Skip to content

chore: Bump mysql2 and @mikro-orm/mysql - #32

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-f95cddc9fe
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-f95cddc9fe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown

Bumps mysql2 to 3.24.2 and updates ancestor dependency @mikro-orm/mysql. These dependencies need to be updated together.

Updates mysql2 from 3.20.0 to 3.24.2

Release notes

Sourced from mysql2's releases.

v3.24.2

3.24.2 (2026-08-24)

Bug Fixes

  • correct length-coded number size for the 3-byte range (#4500) (de56272)
  • promise: honour trace: false on every promise-API method (#4502) (1dcd8ef), closes #4501

v3.24.1

3.24.1 (2026-08-24)

Performance Improvements

  • single-pass utf8 string encoding for outgoing packets (#4495) (183e947)

v3.24.0

3.24.0 (2026-08-23)

Features

  • typed parameters, and adopt integer types the server reports (#4488) (8ec20f1)

Bug Fixes

  • zero dates come back as "undefined 00:00:00" with dateStrings (#4491) (5bf7bda)

Performance Improvements

  • remove per-query and per-row allocation hotspots (#4486) (c86fe5a)
  • serialize COM_STMT_EXECUTE in a single exact-size pass (#4494) (f3a60bc)

v3.23.4

3.23.4 (2026-08-19)

Bug Fixes

  • keep leading zeros in TIME fractional seconds (#4481) (3cccf4a)
  • typings: align callback Pool and PoolConnection types with runtime (#4478) (8b1f829)

v3.23.3

3.23.3 (2026-08-10)

Bug Fixes

... (truncated)

Changelog

Sourced from mysql2's changelog.

3.24.2 (2026-08-24)

Bug Fixes

  • correct length-coded number size for the 3-byte range (#4500) (de56272)
  • promise: honour trace: false on every promise-API method (#4502) (1dcd8ef), closes #4501

3.24.1 (2026-08-24)

Performance Improvements

  • single-pass utf8 string encoding for outgoing packets (#4495) (183e947)

3.24.0 (2026-08-23)

Features

  • typed parameters, and adopt integer types the server reports (#4488) (8ec20f1)

Bug Fixes

  • zero dates come back as "undefined 00:00:00" with dateStrings (#4491) (5bf7bda)

Performance Improvements

  • remove per-query and per-row allocation hotspots (#4486) (c86fe5a)
  • serialize COM_STMT_EXECUTE in a single exact-size pass (#4494) (f3a60bc)

3.23.4 (2026-08-19)

Bug Fixes

  • keep leading zeros in TIME fractional seconds (#4481) (3cccf4a)
  • typings: align callback Pool and PoolConnection types with runtime (#4478) (8b1f829)

3.23.3 (2026-08-10)

Bug Fixes

  • honor query-level namedPlaceholders as false (#4460) (20f732b)
  • keep connectTimeout active until the handshake completes (#4458) (508a731)
  • pool: give each pooled connection its own config copy (#4473) (361d232)
  • pool: propagate query dispatch errors instead of throwing (#4459) (7ce6943)

... (truncated)

Commits
  • 649e129 chore(master): release 3.24.2 (#4504)
  • 87579e1 test: cover length-coded parameter sizes at the 0xFD boundary (#4503)
  • 1dcd8ef fix(promise): honour trace: false on every promise-API method (#4502)
  • de56272 fix: correct length-coded number size for the 3-byte range (#4500)
  • ca10232 chore(master): release 3.24.1 (#4496)
  • 183e947 perf: single-pass utf8 string encoding for outgoing packets (#4495)
  • fabc3bc chore(master): release 3.24.0 (#4492)
  • f3a60bc perf: serialize COM_STMT_EXECUTE in a single exact-size pass (#4494)
  • 493f9ec ci: pin EXPLAIN to FORMAT=TRADITIONAL for MySQL 9.5+ (#4493)
  • c86fe5a perf: remove per-query and per-row allocation hotspots (#4486)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mysql2 since your current version.


Updates @mikro-orm/mysql from 6.6.14 to 7.1.14

Release notes

Sourced from @​mikro-orm/mysql's releases.

v7.1.14

7.1.14 (2026-08-26)

Bug Fixes

  • core: don't double-wrap orderBy in M:N dataloader batch load (#8194) (20aa5a8), closes #8193
  • core: don't require the discriminator value when creating an STI entity (#8201) (2b0ca9b), closes #7677 #8200
  • core: evict referrers holding a removed entity in their primary key (#8205) (16d80a9), closes #8203
  • core: infer primary key from plain class base in defineEntity (#8207) (7762f42)
  • core: respect explicit join alias in JSON property conditions (#8195) (16a147c), closes #8192
  • postgres: strip array-typed casts cleanly when recovering check constraints (#8198) (2b3d9c3), closes #8197
  • sql: keep row-value tuples in $in on a raw() key (#8202) (7c2e382)
  • sql: skip trigger diff when only one side uses expression (#8191) (e486d39), closes #8190

v7.1.13

7.1.13 (2026-08-20)

Bug Fixes

  • core: accept plain arrays for enum array properties in EntityData (#8167) (3812a88), closes #8166
  • core: derive FK field names from targetKey instead of composite PKs (#8172) (92a826b)
  • core: don't overwrite existing rows with onCreate generated values in upsert (#8186) (4052f58), closes #7399
  • core: keep $or conditions intact when populating to-many relations (#8181) (026bd8b), closes #8176 #8180
  • core: keep $or conditions intact when populating to-one relations (#8176) (3776fe5), closes #1882 #6658 #8175
  • core: respect connectionType option in em.countBy() (#8188) (9e8e3bd), closes #8187
  • core: skip enum check constraints for json/jsonb columns (#8184) (018e522), closes #8183
  • decorators: don't mutate base class metadata in TC39 decorators (#8177) (b4e72bd), closes #8178
  • query-builder: keep filter $or intact when it spans joined to-one relations (#8182) (3baa862), closes #8176 #8176 #8179
  • sql: convert custom type values in kysely where clauses (#8189) (f81cef2)

Features

  • core: inherit collation from referenced PK on FK columns (#8171) (126675c), closes #8170

v7.1.12

7.1.12 (2026-08-17)

Bug Fixes

  • core: do not mutate caller-provided options in merge, create, getReference and fork (#8150) (8f3ea3f), closes #8144 #8143
  • core: do not mutate the options object provided by the caller (#8144) (bc60f44), closes #8143
  • core: use own-property checks in populate hints, canPopulate, and filter options (#8164) (fdf9f50)
  • postgres: emit and diff the index access method (#8126) (94d57e8), closes #8124
  • postgres: flatten dollar-quoted bodies in raw trigger and routine DDL (#8142) (5835d84), closes #8063 #8062 #8140
  • postgres: keep parens balanced when stripping casts from introspected checks (#8125) (93bf909), closes #8123
  • query-builder: allow alias-prefixed keys in nested $and/$or groups (#8147) (ac7cc91), closes #8145
  • schema: create foreign keys of new tables after altering existing ones (#8151) (96ec0fa), closes #8141
  • sql: compare quoted decimal defaults numerically (#8132) (2776140), closes #8131
  • sql: resolve TPT parent alias in JSON property conditions (#8163) (fec54ef), closes #8162
  • sql: support joining a table or CTE by name via sql.ref() (#8161) (45d67be), closes #8157

... (truncated)

Changelog

Sourced from @​mikro-orm/mysql's changelog.

7.1.14 (2026-08-26)

Bug Fixes

  • core: don't double-wrap orderBy in M:N dataloader batch load (#8194) (20aa5a8), closes #8193
  • core: don't require the discriminator value when creating an STI entity (#8201) (2b0ca9b), closes #7677 #8200
  • core: evict referrers holding a removed entity in their primary key (#8205) (16d80a9), closes #8203
  • core: infer primary key from plain class base in defineEntity (#8207) (7762f42)
  • core: respect explicit join alias in JSON property conditions (#8195) (16a147c), closes #8192
  • postgres: strip array-typed casts cleanly when recovering check constraints (#8198) (2b3d9c3), closes #8197
  • sql: keep row-value tuples in $in on a raw() key (#8202) (7c2e382)
  • sql: skip trigger diff when only one side uses expression (#8191) (e486d39), closes #8190

7.1.13 (2026-08-20)

Bug Fixes

  • core: accept plain arrays for enum array properties in EntityData (#8167) (3812a88), closes #8166
  • core: derive FK field names from targetKey instead of composite PKs (#8172) (92a826b)
  • core: don't overwrite existing rows with onCreate generated values in upsert (#8186) (4052f58), closes #7399
  • core: keep $or conditions intact when populating to-many relations (#8181) (026bd8b), closes #8176 #8180
  • core: keep $or conditions intact when populating to-one relations (#8176) (3776fe5), closes #1882 #6658 #8175
  • core: respect connectionType option in em.countBy() (#8188) (9e8e3bd), closes #8187
  • core: skip enum check constraints for json/jsonb columns (#8184) (018e522), closes #8183
  • decorators: don't mutate base class metadata in TC39 decorators (#8177) (b4e72bd), closes #8178
  • query-builder: keep filter $or intact when it spans joined to-one relations (#8182) (3baa862), closes #8176 #8176 #8179
  • sql: convert custom type values in kysely where clauses (#8189) (f81cef2)

Features

  • core: inherit collation from referenced PK on FK columns (#8171) (126675c), closes #8170

7.1.12 (2026-08-17)

Bug Fixes

  • core: do not mutate caller-provided options in merge, create, getReference and fork (#8150) (8f3ea3f), closes #8144 #8143
  • core: do not mutate the options object provided by the caller (#8144) (bc60f44), closes #8143
  • core: use own-property checks in populate hints, canPopulate, and filter options (#8164) (fdf9f50)
  • postgres: emit and diff the index access method (#8126) (94d57e8), closes #8124
  • postgres: flatten dollar-quoted bodies in raw trigger and routine DDL (#8142) (5835d84), closes #8063 #8062 #8140
  • postgres: keep parens balanced when stripping casts from introspected checks (#8125) (93bf909), closes #8123
  • query-builder: allow alias-prefixed keys in nested $and/$or groups (#8147) (ac7cc91), closes #8145
  • schema: create foreign keys of new tables after altering existing ones (#8151) (96ec0fa), closes #8141
  • sql: compare quoted decimal defaults numerically (#8132) (2776140), closes #8131
  • sql: resolve TPT parent alias in JSON property conditions (#8163) (fec54ef), closes #8162
  • sql: support joining a table or CTE by name via sql.ref() (#8161) (45d67be), closes #8157

... (truncated)

Commits
  • cd79b2c chore(release): v7.1.14 [skip ci]
  • 7c2e382 fix(sql): keep row-value tuples in $in on a raw() key (#8202)
  • 7762f42 fix(core): infer primary key from plain class base in defineEntity (#8207)
  • fd5ceb2 test: increase timeout of the oracle schema updating test (#8206)
  • 2b0ca9b fix(core): don't require the discriminator value when creating an STI entity ...
  • 16d80a9 fix(core): evict referrers holding a removed entity in their primary key (#8205)
  • b3773ab docs: explain entity definition options in the NestJS guide (#8204)
  • 7a2cfa2 chore(deps): update patch/minor dependencies
  • 2f4d739 chore(deps): update patch/minor dependencies
  • 2b3d9c3 fix(postgres): strip array-typed casts cleanly when recovering check constrai...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [mysql2](https://github.com/sidorares/node-mysql2) to 3.24.2 and updates ancestor dependency [@mikro-orm/mysql](https://github.com/mikro-orm/mikro-orm). These dependencies need to be updated together.


Updates `mysql2` from 3.20.0 to 3.24.2
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v3.20.0...v3.24.2)

Updates `@mikro-orm/mysql` from 6.6.14 to 7.1.14
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/master/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v6.6.14...v7.1.14)

---
updated-dependencies:
- dependency-name: mysql2
  dependency-version: 3.24.2
  dependency-type: indirect
- dependency-name: "@mikro-orm/mysql"
  dependency-version: 7.1.14
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI lite review requested due to automatic review settings September 2, 2026 02:46
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 2, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The update introduces an incompatible major-version mix (MikroORM v7 MySQL driver with MikroORM core v6) and a Node >=22.17.0 requirement that is not aligned with the currently locked/core dependency versions.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

This PR updates the MySQL driver stack by bumping mysql2 and moving @mikro-orm/mysql to the v7.1.14 line, reflecting a major-version upgrade of MikroORM’s MySQL integration within the workspace.

Changes:

  • Bump mysql2 from 3.20.03.24.2 (via package-lock.json).
  • Bump @mikro-orm/mysql from 6.6.x7.1.14 in workspace manifests and lockfile.
  • Introduce new transitive deps from MikroORM v7 (e.g., kysely) and updated Node engine constraints in the lockfile.
File summaries
File Description
package-lock.json Updates resolved/pinned versions for @mikro-orm/mysql, mysql2, and new transitive deps/engine constraints.
dev/package.json Bumps @mikro-orm/mysql dependency to ^7.1.14.
core/package.json Bumps @mikro-orm/mysql peer dependency to ^7.1.14.
Review details
  • Files reviewed: 2/3 changed files
  • Comments generated: 2
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread core/package.json
Comment on lines 81 to 85
"@mikro-orm/mariadb": "^6.6.6",
"@mikro-orm/mssql": "^6.6.6",
"@mikro-orm/mysql": "^6.6.6",
"@mikro-orm/mysql": "^7.1.14",
"@mikro-orm/postgresql": "^6.6.6",
"@mikro-orm/sqlite": "^6.6.6"
Comment thread dev/package.json
Comment on lines 59 to 63
"@mikro-orm/mariadb": "^6.6.6",
"@mikro-orm/mssql": "^6.6.6",
"@mikro-orm/mysql": "^6.6.6",
"@mikro-orm/mysql": "^7.1.14",
"@mikro-orm/postgresql": "^6.6.6",
"@mikro-orm/sqlite": "^6.6.6",
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant