Closed dependabot[bot] closed 2 months ago
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
Package | New capabilities | Transitives | Size | Publisher |
---|---|---|---|---|
npm/mysql2@3.9.4 | environment, network Transitive: eval | +10 |
1.74 MB | sidorares |
🚮 Removed packages: npm/mysql2@3.9.3
Superseded by #1056.
Bumps mysql2 from 3.9.3 to 3.9.4.
Release notes
Sourced from mysql2's releases.
Changelog
Sourced from mysql2's changelog.
Commits
cf3fa60
chore(master): release 3.9.4 (#2566)4a964a3
fix(security): improve results object creation (#2574)71115d8
ci: improve parser tests (#2573)74abf9e
fix(security): improve supportBigNumbers and bigNumberStrings sanitization (#...8a818ce
fix(docs): improve the contribution guidelines (#2552)0f08c7c
build(deps-dev): bump@docusaurus/tsconfig
in /website (#2563)165c4d6
build(deps-dev): bump@docusaurus/eslint-plugin
in /website (#2564)9b5ed7b
build(deps): bump@docusaurus/preset-classic
in /website (#2562)096db64
build(deps-dev): bump typescript from 5.4.3 to 5.4.4 (#2561)b91fd16
build(deps-dev): bump tsx from 4.7.1 to 4.7.2 in /website (#2557)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show