Bump mysql2 from 3.7.0 to 3.9.4

[dependabot[bot]]

Bumps mysql2 from 3.7.0 to 3.9.4.

Release notes

Sourced from mysql2's releases.

v3.9.4

3.9.4 (2024-04-09)

Bug Fixes

• SSL: separate each certificate into an individual item #2542 (63f1055)
• security: improve supportBigNumbers and bigNumberStrings sanitization (#2572) (74abf9e)
  • Fixes a potential RCE attack vulnerability reported by Vsevolod Kokorin (Slonser) of Solidlab
• security: improve results object creation (#2574) (4a964a3)
  • Fixes a potential Prototype Pollution attack vulnerability reported by Vsevolod Kokorin (Slonser) of Solidlab
• docs: improve the contribution guidelines (#2552) (8a818ce)

v3.9.3

3.9.3 (2024-03-26)

Bug Fixes

• security: improve cache key formation (#2424) (0d54b0c)
  • Fixes a potential parser cache poisoning attack vulnerability reported by Vsevolod Kokorin (Slonser) of Solidlab
• update Amazon RDS SSL CA cert (#2131) (d9dccfd)

v3.9.2

3.9.2 (2024-02-26)

Bug Fixes

• stream: premature close when it is paused (#2416) (7c6bc64)
• types: expose TypeCast types (#2425) (336a7f1)

v3.9.1

3.9.1 (2024-01-29)

Bug Fixes

• types: support encoding for string type cast (#2407) (1dc2011)

v3.9.0

3.9.0 (2024-01-26)

Features

• introduce typeCast for execute method (#2398) (baaa92a)

v3.8.0

3.8.0 (2024-01-23)

... (truncated)

Changelog

Sourced from mysql2's changelog.

3.9.4 (2024-04-09)

Bug Fixes

• docs: improve the contribution guidelines (#2552) (8a818ce)
• security: improve results object creation (#2574) (4a964a3)
• security: improve supportBigNumbers and bigNumberStrings sanitization (#2572) (74abf9e)

3.9.3 (2024-03-26)

Bug Fixes

• security: improve cache key formation (#2424) (0d54b0c)
  • Fixes a potential parser cache poisoning attack vulnerability reported by Vsevolod Kokorin (Slonser) of Solidlab
• update Amazon RDS SSL CA cert (#2131) (d9dccfd)

3.9.2 (2024-02-26)

Bug Fixes

• stream: premature close when it is paused (#2416) (7c6bc64)
• types: expose TypeCast types (#2425) (336a7f1)

3.9.1 (2024-01-29)

Bug Fixes

• types: support encoding for string type cast (#2407) (1dc2011)

3.9.0 (2024-01-26)

Features

• introduce typeCast for execute method (#2398) (baaa92a)

3.8.0 (2024-01-23)

Features

• perf: cache iconv decoder (#2391) (b95b3db)

Bug Fixes

... (truncated)

Commits

• cf3fa60 chore(master): release 3.9.4 (#2566)
• 4a964a3 fix(security): improve results object creation (#2574)
• 71115d8 ci: improve parser tests (#2573)
• 74abf9e fix(security): improve supportBigNumbers and bigNumberStrings sanitization (#...
• 8a818ce fix(docs): improve the contribution guidelines (#2552)
• 0f08c7c build(deps-dev): bump @​docusaurus/tsconfig in /website (#2563)
• 165c4d6 build(deps-dev): bump @​docusaurus/eslint-plugin in /website (#2564)
• 9b5ed7b build(deps): bump @​docusaurus/preset-classic in /website (#2562)
• 096db64 build(deps-dev): bump typescript from 5.4.3 to 5.4.4 (#2561)
• b91fd16 build(deps-dev): bump tsx from 4.7.1 to 4.7.2 in /website (#2557)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #598.