This PR contains the following updates:
Package Updates Summary
| Type | Count |
|---|---|
| 📦 NPM Packages | 4 |
| Total | 4 |
📦 npm Dependencies
4 packages will be updated
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| @stacksjs/ts-validation (source) | 0.4.9 -> 0.4.10 | ||||
| drizzle-orm (source) | 0.45.1 -> 0.45.2 | ||||
| kysely (source) | 0.28.13 -> 0.28.14 | ||||
| ts-mocker (source) | 0.1.5 -> 0.1.7 |
Release Notes
stacksjs/ts-validation (@stacksjs/ts-validation)
0.4.9 -> 0.4.10
v0.4.10
Released by github-actions[bot] on 2/27/2026
drizzle-team/drizzle-orm (drizzle-orm)
0.45.1 -> 0.45.2
v1.0.0-beta.20
- Fixed
sql.identifier(),sql.as()escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability
Thanks to EthanKim88, 0x90sh and wgoodall01 for reaching out to us with a reproduction and suggested fix
Released by AndriiSherman on 3/27/2026
0.45.2
- Fixed
sql.identifier(),sql.as()escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability
Thanks to EthanKim88, 0x90sh and wgoodall01 for reaching out to us with a reproduction and suggested fix
Released by github-actions[bot] on 3/27/2026
v1.0.0-beta.19
New Features
sqlcommenter support for PostgreSQL and MySQL
You can now add custom tags to the query. These tags will be appended to the end of each query, helping the database add metadata/tags to it. This will be especially useful with PlanetScale’s new Database Traffic Control feature
// raw string support
db.select().from().comment("key='val'");
db.select().from().comment("my_first_tag");
// developer friendly dedicated to tags
db.select().from().comment({ key: 'val' });Example:
db.select().from(comments).comment({ priority: 'high', category: "analytics" });select "id", "name" from "comments" /*priority='high',category='analytics'*/The only limitation is that you can't use comments with a prepared statement:
// can't be used
const p = db.select().from().prepare();
// ❌
p.comment({ key: 'val' }).execute();Bug fixes
- [Fixed error message for the defi...
[View full release notes]
Released by AndriiSherman on 3/23/2026
kysely-org/kysely (kysely)
0.28.13 -> 0.28.14
v0.28.14
Hey 👋
A small batch of bug fixes. Please report any issues. 🤞😰🤞
🚀 Features
🐞 Bugfixes
MySQL 🐬
- fix: string literals are injectable on MySQL when backslash escapes (
\\') are used. by igalklebanov inkysely-org/kysely#1754& https://github.com/kysely-org/kysely/commit/054e80174c618bc1ff8896e8557631e2be133659
📖 Documentation
- Add Node SQLite link to dialects documentation by wolfie in
kysely-org/kysely#1709&kysely-org/kysely#1755 - docs: document immediate value behavior in case() then/else by alexchenai in
kysely-org/kysely#1753
📦 CICD & Tooling
- bump deno kysely dependency. by igalklebanov in https://github.com/kysely-org/kysely/commit/9e02f3b57a4405a4095efe36c4554d14e0f11427
⚠️ Breaking Changes
🐤 New Contributors
- wolfie made their first contribution in `kysely-org/...
[View full release notes]
Released by igalklebanov on 3/20/2026
v0.28.9
Hey 👋
A small batch of bug fixes. Please report any issues. 🤞😰🤞
🚀 Features
🐞 Bugfixes
PostgreSQL 🐘
- fix: withSchema not applying for delete query using clause. by igalklebanov in
kysely-org/kysely#1648 - fix: withSchema adds schema to for update|share|key share|no key share of tables causing database errors. by igalklebanov in
kysely-org/kysely#1659
📖 Documentation
📦 CICD & Tooling
- publish to jsr. by igalklebanov in
kysely-org/kysely#1457 - chore: bump pnpm, use trustPolicy, exclude safe downgrades, fix browser test, fix bun tests. by igalklebanov in
kysely-org/kysely#1641 - chore(ci): add deno lint with JSR rules. Add verbatimModuleSyntax in tsconfig.json. Apply lint fixes. by igalklebanov in
kysely-org/kysely#1642 - chore: bump dependencies, run prettier. by [igalk...
[View full release notes]
Released by igalklebanov on 12/13/2025
v0.28.8
Hey 👋
A small batch of bug fixes. Please report any issues. 🤞😰🤞
🚀 Features
🐞 Bugfixes
PostgreSQL 🐘
- fix: filter schemas the current user does not have access to in postres introspector by chanon in
kysely-org/kysely#1550 - fix: insert/update not being wrapped in parens when in CTE of a merge query. by igalklebanov & msifd in
kysely-org/kysely#1611
📖 Documentation
- chore: add SECURITY.md. by igalklebanov in
kysely-org/kysely#1590 - fix: correct JSDoc type references in migration docs by iyoshi-rgb in
kysely-org/kysely#1536
📦 CICD & Tooling
- chore(ci): add dependency provenance check, bump deps to force check. by igalklebanov in
kysely-org/kysely#1589 - chore: bumps dependencies. by igalklebanov in `kysely-org/kys...
[View full release notes]
Released by igalklebanov on 10/9/2025
stacksjs/ts-mocker (ts-mocker)
0.1.5 -> 0.1.7
v0.1.7
No significant changes
View changes on GitHub
Released by github-actions[bot] on 3/6/2026
v0.1.6
Released by github-actions[bot] on 2/19/2026
📊 Package Statistics
- @stacksjs/ts-validation: 5,327 weekly downloads
- drizzle-orm: 6,520,934 weekly downloads
- kysely: 3,634,782 weekly downloads
- ts-mocker: 5,460 weekly downloads
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Buddy 🤖