants (#4033) (46c3f60)

3.16.2 (2026-01-26)

Bug Fixes

  • types: add missing ConnectionState type to Promise Connection interface (#4034) (2927949)

3.16.1 (2026-01-15)

Bug Fixes

  • named-placeholders: improve handling of mixed/nested quotes in query parsing (#4011) (3e00cd7)

3.16.0 (2025-12-16)

Features

  • BaseConnection: add state getter to track connection lifecycle (#3958) (a394487)

3.15.3 (2025-10-21)

Bug Fixes

  • skip SNI for IP addresses in TLS connection (#3835) (6000eb2)

3.15.2 (2025-10-08)

... (truncated)

Commits
  • 8006c0e chore(master): release 3.17.1 (#4077)
  • 4d2b930 fix: expand object params after ON DUPLICATE KEY UPDATE preceded by SET (...
  • b0f8a77 build(deps-dev): bump @​types/node from 25.2.2 to 25.2.3 in /website (#4072)
  • 3e22a08 build(deps-dev): bump @​types/node from 25.2.2 to 25.2.3 (#4071)
  • f36ecb9 chore(master): release 3.17.0 (#4070)
  • a140424 chore: release 3.17.0
  • 5635710 chore(master): release 3.16.4 (#4068)
  • f636891 build(deps): bump @​easyops-cn/docusaurus-search-local in /website (#4067)
  • cb9965d build(deps-dev): bump @​typescript-eslint/eslint-plugin (#4065)
  • 7f133cc fix(security): resolve a potential SQL injection bypass through objects (#4054)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [mysql2](https://github.com/sidorares/node-mysql2) from 3.14.5 to 3.17.1.
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v3.14.5...v3.17.1)

---
updated-dependencies:
- dependency-name: mysql2
  dependency-version: 3.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 16, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 23, 2026

Superseded by #292.

@dependabot dependabot bot closed this Feb 23, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/mysql2-3.17.1 branch February 23, 2026 09:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants