nest chore(deps-dev): bump mysql2 from 3.9.6 to 3.9.7

chore(deps-dev): bump mysql2 from 3.9.6 to 3.9.7

Open dependabot[bot] opened this issue 1 year ago • 1 comments

trafficstars

Bumps mysql2 from 3.9.6 to 3.9.7.

Release notes

v3.9.7

3.9.7 (2024-04-21)

Bug Fixes

security: sanitize timezone parameter value to prevent code injection - report by zhaoyudi (Nebulalab) (#2608) (7d4b098)

Changelog

Sourced from mysql2's changelog.

3.9.7 (2024-04-21)

Bug Fixes

security: sanitize timezone parameter value to prevent code injection (#2608) (7d4b098)

Commits

2d3cad8 chore(master): release 3.9.7 (#2609)
7d4b098 fix(security): sanitize timezone parameter value to prevent code injection (#...
2efd6ab build(deps): bump lucide-react from 0.371.0 to 0.372.0 in /website (#2606)
e3391ed build(deps): bump lucide-react from 0.368.0 to 0.371.0 in /website (#2604)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)