Chore: Upgrade mysql2 from 3.6.0 to 3.9.4

[derrickmehaffy]

What does it do?

Upgrades the MySQL2 package from 3.6.0 to 3.9.4
Changelog: https://github.com/sidorares/node-mysql2/blob/master/Changelog.md

Why is it needed?

Related to 3 dependabot alerts to a vuln we aren't directly susceptible too however some users may hit it if they use direct queries.
Related PRs for the vuln:

• fix(security): improve sanitization for big numbers support sidorares/node-mysql2#2572
• fix(cache): improve cache key serialization sidorares/node-mysql2#2424

How to test it?

Test against clients accepting the mysql2 package (MySQL 8+ and MariaDB 10.5+

Related issue(s)/PR(s)

N/A

[derrickmehaffy]

Related to/fixes:

• https://github.com/strapi/strapi/security/dependabot/263
• https://github.com/strapi/strapi/security/dependabot/260
• https://github.com/strapi/strapi/security/dependabot/257
• https://github.com/strapi/strapi/security/dependabot/262
• https://github.com/strapi/strapi/security/dependabot/261
• https://github.com/strapi/strapi/security/dependabot/259
• https://github.com/strapi/strapi/security/dependabot/258
• https://github.com/strapi/strapi/security/dependabot/256
• https://github.com/strapi/strapi/security/dependabot/255

[github-actions]

Size Change: 0 B

Total Size: 1.31 MB

ℹ️ View Unchanged

Filename	Size
examples/getstarted/build/bb4d0d527bdfb161bc5a.svg	2.33 kB
examples/getstarted/build/index.html	608 B
examples/getstarted/build/main.********.js	1.3 MB
examples/getstarted/build/runtime~main.********.js	4.22 kB

_{compressed-size-action}

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
contributor-docs	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Apr 15, 2024 9:26pm

[innerdvations]

LGTM!

Just an additional note, it's not even that we're not susceptible, it's that we don't even use any version of mysql2 directly from Strapi, it comes from the user controllable version set in their project. The only reason it's in yarn.lock is because it's in the example projects.