Skip to content

Bump drizzle-orm from 1.0.0-rc.2 to 1.0.0-rc.3#994

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/drizzle-orm-1.0.0-rc.3
Open

Bump drizzle-orm from 1.0.0-rc.2 to 1.0.0-rc.3#994
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/drizzle-orm-1.0.0-rc.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 20, 2026

Bumps drizzle-orm from 1.0.0-rc.2 to 1.0.0-rc.3.

Release notes

Sourced from drizzle-orm's releases.

v1.0.0-rc.3

Porting all the changes that were made in PostgreSQL to other dialects. This release is about MySQL:

  • Removed RQBv1 from mysql dialect (._query)
  • Internal MySQL sessions refactoring and moving to a unified query preparation function
  • Fallback to regular queries on iterators for drivers that don't support streaming instead of throwing an error for compatibility
  • Enabled optimized non-jit mappers for regular queries for MySQL dialect
  • Switched RQBv2 to array mode querying, disabled root query level JSON conversions
  • Fixed MySQL proxy driver not using lastInsertId, affectedRows from dedicated response fields

Next releases will include:

  • Effect MySQL support
  • SQLite rework (same as this release for MySQL)
  • SQLite Effect Support
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) from 1.0.0-rc.2 to 1.0.0-rc.3.
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@v1.0.0-rc.2...v1.0.0-rc.3)

---
updated-dependencies:
- dependency-name: drizzle-orm
  dependency-version: 1.0.0-rc.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 20, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented May 20, 2026

🦋 Changeset detected

Latest commit: 4b7a532

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@github-actions
Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 4 package(s) with unknown licenses.
See the Details below.

License Issues

package-lock.json

PackageVersionLicenseIssue Type
packages/ai-tools2.0.11NullUnknown License
packages/helpers5.0.1NullUnknown License
packages/types4.2.28NullUnknown License

packages/helpers/package.json

PackageVersionLicenseIssue Type
drizzle-orm^1.0.0-rc.3NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
npm/drizzle-orm 1.0.0-rc.3 UnknownUnknown
npm/packages/ai-tools 2.0.11 UnknownUnknown
npm/packages/helpers 5.0.1 UnknownUnknown
npm/packages/types 4.2.28 UnknownUnknown
npm/drizzle-orm ^1.0.0-rc.3 UnknownUnknown

Scanned Files

  • package-lock.json
  • packages/helpers/package.json

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updateddrizzle-orm@​1.0.0-rc.2 ⏵ 1.0.0-rc.397 -11008899100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code semver-patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants