Skip to content

chore(deps-dev)(deps-dev): bump mysql2 from 3.23.0 to 3.23.1 in the lockout-peer-minor-patch group#12

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/lockout-peer-minor-patch-8a330343b4
Open

chore(deps-dev)(deps-dev): bump mysql2 from 3.23.0 to 3.23.1 in the lockout-peer-minor-patch group#12
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/lockout-peer-minor-patch-8a330343b4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the lockout-peer-minor-patch group with 1 update: mysql2.

Updates mysql2 from 3.23.0 to 3.23.1

Release notes

Sourced from mysql2's releases.

v3.23.1

3.23.1 (2026-07-19)

Bug Fixes

  • security: fix unbounded decompression of server-supplied compressed packets, reported by alanturing881 (7c48343)
  • parser: call typeCast for NULL values in the binary protocol (#4394) (01f1092)
Changelog

Sourced from mysql2's changelog.

3.23.1 (2026-07-19)

Bug Fixes

  • security: fix unbounded decompression of server-supplied compressed packets, reported by alanturing881 (7c48343)
  • parser: call typeCast for NULL values in the binary protocol (#4394) (01f1092)
Commits
  • 3de28fb chore(master): release 3.23.1 (#4408)
  • 01f1092 fix(parser): call typeCast for NULL values in the binary protocol (#3368) (#4...
  • 534c552 build(deps): bump lucide-react from 1.24.0 to 1.25.0 in /website (#4407)
  • 7c48343 Merge commit from fork
  • 3e13d7b docs: establish security charter (#4404)
  • 26c135b build(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /website (#4403)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the lockout-peer-minor-patch group with 1 update: [mysql2](https://github.com/sidorares/node-mysql2).


Updates `mysql2` from 3.23.0 to 3.23.1
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v3.23.0...v3.23.1)

---
updated-dependencies:
- dependency-name: mysql2
  dependency-version: 3.23.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: lockout-peer-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 20, 2026
@github-actions

Copy link
Copy Markdown

📊 Coverage Coverage Report

Metric PR Base Diff
Statements ████████████████████ 897/897 (100%) 897/897 (100%) ⚪ 0%
Branches ████████████████████ 151/151 (100%) 151/151 (100%) ⚪ 0%
Functions ████████████████████ 50/50 (100%) 50/50 (100%) ⚪ 0%
Lines ████████████████████ 897/897 (100%) 897/897 (100%) ⚪ 0%

Updated for ac9c78b | Compared against base branch

@github-actions

Copy link
Copy Markdown

⏱️ Performance Report

✅ Tests 86 passed, 0 failed, 0 skipped
🧪 Suites 20
⏱️ Total step time 17.00s 🟢 -7.00s
⚙️ Test execution 14.14s 🟢 -4.94s
🐢 Slowest test suites
# Suite Tests Duration vs Base
1 LockoutStore contract — postgres (pglite) 5 8.02s 🟢 -1.46s
2 LockoutStore contract — sqlite (better-sqlite3) 5 16ms ⚪ ~0
3 MysqlLockoutStore (real drizzle-mysql2 builder, fake client) 5 7ms ⚪ ~0
4 @authlock/core acceptance (framework-neutral login flow) 2 3ms ⚪ ~0
5 lockout table schema parity 4 2ms ⚪ ~0
6 LockoutStore contract — in-memory 5 1ms ⚪ ~0
7 deriveKeys 8 1ms ⚪ ~0
8 LockoutManager — basic lifecycle 4 1ms ⚪ ~0
9 LockoutManager — configuration validation 7 1ms ⚪ ~0
10 LockoutManager — multi-key evaluation 4 1ms ⚪ ~0
🐌 Slowest individual tests
# Suite Test Duration vs Base
1 LockoutStore contract — postgres (pglite) LockoutStore contract — postgres (pglite) creates, increments (advancing lastFailureAt), then resets after the window 2.05s 🟢 -377ms
2 LockoutStore contract — postgres (pglite) LockoutStore contract — postgres (pglite) counts concurrent increments exactly — no lost updates 1.60s 🟢 -196ms
3 LockoutStore contract — postgres (pglite) LockoutStore contract — postgres (pglite) clearExpired removes only records older than the cutoff and counts them 1.46s 🟢 -300ms
4 LockoutStore contract — postgres (pglite) LockoutStore contract — postgres (pglite) clears a single key 1.46s 🟢 -294ms
5 LockoutStore contract — postgres (pglite) LockoutStore contract — postgres (pglite) reads a stored record, or null when the key is unknown 1.46s 🟢 -294ms
6 LockoutStore contract — sqlite (better-sqlite3) LockoutStore contract — sqlite (better-sqlite3) counts concurrent increments exactly — no lost updates 7ms ⚪ ~0
7 MysqlLockoutStore (real drizzle-mysql2 builder, fake client) MysqlLockoutStore (real drizzle-mysql2 builder, fake client) increment issues an atomic windowed upsert then re-reads the row 5ms ⚪ ~0
8 LockoutStore contract — sqlite (better-sqlite3) LockoutStore contract — sqlite (better-sqlite3) creates, increments (advancing lastFailureAt), then resets after the window 5ms ⚪ ~0
9 LockoutStore contract — sqlite (better-sqlite3) LockoutStore contract — sqlite (better-sqlite3) reads a stored record, or null when the key is unknown 2ms ⚪ ~0
10 @authlock/core acceptance (framework-neutral login flow) @authlock/core acceptance (framework-neutral login flow) exposes a semver-shaped version 1ms ⚪ ~0
11 @authlock/core acceptance (framework-neutral login flow) @authlock/core acceptance (framework-neutral login flow) locks a brute-force loop after the limit, then recovers after cooloff 1ms ⚪ ~0
12 lockout table schema parity lockout table schema parity postgres table has the expected shape 1ms ⚪ ~0
13 LockoutStore contract — sqlite (better-sqlite3) LockoutStore contract — sqlite (better-sqlite3) clears a single key 1ms ⚪ ~0
14 LockoutStore contract — sqlite (better-sqlite3) LockoutStore contract — sqlite (better-sqlite3) clearExpired removes only records older than the cutoff and counts them 1ms ⚪ ~0
15 MysqlLockoutStore (real drizzle-mysql2 builder, fake client) MysqlLockoutStore (real drizzle-mysql2 builder, fake client) get returns the mapped record when present 0ms ⚪ ~0

Updated for ac9c78b | Compared against base branch

@github-actions

Copy link
Copy Markdown

🧠 Cognitive Complexity Report

Metric PR Base Diff
Total complexity 64 64 ⚪ 0
Max function complexity 11 11 ⚪ 0
Functions measured 25 25 ⚪ 0
🧩 Most complex functions
Function Location Complexity Status
validateTiers packages/core/manager.ts:27 11 🟢 OK
deriveKeys packages/core/key.ts:26 8 🟢 OK
cooloffFor packages/core/policy.ts:10 4 🟢 OK
evaluateRecord packages/core/policy.ts:78 4 🟢 OK
mostRestrictive packages/core/manager.ts:86 3 🟢 OK
LockoutManager.clearKeys packages/core/manager.ts:221 3 🟢 OK
LockoutManager.applyFailure packages/core/manager.ts:242 3 🟢 OK
effectiveWindowMs packages/core/policy.ts:33 3 🟢 OK
InMemoryLockoutStore.clearExpired packages/core/store/in-memory.ts:45 3 🟢 OK
LockoutManager.constructor packages/core/manager.ts:126 2 🟢 OK

🧭 Cognitive complexity is reported as a review signal, not a merge gate. Prefer small, intention-revealing refactors when complexity rises.


Updated for ac9c78b | Compared against base branch

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants