Skip to content

Bump sql-parser-cst from 0.42.1 to 0.42.3 - #1150

Open
dependabot[bot] wants to merge 1 commit into
productionfrom
dependabot/npm_and_yarn/sql-parser-cst-0.42.3
Open

dependabot[bot] wants to merge 1 commit into
productionfrom
dependabot/npm_and_yarn/sql-parser-cst-0.42.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026

Copy link
Copy Markdown
Contributor

Bumps sql-parser-cst from 0.42.1 to 0.42.3.

Release notes

Sourced from sql-parser-cst's releases.

0.42.3

Improved PostgreSQL operator parsing

  • x->-1 is now correctly parsed as (x -> (- 1)) instead of giving a parse error. #139

0.42.2

PostgreSQL parsing improvements

  • Support zero-column CREATE TABLE #138 (thanks to @​abrahamguo)
  • Support complex UPDATE targets, as in UPDATE SET col[10] = ... #123
  • Support LANGUAGE as string literal #128
  • Support combining JOIN with ON CONFLICT #124
Commits
  • 595d2d6 v0.42.3
  • 7ea1e28 Merge branch 'improve-pg-operator-parsing'
  • e4350f1 Delete the old isPostgresqlOtherOperator() and isPostgresqlStandardOperator()
  • a54c083 Inline standard operators list to grammar file
  • 7429deb Replace isPostgresqlStandardOperator() usage with negative lookahead
  • f71b996 Fix parsing of x->-y operator sequence in Postgres
  • c1040ee v0.42.2
  • 9985446 Support empty CREATE TABLE in all dialects
  • 4cc7d83 Add Abraham Guo to AUTHORS
  • c06d92d Merge pull request #138 from abrahamguo/zero-column-table
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sql-parser-cst](https://github.com/nene/sql-parser-cst) from 0.42.1 to 0.42.3.
- [Release notes](https://github.com/nene/sql-parser-cst/releases)
- [Changelog](https://github.com/nene/sql-parser-cst/blob/master/changelog.hbs)
- [Commits](nene/sql-parser-cst@v0.42.1...v0.42.3)

---
updated-dependencies:
- dependency-name: sql-parser-cst
  dependency-version: 0.42.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 17, 2026
@changeset-bot

changeset-bot Bot commented Oct 17, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: ffb08f5

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/sql-parser-cst 0.42.3 UnknownUnknown
npm/sql-parser-cst 0.42.3 UnknownUnknown

Scanned Files

  • package-lock.json
  • shared/db/package.json

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedsql-parser-cst@​0.42.1 ⏵ 0.42.3100 +310010094 -170

View full report

This branch had an error being deployed

2 failed deployments
production — ffb08f56 Deployed Oct 17, 2026 by dependabot[bot] via deploy #1447
preview — ffb08f56 Deployed Oct 17, 2026 by dependabot[bot] via deploy #1763
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code semver-patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants