[dependabot]

Bumps mysql2 from 3.14.4 to 3.22.0.

Release notes

Sourced from mysql2's releases.

v3.22.0

3.22.0 (2026-04-10)

Features

• disable mysql_clear_password plugin by default (#4236) (884bec5), closes #1617
• implement COM_RESET_CONNECTION with pool integration (#4148) (49a64cc)

Performance Improvements

• defer Error object creation to error handlers in promise wrappers (#4257) (ab131de)

v3.21.1

3.21.1 (2026-04-09)

Bug Fixes

• limit client flags to server capabilities (#4227) (e1930b8)
• use Number.isSafeInteger for supportBigNumbers boundary check (#4225) (295264b)

v3.21.0

3.21.0 (2026-04-09)

Features

• add support for query attributes (#4223) (d732f78)
• types: export ExecuteValues and QueryValues from entry point (9fafd6f)

v3.20.0

3.20.0 (2026-03-15)

Features

• add TracingChannel support for native APM instrumentation (#4178) (c06afc2)

Bug Fixes

• explicitly specify in auth plugins (#4175) (#4187) (5ac5563)
• prevent double release from corrupting the connection pool (#4186) (7e57db6)
• restore PoolConnection as subclass of Connection (#4183) (97855a6)

v3.19.1

3.19.1 (2026-03-09)

... (truncated)

Changelog

Sourced from mysql2's changelog.

3.22.0 (2026-04-10)

Features

• disable mysql_clear_password plugin by default (#4236) (884bec5), closes #1617
• implement COM_RESET_CONNECTION with pool integration (#4148) (49a64cc)

Performance Improvements

• defer Error object creation to error handlers in promise wrappers (#4257) (ab131de)

3.21.1 (2026-04-09)

Bug Fixes

• limit client flags to server capabilities (#4227) (e1930b8)
• use Number.isSafeInteger for supportBigNumbers boundary check (#4225) (295264b)

3.21.0 (2026-04-09)

Features

• add support for query attributes (#4223) (d732f78)
• types: export ExecuteValues and QueryValues from entry point (9fafd6f)

3.20.0 (2026-03-15)

Features

• add TracingChannel support for native APM instrumentation (#4178) (c06afc2)

Bug Fixes

• explicitly specify in auth plugins (#4175) (#4187) (5ac5563)
• prevent double release from corrupting the connection pool (#4186) (7e57db6)
• restore PoolConnection as subclass of Connection (#4183) (97855a6)

3.19.1 (2026-03-09)

Bug Fixes

• bound null-terminated string read to packet end (fixes a potential OOB read reported by Doruk Tan Ozturk (peaktwilight)) (#4161) (91c5229)
• handle malformed geometry payloads (fixes a potential DoS vulnerability reported by Doruk Tan Ozturk (peaktwilight)) (#4164) (1869215)

... (truncated)

Commits

• 71bcbff chore(master): release 3.22.0 (#4237)
• ab131de perf: defer Error object creation to error handlers in promise wrappers (#4257)
• bb0100b build(deps-dev): bump the website-dev-dependencies group across 1 directory w...
• 5f63557 build(deps-dev): bump the dev-dependencies group across 1 directory with 4 up...
• 0b750e0 build(deps): bump the docusaurus group in /website with 2 updates (#4249)
• 9566475 ci(dependabot): group dependency updates to reduce PR noise (#4248)
• e4f3b42 build(deps): bump the react group in /website with 2 updates (#4247)
• 53f9c9e ci(dependabot): group react and react-dom updates together (#4246)
• 49a64cc feat: implement COM_RESET_CONNECTION with pool integration (#4148)
• 884bec5 feat: disable mysql_clear_password plugin by default (#4236)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[github-actions]

Hey! Your PR title build(deps-dev): bump mysql2 from 3.14.4 to 3.22.0 in /packages/console/core doesn't follow conventional commit format.

Please update it to start with one of:

• feat: or feat(scope): new feature
• fix: or fix(scope): bug fix
• docs: or docs(scope): documentation changes
• chore: or chore(scope): maintenance tasks
• refactor: or refactor(scope): code refactoring
• test: or test(scope): adding or updating tests

Where scope is the package name (e.g., app, desktop, opencode).

See CONTRIBUTING.md for details.

[github-actions]

This PR doesn't fully meet our contributing guidelines and PR template.

What needs to be fixed:

• PR description is missing required template sections. Please use the PR template.

Please edit this PR description to address the above within 2 hours, or it will be automatically closed.

If you believe this was flagged incorrectly, please let a maintainer know.

[github-actions]

This pull request has been automatically closed because it was not updated to meet our contributing guidelines within the 2-hour window.

Feel free to open a new pull request that follows our guidelines.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.