Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(mariadb): properly escape json path key #11089

Merged
merged 4 commits into from Jun 21, 2019
Merged

Conversation

sushantdhiman
Copy link
Contributor

Pull Request check-list

Please make sure to review and check all of these items:

  • Does npm run test or npm run test-DIALECT pass with this change (including linting)?
  • Does the description below contain a link to an existing issue (Closes #[issue]) or a description of the issue you are solving?
  • Have you added new tests to prevent regressions?
  • Is a documentation update included (if this change modifies existing APIs, or introduces new ones)?
  • Did you follow the commit message conventions explained in CONTRIBUTING.md?

Description of change

Properly escape JSON path keys for mariadb dialect

@codecov
Copy link

codecov bot commented Jun 20, 2019

Codecov Report

Merging #11089 into master will decrease coverage by 2.41%.
The diff coverage is 50%.

Impacted file tree graph

@@            Coverage Diff             @@
##           master   #11089      +/-   ##
==========================================
- Coverage   89.55%   87.14%   -2.42%     
==========================================
  Files          92       92              
  Lines        8913     8913              
==========================================
- Hits         7982     7767     -215     
- Misses        931     1146     +215
Impacted Files Coverage Δ
lib/dialects/abstract/query-generator.js 93.21% <50%> (-0.54%) ⬇️
lib/dialects/mysql/query.js 15.51% <0%> (-82.76%) ⬇️
lib/dialects/mysql/connection-manager.js 29.09% <0%> (-67.28%) ⬇️
lib/dialects/mysql/data-types.js 43.75% <0%> (-54.69%) ⬇️
lib/dialects/mysql/query-generator.js 86.01% <0%> (-11.87%) ⬇️
lib/sequelize.js 92.13% <0%> (-3.15%) ⬇️
lib/dialects/postgres/connection-manager.js 94.36% <0%> (-1.41%) ⬇️
lib/dialects/abstract/query.js 91.44% <0%> (-0.33%) ⬇️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update cd8ee56...55df110. Read the comment docs.

@sushantdhiman sushantdhiman merged commit a72a3f5 into master Jun 21, 2019
@sushantdhiman sushantdhiman deleted the fix-mariadb-path-keys branch June 21, 2019 05:24
@sushantdhiman
Copy link
Contributor Author

🎉 This PR is included in version 5.8.11 🎉

The release is available on:

Your semantic-release bot 📦🚀

@shivasurya
Copy link

@sushantdhiman thank you for the fix and time.

  1. can you please elaborate on the fix and security report. ( i subscribed to snyk for security updates and CVE as this may be helpful for others -> https://snyk.io/vuln/SNYK-JS-SEQUELIZE-450222 , https://snyk.io/vuln/SNYK-JS-SEQUELIZE-450221 )
  2. can we add additional security label and dedicated security release page with alerts in website which will be helpful for getting instant alerts on security release.

Once again thank you for this library and updates 🙏

schmod pushed a commit to schmod/sequelize that referenced this pull request Jul 10, 2019
…ndle-deadlock

* 'master' of github.com:sequelize/sequelize: (22 commits)
  docs(migrations): use timestamps with seed (sequelize#11160)
  test: remove redundant test (sequelize#11156)
  fix(types): add literal to possible where options (sequelize#10990)
  fix(model): don't alter original scopes when combining them (sequelize#10722)
  fix(types): relax order typing (sequelize#10802)
  fix(types): add string to Includeable (sequelize#11003)
  docs(models-definition): correct spelling mistakes (sequelize#11147)
  fix(types): silent option for update (sequelize#11115)
  fix: update sequelize-pool (sequelize#11134)
  feat(hooks): beforeDisconnect / afterDisconnect (sequelize#11117)
  refactor: remove unused _templateSettings
  refactor(query-generation): remove lodash string templates (sequelize#11122)
  docs: improve datatype docs
  docs: explain defaults/where behavior for find/create (sequelize#11069)
  build: remove test*.js from .gitignore (sequelize#11108)
  docs(data-types): extending types
  fix(sequelize.close): update sequelize-pool (sequelize#11101)
  build: update dependencies (sequelize#11099)
  docs(migrations): foreign key example (sequelize#11097)
  fix(mariadb): properly escape json path key (sequelize#11089)
  ...
@jansoltis
Copy link

jansoltis commented Jul 23, 2019

Is there any chance this will be released also as part of Sequelize 4.x?
Thank you for fixing it!

@papb
Copy link
Member

papb commented Jul 23, 2019

@jansoltis - Out of curiosity, may I ask what is preventing you from updating to v5? (just to better understand the problems faced by the user base)

@jansoltis
Copy link

@papb That's a good point. Somehow I thought it is difficult for us to update to v5, but now that I'm looking at the release notes it seems doable (there are still quite some changes though). We were planning to update at some point anyway so perhaps it's the right time. Thank you for asking the right questions!

@sushantdhiman
Copy link
Contributor Author

@jansoltis If you can backport these changes to v4 we can push new release for you

@sushantdhiman
Copy link
Contributor Author

🎉 This PR is included in version 7.0.0-next.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

@papb
Copy link
Member

papb commented Jul 26, 2019

@sushantdhiman Why did semantic-release bot trigger for so many PRs for v7?

@sushantdhiman
Copy link
Contributor Author

Not sure @papb , I will delete that release

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants