Skip to content

chore(deps): bump @mikro-orm/core from 6.6.7 to 6.6.10 - #2717

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/mikro-orm/core-6.6.10
Open

chore(deps): bump @mikro-orm/core from 6.6.7 to 6.6.10#2717
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/mikro-orm/core-6.6.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 29, 2026

Copy link
Copy Markdown
Contributor

Bumps @mikro-orm/core from 6.6.7 to 6.6.10.

Release notes

Sourced from @​mikro-orm/core's releases.

v6.6.10

6.6.10 (2026-03-26)

Bug Fixes

  • core: handle JSON column type conversion in em.refresh() for detached entities (e41b500), closes #7383
  • core: prevent prototype pollution in Utils.merge (06ed5f6)
  • core: tighten query construction validation (ad3643e)
  • schema: escape single quotes in enum CHECK constraints (#7397) (db19731), closes #7396 #7395

v6.6.9

6.6.9 (2026-03-05)

Bug Fixes

  • core: fix findOne with entity refs for composite PKs with shared FK columns (6f95f72), closes #5629
  • core: make entity prototype toJSON non-enumerable to prevent data leaks (c895808)
  • core: prevent double JSON-encoding of nested embeddable arrays (309b278), closes #7233
  • migrations: normalize snapshots and write on both up/down (#7236) (a07aca6), closes #7234
  • migrations: skip snapshot write on migration:up to support read-only filesystems (c8584e8), closes #7232
  • mysql: fix table.bigincrements() producing int instead of bigint (5660607), closes #7246

v6.6.8

6.6.8 (2026-03-01)

Bug Fixes

  • core: allow using property accessor on to-one relations (06978c9), closes #7211
  • core: fix double processing of JSON properties when reloading an entity (514ed87)
  • core: preserve embeddable properties in toPOJO regardless of partial loading hints (c27dbae)
  • core: preserve function expression indexes through metadata cache round-trip (#7229) (9ae8d20), closes #7238
  • core: use full hydration in mergeData for initialized entities (5529308), closes #7205
  • knex: handle $not operator inside relation filters (#7227) (d0dac2f), closes #7226
  • migrations: delete snapshot file after migration:down (dfcc8c6), closes #7210
  • postgres: fix phantom diffs for check constraints (#7224) (103346c)
Changelog

Sourced from @​mikro-orm/core's changelog.

6.6.10 (2026-03-26)

Bug Fixes

  • core: handle JSON column type conversion in em.refresh() for detached entities (e41b500), closes #7383
  • core: prevent prototype pollution in Utils.merge (06ed5f6)
  • core: tighten query construction validation (ad3643e)
  • schema: escape single quotes in enum CHECK constraints (#7397) (db19731), closes #7396 #7395

6.6.9 (2026-03-05)

Bug Fixes

  • core: fix findOne with entity refs for composite PKs with shared FK columns (6f95f72), closes #5629
  • core: make entity prototype toJSON non-enumerable to prevent data leaks (c895808)
  • core: prevent double JSON-encoding of nested embeddable arrays (309b278), closes #7233
  • migrations: normalize snapshots and write on both up/down (#7236) (a07aca6), closes #7234
  • migrations: skip snapshot write on migration:up to support read-only filesystems (c8584e8), closes #7232
  • mysql: fix table.bigincrements() producing int instead of bigint (5660607), closes #7246

6.6.8 (2026-03-01)

Bug Fixes

  • core: allow using property accessor on to-one relations (06978c9), closes #7211
  • core: fix double processing of JSON properties when reloading an entity (514ed87)
  • core: preserve embeddable properties in toPOJO regardless of partial loading hints (c27dbae)
  • core: preserve function expression indexes through metadata cache round-trip (#7229) (9ae8d20), closes #7238
  • core: use full hydration in mergeData for initialized entities (5529308), closes #7205
  • knex: handle $not operator inside relation filters (#7227) (d0dac2f), closes #7226
  • migrations: delete snapshot file after migration:down (dfcc8c6), closes #7210
  • postgres: fix phantom diffs for check constraints (#7224) (103346c)
Commits
  • a55e6f2 chore(release): v6.6.10 [skip ci]
  • ad3643e fix(core): tighten query construction validation
  • 06ed5f6 fix(core): prevent prototype pollution in Utils.merge
  • db19731 fix(schema): escape single quotes in enum CHECK constraints (#7397)
  • e41b500 fix(core): handle JSON column type conversion in em.refresh() for detached ...
  • 823b3d5 ci: use next-v6 dist tag for canary releases on 6.x branch
  • 2e53006 chore(release): update internal dependencies [skip ci]
  • 85d6eb2 chore(release): v6.6.9 [skip ci]
  • 5de970b chore(deps): bump mysql2 to 3.19.0
  • 6f95f72 fix(core): fix findOne with entity refs for composite PKs with shared FK columns
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 29, 2026
@BrunnerLivio

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/mikro-orm/core-6.6.10 branch from 27cf74b to dc3fc46 Compare September 4, 2026 08:37
@BrunnerLivio

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [@mikro-orm/core](https://github.com/mikro-orm/mikro-orm) from 6.6.7 to 6.6.10.
- [Release notes](https://github.com/mikro-orm/mikro-orm/releases)
- [Changelog](https://github.com/mikro-orm/mikro-orm/blob/v6.6.10/CHANGELOG.md)
- [Commits](mikro-orm/mikro-orm@v6.6.7...v6.6.10)

---
updated-dependencies:
- dependency-name: "@mikro-orm/core"
  dependency-version: 6.6.10
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/mikro-orm/core-6.6.10 branch from dc3fc46 to 827ce6a Compare September 4, 2026 10:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant