Skip to content

Bump mssql from 12.3.1 to 12.7.4 - #344

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mssql-12.7.4
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mssql-12.7.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

Bumps mssql from 12.3.1 to 12.7.4.

Release notes

Sourced from mssql's releases.

v12.7.4

12.7.4 (2026-10-05)

Bug Fixes

  • reject unconvertible msnodesqlv8 parameter values without leaking the connection (b1a7478)

v12.7.3

12.7.3 (2026-10-05)

Bug Fixes

  • bind msnodesqlv8 procedure parameters in marker order (5545225)
  • pass max lengths to tedious as a number (0bd184f)
  • set output parameter initial values in msnodesqlv8 requests (a05796a)

v12.7.2

12.7.2 (2026-09-10)

Bug Fixes

  • reject column names that break out of quoted identifiers (aeddce6)
  • reject type metadata that escapes the parameter declaration (451a09c)
  • release the connection when a bulk load's options are rejected (fac0867)
  • remove request listeners when a request is abandoned before it is sent (79550ef)
  • stop bulk insert continuing after an invalid table name (df37324)
  • validate bulk ordering keys (53fdf11)
  • validate parameter names against an allowlist (1ea5a28)
  • validate stored procedure names (b305420), closes Request#execute

v12.7.1

12.7.1 (2026-09-08)

Bug Fixes

  • only invoke close() callback once while pool is connecting (9639b47)

v12.7.0

12.7.0 (2026-07-02)

Features

v12.6.0

12.6.0 (2026-06-23)

Features

  • test msnodesqlv8 against v2-v5 across supported Node versions (9ed51d2)

... (truncated)

Commits
  • c7eda23 Merge pull request #1911 from dhensby/fix/msnodesqlv8-parameter-conversion-leak
  • 409055c docs: list EPARAM among the request errors
  • b1a7478 fix: reject unconvertible msnodesqlv8 parameter values without leaking the co...
  • 5b63b4c Merge pull request #1910 from dhensby/test/msnodesqlv8-suite-parity
  • f9b8d17 test: register the tedious-only shared tests in the msnodesqlv8 suite
  • fe41656 test: say what the non-string bulk value test checks
  • dd8d5a1 Merge pull request #1906 from tediousjs/dependabot/npm_and_yarn/brace-expansi...
  • 7182ca5 Merge pull request #1909 from dhensby/fix/msnodesqlv8-execute-param-order
  • b107dec chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.21
  • 5545225 fix: bind msnodesqlv8 procedure parameters in marker order
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/mssql-12.7.4 branch from 81cfb4c to 33b20e0 Compare October 13, 2026 09:23
Bumps [mssql](https://github.com/tediousjs/node-mssql) from 12.3.1 to 12.7.4.
- [Release notes](https://github.com/tediousjs/node-mssql/releases)
- [Changelog](https://github.com/tediousjs/node-mssql/blob/master/CHANGELOG.txt)
- [Commits](tediousjs/node-mssql@v12.3.1...v12.7.4)

---
updated-dependencies:
- dependency-name: mssql
  dependency-version: 12.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/mssql-12.7.4 branch from 33b20e0 to e99b3cc Compare October 14, 2026 17:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants