SIGN IN SIGN UP
TryGhost / Ghost UNCLAIMED

Independent technology for modern publishing, memberships, subscriptions and newsletters.

0 0 120 JavaScript

Update dependency mysql2 to v3.22.3 (#28213)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [mysql2](https://sidorares.github.io/node-mysql2/docs)
([source](https://redirect.github.com/sidorares/node-mysql2)) |
[`3.18.1` →
`3.22.3`](https://renovatebot.com/diffs/npm/mysql2/3.18.1/3.22.3) |
![age](https://developer.mend.io/api/mc/badges/age/npm/mysql2/3.22.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mysql2/3.18.1/3.22.3?slim=true)
|

---

### Release Notes

<details>
<summary>sidorares/node-mysql2 (mysql2)</summary>

###
[`v3.22.3`](https://redirect.github.com/sidorares/node-mysql2/blob/HEAD/Changelog.md#3223-2026-04-24)

[Compare
Source](https://redirect.github.com/sidorares/node-mysql2/compare/v3.22.2...v3.22.3)

##### Bug Fixes

- allow resetOnRelease in connection config validation
([#&#8203;4278](https://redirect.github.com/sidorares/node-mysql2/issues/4278))
([e72f923](https://redirect.github.com/sidorares/node-mysql2/commit/e72f923d20bcdf776ee4f29ed48c69ee47ebd483))

###
[`v3.22.2`](https://redirect.github.com/sidorares/node-mysql2/blob/HEAD/Changelog.md#3222-2026-04-21)

[Compare
Source](https://redirect.github.com/sidorares/node-mysql2/compare/v3.22.1...v3.22.2)

##### Bug Fixes

- **promise:** point rejection stacks at caller for promise API
([#&#8203;4267](https://redirect.github.com/sidorares/node-mysql2/issues/4267))
([c79a3f3](https://redirect.github.com/sidorares/node-mysql2/commit/c79a3f323f2919b33a11daa2177b818f37dc7996))

###
[`v3.22.1`](https://redirect.github.com/sidorares/node-mysql2/blob/HEAD/Changelog.md#3221-2026-04-17)

[Compare
Source](https://redirect.github.com/sidorares/node-mysql2/compare/v3.22.0...v3.22.1)

##### Bug Fixes

- async stack traces not pointing to correct source, regression
introduced by
[#&#8203;4257](https://redirect.github.com/sidorares/node-mysql2/issues/4257)
([#&#8203;4265](https://redirect.github.com/sidorares/node-mysql2/issues/4265))
([5b6206c](https://redirect.github.com/sidorares/node-mysql2/commit/5b6206c8818647e4babe706778fc00dcbd9983bd))
- **packet:** return INVALID\_DATE for zero dates with numeric timezone
offset
([#&#8203;1019](https://redirect.github.com/sidorares/node-mysql2/issues/1019))
([#&#8203;4258](https://redirect.github.com/sidorares/node-mysql2/issues/4258))
([cb5adcc](https://redirect.github.com/sidorares/node-mysql2/commit/cb5adccb3aed07ccb25a8f8e07c2cb3ffba90dd0))

###
[`v3.22.0`](https://redirect.github.com/sidorares/node-mysql2/blob/HEAD/Changelog.md#3220-2026-04-10)

[Compare
Source](https://redirect.github.com/sidorares/node-mysql2/compare/v3.21.1...v3.22.0)

##### Features

- disable mysql\_clear\_password plugin by default
([#&#8203;4236](https://redirect.github.com/sidorares/node-mysql2/issues/4236))
([884bec5](https://redirect.github.com/sidorares/node-mysql2/commit/884bec56288d827939d0dd3f1f4ae476fbc8dbeb)),
closes
[#&#8203;1617](https://redirect.github.com/sidorares/node-mysql2/issues/1617)
- implement COM\_RESET\_CONNECTION with pool integration
([#&#8203;4148](https://redirect.github.com/sidorares/node-mysql2/issues/4148))
([49a64cc](https://redirect.github.com/sidorares/node-mysql2/commit/49a64cca26b32917ed671b3dbb4ac56d7316315b))

##### Performance Improvements

- defer Error object creation to error handlers in promise wrappers
([#&#8203;4257](https://redirect.github.com/sidorares/node-mysql2/issues/4257))
([ab131de](https://redirect.github.com/sidorares/node-mysql2/commit/ab131de5611c70d7ef68b7c880ba693b47a687d2))

###
[`v3.21.1`](https://redirect.github.com/sidorares/node-mysql2/blob/HEAD/Changelog.md#3211-2026-04-09)

[Compare
Source](https://redirect.github.com/sidorares/node-mysql2/compare/v3.21.0...v3.21.1)

##### Bug Fixes

- limit client flags to server capabilities
([#&#8203;4227](https://redirect.github.com/sidorares/node-mysql2/issues/4227))
([e1930b8](https://redirect.github.com/sidorares/node-mysql2/commit/e1930b80d9c80d7a482758e37305db215098c71e))
- use Number.isSafeInteger for supportBigNumbers boundary check
([#&#8203;4225](https://redirect.github.com/sidorares/node-mysql2/issues/4225))
([295264b](https://redirect.github.com/sidorares/node-mysql2/commit/295264b2df30ac4a378fd65d7d0e40911f70d184))

###
[`v3.21.0`](https://redirect.github.com/sidorares/node-mysql2/blob/HEAD/Changelog.md#3210-2026-04-09)

[Compare
Source](https://redirect.github.com/sidorares/node-mysql2/compare/v3.20.0...v3.21.0)

##### Features

- add support for query attributes
([#&#8203;4223](https://redirect.github.com/sidorares/node-mysql2/issues/4223))
([d732f78](https://redirect.github.com/sidorares/node-mysql2/commit/d732f78088b6fbe1d7454224035f1533cdc103da))
- **types:** export ExecuteValues and QueryValues from entry point
([9fafd6f](https://redirect.github.com/sidorares/node-mysql2/commit/9fafd6f7a84f057371bcc77663de224e1e8b82fc))

###
[`v3.20.0`](https://redirect.github.com/sidorares/node-mysql2/blob/HEAD/Changelog.md#3200-2026-03-15)

[Compare
Source](https://redirect.github.com/sidorares/node-mysql2/compare/v3.19.1...v3.20.0)

##### Features

- add TracingChannel support for native APM instrumentation
([#&#8203;4178](https://redirect.github.com/sidorares/node-mysql2/issues/4178))
([c06afc2](https://redirect.github.com/sidorares/node-mysql2/commit/c06afc254d3201b65c644b6cfc03f54e1edc5114))

##### Bug Fixes

- explicitly specify in auth plugins
([#&#8203;4175](https://redirect.github.com/sidorares/node-mysql2/issues/4175))
([#&#8203;4187](https://redirect.github.com/sidorares/node-mysql2/issues/4187))
([5ac5563](https://redirect.github.com/sidorares/node-mysql2/commit/5ac5563c8c7d59da358e3f4ddbde2921eb5e0741))
- prevent double release from corrupting the connection pool
([#&#8203;4186](https://redirect.github.com/sidorares/node-mysql2/issues/4186))
([7e57db6](https://redirect.github.com/sidorares/node-mysql2/commit/7e57db62f47b8bb968c15fb1ba0402927d47015a))
- restore `PoolConnection` as subclass of `Connection`
([#&#8203;4183](https://redirect.github.com/sidorares/node-mysql2/issues/4183))
([97855a6](https://redirect.github.com/sidorares/node-mysql2/commit/97855a603d9e5472c292d732af68ca6aa8cc350d))

###
[`v3.19.1`](https://redirect.github.com/sidorares/node-mysql2/blob/HEAD/Changelog.md#3191-2026-03-09)

[Compare
Source](https://redirect.github.com/sidorares/node-mysql2/compare/v3.19.0...v3.19.1)

##### Bug Fixes

- bound `null`-terminated string read to packet end (fixes a potential
OOB read reported by Doruk Tan Ozturk (peaktwilight))
([#&#8203;4161](https://redirect.github.com/sidorares/node-mysql2/issues/4161))
([91c5229](https://redirect.github.com/sidorares/node-mysql2/commit/91c5229dff2293953635b93f753b45bff31deac4))
- handle malformed geometry payloads (fixes a potential DoS
vulnerability reported by Doruk Tan Ozturk (peaktwilight))
([#&#8203;4164](https://redirect.github.com/sidorares/node-mysql2/issues/4164))
([1869215](https://redirect.github.com/sidorares/node-mysql2/commit/186921573096f5b9feccef93cf61f335e5372080))
- prevent query param override of `URL`-defined connection options
(fixes a potential config injection vulnerability reported by Doruk Tan
Ozturk (peaktwilight))
([#&#8203;4162](https://redirect.github.com/sidorares/node-mysql2/issues/4162))
([3123b4e](https://redirect.github.com/sidorares/node-mysql2/commit/3123b4e686e4e7c3893b20773376aff2c31840f7))
- validate buffer bounds in geometry parser (fixes a potential DoS
vulnerability reported by Doruk Tan Ozturk (peaktwilight))
([#&#8203;4159](https://redirect.github.com/sidorares/node-mysql2/issues/4159))
([7c2ae00](https://redirect.github.com/sidorares/node-mysql2/commit/7c2ae002a5e1708d0a0a757bedd00c7e16ae2eee))

###
[`v3.19.0`](https://redirect.github.com/sidorares/node-mysql2/blob/HEAD/Changelog.md#3190-2026-03-05)

[Compare
Source](https://redirect.github.com/sidorares/node-mysql2/compare/v3.18.2...v3.19.0)

##### Features

- use server's preferred auth method to eliminate auth switch roundtrip
([#&#8203;4140](https://redirect.github.com/sidorares/node-mysql2/issues/4140))
([b57c671](https://redirect.github.com/sidorares/node-mysql2/commit/b57c671c36ec5ce393ae84f821ead823913d730f))

##### Bug Fixes

- fix precision loss for large decimal values
([#&#8203;4135](https://redirect.github.com/sidorares/node-mysql2/issues/4135))
([099beea](https://redirect.github.com/sidorares/node-mysql2/commit/099beeae0b9300a75162dde004c3e4e79eef99f0))

###
[`v3.18.2`](https://redirect.github.com/sidorares/node-mysql2/blob/HEAD/Changelog.md#3182-2026-02-26)

[Compare
Source](https://redirect.github.com/sidorares/node-mysql2/compare/v3.18.1...v3.18.2)

##### Bug Fixes

- **types:** add `supportBigNumbers`, `bigNumberStrings`, `dateStrings`,
and `timezone` options to `QueryOptions`
([#&#8203;4127](https://redirect.github.com/sidorares/node-mysql2/issues/4127))
([b274e72](https://redirect.github.com/sidorares/node-mysql2/commit/b274e725afcb2c52c73867f9fa68e9dd1cf7890a))
- **types:** extend `QueryValues` to callback-based methods
([#&#8203;4129](https://redirect.github.com/sidorares/node-mysql2/issues/4129))
([2ad5f0b](https://redirect.github.com/sidorares/node-mysql2/commit/2ad5f0b2eb693935f9d807c60818533dd45e1f6c))
- **types:** improve `ExecuteValues` "nested" params
([#&#8203;4133](https://redirect.github.com/sidorares/node-mysql2/issues/4133))
([3f94950](https://redirect.github.com/sidorares/node-mysql2/commit/3f94950dea6fed36d6fc0a0a53feeb3a99fa01e3))
- **types:** support `Raw` and `Uint8Array` params
([#&#8203;4132](https://redirect.github.com/sidorares/node-mysql2/issues/4132))
([bde9aec](https://redirect.github.com/sidorares/node-mysql2/commit/bde9aec815d723e6f632dfb272e78566111648c0))

</details>

---

### Configuration

📅 **Schedule**: (in timezone Etc/UTC)

- Branch creation
  - Only on Sunday and Saturday (`* * * * 0,6`)
  - Between 12:00 AM and 12:59 PM, only on Monday (`* 0-12 * * 1`)
- Between 09:00 PM and 11:59 PM, Monday through Friday (`* 21-23 * *
1-5`)
- Between 12:00 AM and 04:59 AM, Tuesday through Saturday (`* 0-4 * *
2-6`)
- Automerge
  - Only on Sunday and Saturday (`* * * * 0,6`)
  - Between 12:00 AM and 12:59 PM, only on Monday (`* 0-12 * * 1`)
- Between 10:00 PM and 11:59 PM, Monday through Friday (`* 22-23 * *
1-5`)
- Between 12:00 AM and 04:59 AM, Tuesday through Saturday (`* 0-4 * *
2-6`)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTcuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE5Ny4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: tryghost-renovate[bot] <269725441+tryghost-renovate[bot]@users.noreply.github.com>
T
tryghost-renovate[bot] committed
a6afad0b4b9e190fd7b7c665a58d60e23e071619
Parent: 2534569
Committed by GitHub <noreply@github.com> on 5/28/2026, 2:03:37 PM