ReviewOS

also looking at this

stacks/bun-query-builder

chore(deps): update all non-major dependencies

#995
Merged github-actions[bot] wants to merge buddy-bot/update-non-major-updates into main
3 files +10 -76
10 days ago

This PR contains the following updates:

Package Updates Summary

TypeCount
📦 NPM Packages4
Total4

📦 npm Dependencies

npm

4 packages will be updated

PackageChangeAgeAdoptionPassingConfidence
@stacksjs/ts-validation (source)0.4.9 -> 0.4.10ageadoptionpassingconfidence
drizzle-orm (source)0.45.1 -> 0.45.2ageadoptionpassingconfidence
kysely (source)0.28.13 -> 0.28.14ageadoptionpassingconfidence
ts-mocker (source)0.1.5 -> 0.1.7ageadoptionpassingconfidence

Release Notes

stacksjs/ts-validation (@stacksjs/ts-validation)

0.4.9 -> 0.4.10

v0.4.10

Compare Source

Released by github-actions[bot] on 2/27/2026

drizzle-team/drizzle-orm (drizzle-orm)

0.45.1 -> 0.45.2

v1.0.0-beta.20

Compare Source

  • Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability

Thanks to EthanKim88, 0x90sh and wgoodall01 for reaching out to us with a reproduction and suggested fix

Released by AndriiSherman on 3/27/2026

0.45.2

Compare Source

  • Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability

Thanks to EthanKim88, 0x90sh and wgoodall01 for reaching out to us with a reproduction and suggested fix

Released by github-actions[bot] on 3/27/2026

v1.0.0-beta.19

Compare Source

New Features

sqlcommenter support for PostgreSQL and MySQL

You can now add custom tags to the query. These tags will be appended to the end of each query, helping the database add metadata/tags to it. This will be especially useful with PlanetScale’s new Database Traffic Control feature

// raw string support
db.select().from().comment("key='val'");
db.select().from().comment("my_first_tag");

// developer friendly dedicated to tags
db.select().from().comment({ key: 'val' });

Example:

db.select().from(comments).comment({ priority: 'high', category: "analytics" });
select "id", "name" from "comments" /*priority='high',category='analytics'*/

The only limitation is that you can't use comments with a prepared statement:

// can't be used
const p = db.select().from().prepare();
// ❌
p.comment({ key: 'val' }).execute();

Bug fixes

  • [Fixed error message for the defi...

[View full release notes]

Released by AndriiSherman on 3/23/2026

kysely-org/kysely (kysely)

0.28.13 -> 0.28.14

v0.28.14

Compare Source

Hey 👋

A small batch of bug fixes. Please report any issues. 🤞😰🤞

🚀 Features

🐞 Bugfixes

MySQL 🐬

📖 Documentation

  • Add Node SQLite link to dialects documentation by wolfie in kysely-org/kysely#1709 & kysely-org/kysely#1755
  • docs: document immediate value behavior in case() then/else by alexchenai in kysely-org/kysely#1753

📦 CICD & Tooling

⚠️ Breaking Changes

🐤 New Contributors

  • wolfie made their first contribution in `kysely-org/...

[View full release notes]

Released by igalklebanov on 3/20/2026

v0.28.9

Compare Source

Hey 👋

A small batch of bug fixes. Please report any issues. 🤞😰🤞

🚀 Features

🐞 Bugfixes

PostgreSQL 🐘

  • fix: withSchema not applying for delete query using clause. by igalklebanov in kysely-org/kysely#1648
  • fix: withSchema adds schema to for update|share|key share|no key share of tables causing database errors. by igalklebanov in kysely-org/kysely#1659

📖 Documentation

📦 CICD & Tooling

  • publish to jsr. by igalklebanov in kysely-org/kysely#1457
  • chore: bump pnpm, use trustPolicy, exclude safe downgrades, fix browser test, fix bun tests. by igalklebanov in kysely-org/kysely#1641
  • chore(ci): add deno lint with JSR rules. Add verbatimModuleSyntax in tsconfig.json. Apply lint fixes. by igalklebanov in kysely-org/kysely#1642
  • chore: bump dependencies, run prettier. by [igalk...

[View full release notes]

Released by igalklebanov on 12/13/2025

v0.28.8

Compare Source

Hey 👋

A small batch of bug fixes. Please report any issues. 🤞😰🤞

🚀 Features

🐞 Bugfixes

PostgreSQL 🐘

  • fix: filter schemas the current user does not have access to in postres introspector by chanon in kysely-org/kysely#1550
  • fix: insert/update not being wrapped in parens when in CTE of a merge query. by igalklebanov & msifd in kysely-org/kysely#1611

📖 Documentation

  • chore: add SECURITY.md. by igalklebanov in kysely-org/kysely#1590
  • fix: correct JSDoc type references in migration docs by iyoshi-rgb in kysely-org/kysely#1536

📦 CICD & Tooling

  • chore(ci): add dependency provenance check, bump deps to force check. by igalklebanov in kysely-org/kysely#1589
  • chore: bumps dependencies. by igalklebanov in `kysely-org/kys...

[View full release notes]

Released by igalklebanov on 10/9/2025

stacksjs/ts-mocker (ts-mocker)

0.1.5 -> 0.1.7

v0.1.7

Compare Source

No significant changes

    View changes on GitHub

Released by github-actions[bot] on 3/6/2026

v0.1.6

Compare Source

Released by github-actions[bot] on 2/19/2026


📊 Package Statistics

  • @stacksjs/ts-validation: 5,327 weekly downloads
  • drizzle-orm: 6,520,934 weekly downloads
  • kysely: 3,634,782 weekly downloads
  • ts-mocker: 5,460 weekly downloads

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Buddy 🤖

3 changed files on the files tab, with 0 review threads.

Sign in to comment on this pull request.