Open
Conversation
1792878 to
8564724
Compare
8564724 to
14f4eec
Compare
14f4eec to
14caa56
Compare
14caa56 to
b4dd346
Compare
b4dd346 to
696f79d
Compare
696f79d to
55a165c
Compare
55a165c to
1ae50bb
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.15.2→2.4.0GitHub Vulnerability Alerts
CVE-2019-10757
knex.js versions before 0.19.5 are vulnerable to SQL Injection attack. Identifiers are escaped incorrectly as part of the MSSQL dialect, allowing attackers to craft a malicious query to the host DB.
CVE-2016-20018
Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query. This vulnerability has been fixed in version 2.4.0.
Release Notes
knex/knex (knex)
v2.4.0Compare Source
New features:
Bug fixes
Typings:
v2.3.0Compare Source
New features:
Typings:
v2.2.0Compare Source
New features:
Bug fixes:
Typings:
v2.1.0Compare Source
New features:
Bug fixes:
Typings:
v2.0.0Compare Source
Breaking changes
Test / internal changes:
v1.0.7Compare Source
Bug fixes:
v1.0.6Compare Source
Bug fixes:
v1.0.5Compare Source
New features:
Bug fixes:
Typings:
Knexmatch the generic parameter types ofknex#5021v1.0.4Compare Source
New features:
Bug fixes:
Typings:
Documentation:
v1.0.3Compare Source
Bug fixes:
Typings:
Improvements:
Documentation:
v1.0.2Compare Source
New features:
Bug fixes:
Typings:
v1.0.1Compare Source
Bug fixes:
v1.0.0Compare Source
Breaking changes
sqlite3driver with@vscode/sqlite3;RETURNINGoperation to be consistent withSELECT;New features:
Bug fixes:
Typings:
v0.95.15Compare Source
Bug fixes:
v0.95.14Compare Source
Bug fixes:
v0.95.13Compare Source
Bug fixes:
Typings:
v0.95.12Compare Source
New features:
Bug fixes:
Typings:
v0.95.11Compare Source
New features:
Bug fixes:
Improvements:
v0.95.10Compare Source
Improvements:
Typings:
v0.95.9Compare Source
New features:
Typings:
v0.95.8Compare Source
New features:
Bug fixes:
Typings:
v0.95.7Compare Source
New features:
Typings:
v0.95.6Compare Source
Typings:
v0.95.5Compare Source
New features:
Bug fixes:
Typings:
v0.95.4Compare Source
Typings:
v0.95.3Compare Source
New features:
Bug fixes:
Typings:
v0.95.2Compare Source
New features:
Bug fixes:
Typings:
Test / internal changes:
v0.95.1Compare Source
Bug fixes:
v0.95.0Compare Source
Note: there are many breaking changes in this version, particularly in TypeScript support. Please see
UPGRADING.mdfor details.New features:
Bug fixes:
typewas set to'module'inpackage.json#4295Typings:
Test / internal changes:
v0.21.21Compare Source
v0.21.20Compare Source
v0.21.19Compare Source
v0.21.18Compare Source
v0.21.17Compare Source
Bug fixes:
New features:
v0.21.16Compare Source
Bug fixes:
v0.21.15Compare Source
New features:
Typings:
Test / internal changes:
v0.21.14Compare Source
New features:
Bug fixes:
Test / internal changes:
v0.21.13Compare Source
New features:
dropForeign#4092Bug fixes:
Typings:
Test / internal changes:
v0.21.12Compare Source
Typings:
v0.21.11Compare Source
Typings:
v0.21.10Compare Source
New features:
Bug fixes:
Typings:
v0.21.9Compare Source
New features:
Bug fixes:
v0.21.8Compare Source
Bug fixes:
v0.21.7Compare Source
New features:
Bug fixes:
Typings:
Test / internal changes:
v0.21.6Compare Source
New features:
Bug fixes:
Typings:
v0.21.5Compare Source
New features:
Test / internal changes:
v0.21.4Compare Source
New features:
Bug fixes:
v0.21.3Compare Source
New features:
Bug fixes:
Typings:
nullas valid binding type #3946Test / internal changes:
v0.21.2Compare Source
New features:
voidas return type on migration generator ts stub #3865Typings:
Test / internal changes:
v0.21.1Compare Source
v0.21.0Compare Source
Improvements
Breaking changes
pg-query-stream:Changed stream.close to stream.destroy which is the official way to terminate a readable stream. This is a breaking change if you rely on the stream.close method on pg-query-stream...though should be just a find/replace type operation to upgrade as the semantics remain very similar (not exactly the same, since internals are rewritten, but more in line with how streams are "supposed" to behave).Test / internal changes:
v0.20.15Compare Source
Bug fixes:
.finally(..)on knex's Promise-alikes #3800Typings:
.distinctOn#3784v0.20.14Compare Source
New features:
Typings:
interface Knexandfunction Knexshould have the same types #3787Test / internal changes:
v0.20.13Compare Source
Bug fixes:
Typings:
v0.20.12Compare Source
Bug fixes:
Typings:
Test / internal changes:
v0.20.11Compare Source
Breaking changes:
map,spreadandreduceon QueryBuilder instance.New features:
Bug fixes:
Typings:
Test / internal changes:
v0.20.10Compare Source
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.