[Snyk-dev] Security upgrade mariadb from 3.0.0 to 3.1.0

[igor-enso]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mariadb

The new version differs by 202 commits.

• 3d3cdc6 Merge branch 'release/3.1.0'
• 982a6a1 [misc] changelog update
• 65327c7 [CONJS-240] ensuring PREPARE state when caching
• ba70356 [CONJS-241] metaAsArray missing option in typescript description
• 695bc10 [misc] benchmark initialization correction
• f6861e5 [misc] update benchmark result for 3.1.0
• 5500df2 [misc] bench label correction
• 7b9001f [misc] test correction for windows
• a71072d Merge tag '3.1.0' into develop
• 21d7547 Merge branch 'release/3.1.0'
• 367ae7e bump 3.1.0 version
• 1683402 [misc] benchmark update with recent version
• 8ab9166 [misc] test correction
• 987f5cd [misc] ensure pools ending active connections after a maximum of 10s after pool ends
• 9d64f84 [CONJS-239] ensure when using callback connection that pre-commands are executed first
• 85f8baf [misc] test improvement
• 868a469 [CONJS-238] faster execution for known length packet
• f180049 [misc] correcting place of prepare parser
• b32064a [misc] ensuring disabling nagle algorithm setting option
• 13d7595 [misc] faster Text Date encoder
• e21952f [misc] avoid unnecessary array creation for multiple result-set with metaAsArray enabled
• 32b49cd [msic] avoid unnecessary try catch when parsing OK_Packet + fast path for single result
• b253e2b [msic] avoid connection.addCommand returning unnecessary command object
• 3d501b6 [msic] avoid unnecessary binding wrapper

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)