Skip to content

Bump drizzle-orm from 1.0.0-rc.4 to 1.0.0-rc.5 in the db group across 1 directory - #1120

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/db-af1ffa597d
Closed

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/db-af1ffa597d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the db group with 1 update in the / directory: drizzle-orm.

Updates drizzle-orm from 1.0.0-rc.4 to 1.0.0-rc.5

Release notes

Sourced from drizzle-orm's releases.

v1.0.0-rc.5

ORM

  • [BREAKING] Fixed postgres-js transparent parsers set by drizzle() constructors breaking driver's own serializers for timestamptz, timestamp, date, time, json, jsonb types (fixes #3171, #4426, #5789) paramsInErrors :exclamation: Any existing workarounds with manual JSON.stringify(jsonValue) in raw sql or raw driver calls must be removed to prevent double stringification of JSON params; For array-type JSON params in sql use sql.param(jsonArrayValue) to avoid it being parsed as value list instead of param.
  • [BREAKING] Restricted undefined value passed to fields in relational queries' where - now throws an error upon encountering undefined in filters, added EmptyFilter symbol (import { EmptyFilter } from 'drizzle-orm/relations') that can be used as an explicit replacement of undefined where possibly absent filter is desired by design rather than possible bug (fixes #5636)
    Example:
      db.query.users.findMany({ where: { isActive: params.isActive ?? EmptyFilter } })
  • [BREAKING] Relation filters without conditions ({}, or containing only empty conditions) are now skipped like any other empty filter instead of generating exists (...) check of relation's presence - use true to filter by relation's presence, false - by its absence
    Example:
      // Previously: `where exists (select * from "posts" ...)`, now: no filter
      db.query.users.findMany({ where: { posts: {} } })
      // Users with at least one post
      db.query.users.findMany({ where: { posts: true } })
  • [BREAKING] Updated postgres codecs: now generic codecs contain only in-json codecs (mirroring mysql), contents of drivers' codecs remain unchanged
  • [BREAKING] Switched pg bytea in-json codecs from encode(..., 'base64') casts to decoding to_json's native hex output
  • [BREAKING] Made nested select join nullification consider SQL field data during nullification
  • [BREAKING] Fixed sqlite ignoring .$defaultFn(...) on insert when .default(...) is present
  • [BREAKING] Untied bun-sql/mysql, mysql2, singlestore column mapping from connection config, removed forced bigint params on their respective configs, replaced with more stable cast codecs
  • [BREAKING] Reworked cockroach column builders to mirror pg - now both have same .array('[][]...') syntax
  • [BREAKING] Moved View exports from drizzle-orm/sql/sql to drizzle-orm/view
  • [BREAKING] getTableUniqueName no longer prefixes aliased views or tables with their schema
  • [BREAKING] getTableUniqueName no longer sets public. prefix for entities without schema
  • [BREAKING] Updated View class: switched to Table-like object config for type template, typed schema property
  • [BREAKING] Updated withReplicas (indirectly fixes #4185):
    • Now every query goes to primary db by default
    • To query replica, explicitly call db.$replica
  • [BREAKING] Added withCastCodecs = false switch to getSQL(), withCastCodecs = true switch to toSQL() of non-relational query builders - now db.select(...).from(...).getSQL() emits query without cast codecs by default
  • [BREAKING] Reworked sqlite-proxy:
    • Added rowMode: 'array' | 'object' switch for 'all' | 'get' execute methods
    • Dropped { rows: Result[] } callback result wrapping - now expected direct return of expected data
    • Replaced callback, batchCallback with SqliteProxyExecutors object - must provide run, all, get handlers & optional batch handler
    • Dropped values execute method due to it being duplicate of array-mode all
    • Added TRunResult type inferrence based on return type of run executor, updated SqliteRemoteDatabase template with TRunResult argument
    • Added per-item rowMode: 'array' | 'object' to batch, batch is expected to mirror executors' return types per query
  • [BREAKING] Fixed runtime-type expected result mismatch for get (data | undefined in runtime, data[] in types) (fixes #5461, #3394)
  • [BREAKING] Fixed sqlite db.get(sql) return type lacking | undefined for queries without returned rows
  • [BREAKING] Omitted query params from DrizzleQueryError by default, added paramsInErrors option to drizzle constructor to enable query params in DrizzleQueryError (fixes #5939)
    Example:
    const db = drizzle({
      connection: 'postgres://...',
      paramsInErrors: true 
    })

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 14, 2026
@changeset-bot

changeset-bot Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: c77214d

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages
Name Type
@chainfuse/ai-tools Patch
@chainfuse/helpers Patch
@chainfuse/types Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@github-actions

github-actions Bot commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 3 package(s) with unknown licenses.
See the Details below.

License Issues

package-lock.json

PackageVersionLicenseIssue Type
packages/ai-tools2.0.18NullUnknown License
packages/helpers5.0.9NullUnknown License
packages/types4.2.35NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
npm/drizzle-orm 1.0.0-rc.5 UnknownUnknown
npm/packages/ai-tools 2.0.18 UnknownUnknown
npm/packages/helpers 5.0.9 UnknownUnknown
npm/packages/types 4.2.35 UnknownUnknown
npm/drizzle-orm 1.0.0-rc.5 UnknownUnknown

Scanned Files

  • package-lock.json
  • packages/helpers/package.json

@socket-security

socket-security Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updateddrizzle-orm@​1.0.0-rc.4 ⏵ 1.0.0-rc.597 +1910089 +198 +3100

View full report

@dependabot dependabot Bot changed the title Bump drizzle-orm from 1.0.0-rc.4 to 1.0.0-rc.5-5935859 in the db group Bump drizzle-orm from 1.0.0-rc.4 to 1.0.0-rc.5-5935859 in the db group across 1 directory Oct 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/db-af1ffa597d branch from 07bed0a to 6f5e54c Compare October 20, 2026 19:33
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/db-af1ffa597d branch 6 times, most recently from ec4246f to d061f16 Compare October 20, 2026 20:32
Bumps the db group with 1 update in the / directory: [drizzle-orm](https://github.com/drizzle-team/drizzle-orm).


Updates `drizzle-orm` from 1.0.0-rc.4 to 1.0.0-rc.5
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases)
- [Commits](drizzle-team/drizzle-orm@v1.0.0-rc.4...v1.0.0-rc.5)

---
updated-dependencies:
- dependency-name: drizzle-orm
  dependency-version: 1.0.0-rc.5-5935859
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: db
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump drizzle-orm from 1.0.0-rc.4 to 1.0.0-rc.5-5935859 in the db group across 1 directory Bump drizzle-orm from 1.0.0-rc.4 to 1.0.0-rc.5 in the db group across 1 directory Oct 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/db-af1ffa597d branch from 2613664 to 7e9bf36 Compare October 27, 2026 19:33
@demosjarco demosjarco closed this Nov 5, 2026
@demosjarco
demosjarco deleted the dependabot/npm_and_yarn/db-af1ffa597d branch November 5, 2026 03:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code semver-patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant