Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github May 6, 2022

Bumps @mysql/xdevapi from 8.0.20 to 8.0.29.

Changelog

Sourced from @​mysql/xdevapi's changelog.

v8.0.29

  • Constraints for TLS connection options were relaxed
  • Certificate authority validation can now be explicitly enabled with a connection string via the "VERIFY_CA" TLS mode
  • Default server identity verification can now be enabled with a connection string via the "VERIFY_IDENTITY" TLS mode
  • A custom server identity verification function can be provided via the "tls.checkServerIdentity" configuration option
  • Allow index of DATETIME or similar column data types for document fields created from JavaScript Date instances
  • Prevent closed connection pool to create extraneous connections for queued requests
  • Cleanup global and private references in the API docs
  • Remove extraneous 3rd-party dependency
  • Update google-protobuf to v3.19.4

v8.0.28

  • TLSv1 and TLSv1.1 are not supported anymore
  • The Certificate Authority (CA) chain can now be specified using a list of PEM files
  • Certificate Revocation Lists (CRLs) can now be defined using multiple PEM files, one for each CA
  • Server certificates revoked by non-root CAs can now be properly validated

v8.0.27

  • Test suite as been re-structured and missing relevant tests have been added
  • Error and warning management logic has been centralized and improved
  • Attempts to acquire connections in parallel are how properly handled by a connection pool
  • Standalone connections can now be properly managed via the "Client" interface

v8.0.26

  • Internal connection management architecture has been re-structured and improved
  • Deprecation warnings are now reported when the connection uses TLSv1 or TLSv1.1
  • Pool connections that become unresponsive are now being released and can be re-used
  • Network sockets are now properly closed when the client does not connect to the server due to a timeout
  • Column metadata callbacks are now executed only once for each result set
  • SQL statement instances created with "Session.sql()" can now be re-used with different placeholder arguments
  • "Collection.replaceOne()" now fails with a non-matching replacement document "_id" property
  • "Collection.addOrReplaceOne()" now fails with a non-matching replacement document "_id" property
  • Expecations about column metadata in functional tests have been relaxed to avoid ongoing server changes
  • Log collection script used for functional tests has been improved to avoid test flakiness
  • Deprecated "Buffer()" constructor has been replaced with "Buffer.alloc()", "Buffer.allocUnsafe()" and "Buffer.from()"
  • Upstream floating point values provided as JavaScript numbers or X DevAPI expression literals are now correctly rounded

v8.0.25

This release contains no functional changes and is published to align the version number with the MySQL Server 8.0.25 release.

... (truncated)

Commits
  • 6dde01d 8.0.29
  • 8a07844 WL#15079: update Google protobuf to version 3.19.4
  • d47716a deps: remove timekeeper
  • 7dc066a docs: remove extraneous private API docs
  • 96d664f docs: move scoped constants away from globals
  • b7a3bcb docs: remove extraneous global definitions
  • 175293d BUG#33761268: skip connection requests on unavailable pool
  • 9b738dd BUG#33740190: indexes for upstream document Date instances
  • 9c36556 WL#14837: consistent TLS connection options
  • 232e452 8.0.28
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@mysql/xdevapi](https://github.com/mysql/mysql-connector-nodejs) from 8.0.20 to 8.0.29.
- [Release notes](https://github.com/mysql/mysql-connector-nodejs/releases)
- [Changelog](https://github.com/mysql/mysql-connector-nodejs/blob/trunk/CHANGES.txt)
- [Commits](mysql/mysql-connector-nodejs@8.0.20...8.0.29)

---
updated-dependencies:
- dependency-name: "@mysql/xdevapi"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 6, 2022
@RustyNova016 RustyNova016 merged commit 2adfc4b into master May 6, 2022
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/mysql/xdevapi-8.0.29 branch May 6, 2022 12:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants