Skip to content

build(deps-dev): bump mssql from 12.7.1 to 12.7.2 - #1119

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/mssql-12.7.2
Sep 14, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/mssql-12.7.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps mssql from 12.7.1 to 12.7.2.

Release notes

Sourced from mssql's releases.

v12.7.2

12.7.2 (2026-09-10)

Bug Fixes

  • reject column names that break out of quoted identifiers (aeddce6)
  • reject type metadata that escapes the parameter declaration (451a09c)
  • release the connection when a bulk load's options are rejected (fac0867)
  • remove request listeners when a request is abandoned before it is sent (79550ef)
  • stop bulk insert continuing after an invalid table name (df37324)
  • validate bulk ordering keys (53fdf11)
  • validate parameter names against an allowlist (1ea5a28)
  • validate stored procedure names (b305420), closes Request#execute
Commits
  • f1cae83 Merge pull request #1902 from dhensby/ci/skip-merge-commit-lint
  • c19323b ci: skip commit linting for merge commits on push
  • 8497f37 Merge commit from fork
  • c784f02 docs: note that backports are decided case by case
  • 6e4de06 Merge branch '11.x' into master
  • a98dce2 Merge branch '10.x' into 11.x
  • 2b169d0 Merge branch '9.3.x' into 10.x
  • 846076c Merge branch '9.2.x' into 9.3.x
  • 14b7083 Merge branch '9.1.x' into 9.2.x
  • c30d5cf test: cover the output parameter type size guards
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [mssql](https://github.com/tediousjs/node-mssql) from 12.7.1 to 12.7.2.
- [Release notes](https://github.com/tediousjs/node-mssql/releases)
- [Changelog](https://github.com/tediousjs/node-mssql/blob/master/CHANGELOG.txt)
- [Commits](tediousjs/node-mssql@v12.7.1...v12.7.2)

---
updated-dependencies:
- dependency-name: mssql
  dependency-version: 12.7.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 14, 2026
@github-actions
github-actions Bot merged commit 520ad2e into main Sep 14, 2026
17 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/mssql-12.7.2 branch September 14, 2026 13:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants