also looking at this
fix(client)!: bind db.raw and db.sql fragment values or refuse them
#1152
16 files
+455
-118
| @@ -107,7 +107,7 @@ async function processOrder(orderData: { | ||
| 107 | 107 | // Reserve inventory for each item |
| 108 | 108 | for (const item of orderData.items) { |
| 109 | 109 | await tx.updateTable('products') |
| 110 | .set({ reserved_stock: db.sql`reserved_stock + ${item.quantity}` }) | |
| 110 | .set({ reserved_stock: db.raw('reserved_stock + ?', [item.quantity]) }) | |
| 111 | 111 | .where({ id: item.productId }) |
| 112 | 112 | .execute() |
| 113 | 113 | |