[Snyk] Upgrade mysql2 from 3.9.7 to 3.16.1

[adilalam]

Snyk has created this PR to upgrade mysql2 from 3.9.7 to 3.16.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 54 versions ahead of your current version.

• The recommended version was released 25 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Prototype Pollution SNYK-JS-MYSQL2-6861580	731	Proof of Concept

Release notes

Package name: mysql2

• 3.16.1 - 2026-01-16
  

  3.16.1 (2026-01-15)

  Bug Fixes

  • named-placeholders: improve handling of mixed/nested quotes in query parsing (#4011) (3e00cd7)
• 3.16.1-canary.3e00cd75 - 2026-01-15
• 3.16.0 - 2025-12-16
  

  3.16.0 (2025-12-16)

  Features

  • BaseConnection: add state getter to track connection lifecycle (#3958) (a394487)
• 3.15.4-canary.a3944878 - 2025-12-16
• 3.15.3 - 2025-10-21
  

  3.15.3 (2025-10-21)

  Bug Fixes

  • skip SNI for IP addresses in TLS connection (#3835) (6000eb2)
• 3.15.3-canary.6000eb2f - 2025-10-14
• 3.15.2 - 2025-10-08
  

  3.15.2 (2025-10-08)

  Bug Fixes

  • fix sha256_password to work correctly over a TLS connection (#3809) (fb9eae1)
• 3.15.2-canary.fb9eae11 - 2025-10-03
• 3.15.1 - 2025-09-24
  

  3.15.1 (2025-09-24)

  Bug Fixes

  • typings: fix missing callback to PoolCluster.end() (#3819) (53a9bc2)
• 3.15.1-canary.53a9bc24 - 2025-09-24
• 3.15.1-canary.288d757b - 2025-09-18
• 3.15.0 - 2025-09-16
  

  3.15.0 (2025-09-16)

  Features

  • gracefully end pool connections #3148 (#3776) (e72247f)
• 3.14.6-canary.e72247f7 - 2025-09-09
• 3.14.5 - 2025-09-08
  

  3.14.5 (2025-09-08)

  Bug Fixes

  • types: restrict StreamOptions.objectMode to true (#3686) (#3784) (c091f1b)
• 3.14.5-canary.c091f1ba - 2025-09-08
• 3.14.4 - 2025-09-01
  

  3.14.4 (2025-09-01)

  Bug Fixes

  • stream: destroy connection when stream errors (#3769) (cc34a83)
  • stream: resume connection when stream errors or is destroyed (#3775) (9642a1e)
  • stream: fix backpressure when using TLS (#1752) (64ea4cd)
• 3.14.4-canary.cc34a833 - 2025-08-27
• 3.14.4-canary.9642a1e5 - 2025-08-27
• 3.14.4-canary.64ea4cdd - 2025-09-01
• 3.14.3 - 2025-07-29
• 3.14.3-canary.ce2ad75a - 2025-07-26
• 3.14.2 - 2025-07-10
• 3.14.2-canary.1ee48cce - 2025-07-10
• 3.14.1 - 2025-04-27
• 3.14.1-canary.9d097f8d - 2025-04-27
• 3.14.1-canary.0617813d - 2025-04-26
• 3.14.0 - 2025-03-20
• 3.13.1-canary.2d5050d5 - 2025-03-11
• 3.13.0 - 2025-03-06
• 3.12.1-canary.fe3a11c4 - 2025-03-05
• 3.12.1-canary.e70160b7 - 2025-03-05
• 3.12.1-canary.be22202e - 2025-03-05
• 3.12.1-canary.a79253d1 - 2025-03-06
• 3.12.1-canary.603c2463 - 2025-02-05
• 3.12.1-canary.51da6534 - 2025-02-05
• 3.12.0 - 2024-12-23
• 3.11.6-canary.9a386018 - 2024-12-04
• 3.11.5 - 2024-11-28
• 3.11.5-canary.d5a76e6c - 2024-11-13
• 3.11.5-canary.cdc9415c - 2024-11-15
• 3.11.5-canary.bded4980 - 2024-11-14
• 3.11.4 - 2024-11-05
• 3.11.4-canary.401db79b - 2024-10-31
• 3.11.3 - 2024-09-15
• 3.11.3-canary.81be01b1 - 2024-09-14
• 3.11.2 - 2024-09-11
• 3.11.1 - 2024-09-10
• 3.11.0 - 2024-07-27
• 3.10.3 - 2024-07-15
• 3.10.2 - 2024-07-01
• 3.10.1 - 2024-06-13
• 3.10.0 - 2024-05-30
• 3.9.9 - 2024-05-29
• 3.9.8 - 2024-05-26
• 3.9.7 - 2024-04-21

from mysql2 GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs