Conversation
Snyk has created this PR to upgrade mysql2 from 3.15.3 to 3.16.0. See this package in npm: mysql2 See this project in Snyk: https://app.snyk.io/org/smsdao/project/ffeb0825-db09-4184-b290-ff207397c5a2?utm_source=github&utm_medium=referral&page=upgrade-pr
|
📢 New Pull Request Ready for Review Title: [Snyk] Upgrade mysql2 from 3.15.3 to 3.16.0 Please review when you have a chance! 🚀 |
There was a problem hiding this comment.
Pull request overview
This PR upgrades the mysql2 dependency from version 3.15.3 to 3.16.0, a minor version update that adds a new feature: a state getter for BaseConnection to track connection lifecycle. The upgrade was automatically generated by Snyk and includes no breaking changes.
Key changes:
- Updates mysql2 dependency from 3.15.3 to 3.16.0 in both package.json and package-lock.json
- Includes updated integrity hash and resolved URL for the new version
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| package.json | Updates mysql2 dependency version specification to ^3.16.0 |
| package-lock.json | Updates mysql2 locked version, resolved URL, and integrity hash to 3.16.0 |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "express": "^4.18.2", | ||
| "mongodb": "^6.3.0", | ||
| "mysql2": "^3.6.5", | ||
| "mysql2": "^3.16.0", |
There was a problem hiding this comment.
The version being upgraded from is inconsistent. The package.json shows the old version as "^3.6.5", but according to the PR description and package-lock.json, the current version should be 3.15.3. This suggests the package.json may not have been updated correctly in a previous change, or there's an error in this upgrade. The version should be updated from "^3.15.3" to "^3.16.0".
| "mysql2": "^3.16.0", | |
| "mysql2": "^3.15.3", |
Snyk has created this PR to upgrade mysql2 from 3.15.3 to 3.16.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 2 versions ahead of your current version.
The recommended version was released 23 days ago.
Release notes
Package name: mysql2
-
3.16.0 - 2025-12-16
- BaseConnection: add state getter to track connection lifecycle (#3958) (a394487)
-
3.15.4-canary.a3944878 - 2025-12-16
-
3.15.3 - 2025-10-21
- skip SNI for IP addresses in TLS connection (#3835) (6000eb2)
from mysql2 GitHub release notes3.16.0 (2025-12-16)
Features
3.15.3 (2025-10-21)
Bug Fixes
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: