[dependabot]

Bumps the db group with 1 update in the / directory: drizzle-orm.

Updates drizzle-orm from 1.0.0-rc.4 to 1.0.0-rc.5

Release notes

Sourced from drizzle-orm's releases.

v1.0.0-rc.5

ORM

• [BREAKING] Fixed postgres-js transparent parsers set by drizzle() constructors breaking driver's own serializers for timestamptz, timestamp, date, time, json, jsonb types (fixes #3171, #4426, #5789) paramsInErrors :exclamation: Any existing workarounds with manual JSON.stringify(jsonValue) in raw sql or raw driver calls must be removed to prevent double stringification of JSON params; For array-type JSON params in sql use sql.param(jsonArrayValue) to avoid it being parsed as value list instead of param.
• [BREAKING] Restricted undefined value passed to fields in relational queries' where - now throws an error upon encountering undefined in filters, added EmptyFilter symbol (import { EmptyFilter } from 'drizzle-orm/relations') that can be used as an explicit replacement of undefined where possibly absent filter is desired by design rather than possible bug (fixes #5636)
  Example:

    db.query.users.findMany({ where: { isActive: params.isActive ?? EmptyFilter } })

• [BREAKING] Relation filters without conditions ({}, or containing only empty conditions) are now skipped like any other empty filter instead of generating exists (...) check of relation's presence - use true to filter by relation's presence, false - by its absence
  Example:

    // Previously: `where exists (select * from "posts" ...)`, now: no filter
    db.query.users.findMany({ where: { posts: {} } })
    // Users with at least one post
    db.query.users.findMany({ where: { posts: true } })

• [BREAKING] Updated postgres codecs: now generic codecs contain only in-json codecs (mirroring mysql), contents of drivers' codecs remain unchanged
• [BREAKING] Switched pg bytea in-json codecs from encode(..., 'base64') casts to decoding to_json's native hex output
• [BREAKING] Made nested select join nullification consider SQL field data during nullification
• [BREAKING] Fixed sqlite ignoring .$defaultFn(...) on insert when .default(...) is present
• [BREAKING] Untied bun-sql/mysql, mysql2, singlestore column mapping from connection config, removed forced bigint params on their respective configs, replaced with more stable cast codecs
• [BREAKING] Reworked cockroach column builders to mirror pg - now both have same .array('[][]...') syntax
• [BREAKING] Moved View exports from drizzle-orm/sql/sql to drizzle-orm/view
• [BREAKING] getTableUniqueName no longer prefixes aliased views or tables with their schema
• [BREAKING] getTableUniqueName no longer sets public. prefix for entities without schema
• [BREAKING] Updated View class: switched to Table-like object config for type template, typed schema property
• [BREAKING] Updated withReplicas (indirectly fixes #4185):
  • Now every query goes to primary db by default
  • To query replica, explicitly call db.$replica
• [BREAKING] Added withCastCodecs = false switch to getSQL(), withCastCodecs = true switch to toSQL() of non-relational query builders - now db.select(...).from(...).getSQL() emits query without cast codecs by default
• [BREAKING] Reworked sqlite-proxy:
  • Added rowMode: 'array' | 'object' switch for 'all' | 'get' execute methods
  • Dropped { rows: Result[] } callback result wrapping - now expected direct return of expected data
  • Replaced callback, batchCallback with SqliteProxyExecutors object - must provide run, all, get handlers & optional batch handler
  • Dropped values execute method due to it being duplicate of array-mode all
  • Added TRunResult type inferrence based on return type of run executor, updated SqliteRemoteDatabase template with TRunResult argument
  • Added per-item rowMode: 'array' | 'object' to batch, batch is expected to mirror executors' return types per query
• [BREAKING] Fixed runtime-type expected result mismatch for get (data | undefined in runtime, data[] in types) (fixes #5461, #3394)
• [BREAKING] Fixed sqlite db.get(sql) return type lacking | undefined for queries without returned rows
• [BREAKING] Omitted query params from DrizzleQueryError by default, added paramsInErrors option to drizzle constructor to enable query params in DrizzleQueryError (fixes #5939)
  Example:

  const db = drizzle({
    connection: 'postgres://...',
    paramsInErrors: true 
  })

... (truncated)

Commits

• 5d71fc4 Merge pull request #5966 from drizzle-team/rc5
• 9e70b2a timetz fixes & timezone tests for pg
• 5820a25 Local RDS tests, codec improvements, RDS fixes
• 78476b3 minipg for kit
• e639763 Merge branch 'rc5' of https://github.com/drizzle-team/drizzle-orm into rc5
• cee25f2 Set orm as optional peer dependency to prevent package managers from autoinst...
• 2c55ff9 Merge pull request #6536 from drizzle-team/ext-studio
• ca2a627 fix(tests): remove trailing newline from SQL statements in schema change tests
• 14409e5 Merge branch 'rc5' into ext-studio
• ab2d2c0 Merge pull request #6503 from drizzle-team/snapshots
• Additional commits viewable in compare view

[changeset-bot]

🦋 Changeset detected

Latest commit: c77214d

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages

Name	Type
@chainfuse/ai-tools	Patch
@chainfuse/helpers	Patch
@chainfuse/types	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 3 package(s) with unknown licenses.

See the Details below.

License Issues

package-lock.json

Package	Version	License	Issue Type
packages/ai-tools	2.0.18	Null	Unknown License
packages/helpers	5.0.9	Null	Unknown License
packages/types	4.2.35	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
npm/drizzle-orm	1.0.0-rc.5	Unknown	Unknown
npm/packages/ai-tools	2.0.18	Unknown	Unknown
npm/packages/helpers	5.0.9	Unknown	Unknown
npm/packages/types	4.2.35	Unknown	Unknown
npm/drizzle-orm	1.0.0-rc.5	Unknown	Unknown

Scanned Files

• package-lock.json
• packages/helpers/package.json

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	drizzle-orm@​1.0.0-rc.4 ⏵ 1.0.0-rc.5	+19		+1	+3

View full report