@depup/mysql2 3.21.0-depup.0 → 3.22.0-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/mysql2
 
 | Field | Value |
 |-------|-------|
-| Original | [mysql2](https://www.npmjs.com/package/mysql2) @ 3.21.0 |
-| Processed | 2026-04-09 |
+| Original | [mysql2](https://www.npmjs.com/package/mysql2) @ 3.22.0 |
+| Processed | 2026-04-10 |
 | Smoke test | passed |
 | Deps updated | 0 |
 

package/changes.json

@@ -1,5 +1,5 @@
 {
   "bumped": {},
-  "timestamp": "2026-04-09T12:30:50.439Z",
+  "timestamp": "2026-04-10T16:28:10.975Z",
   "totalUpdated": 0
 }

package/lib/base/connection.js

@@ -928,6 +928,10 @@ class BaseConnection extends EventEmitter {
     return this.addCommand(new Commands.Ping(cb));
   }
 
+  reset(cb) {
+    return this.addCommand(new Commands.ResetConnection(cb));
+  }
+
   _registerSlave(opts, cb) {
     return this.addCommand(new Commands.RegisterSlave(opts, cb));
   }

package/lib/base/pool.js

@@ -127,7 +127,37 @@ class BasePool extends EventEmitter {
         cb = this._connectionQueue.shift();
         process.nextTick(this.getConnection.bind(this, cb));
       }
-    } else if (this._connectionQueue.length) {
+      return;
+    }
+
+    // Reset connection state if configured
+    if (this.config.resetOnRelease && connection.reset) {
+      connection.reset((err) => {
+        if (err) {
+          // If reset fails, remove connection from pool
+          connection._pool = null;
+          spliceConnection(this._allConnections, connection);
+          connection.destroy();
+
+          // Try to create a new connection for waiting callbacks
+          if (this._connectionQueue.length) {
+            cb = this._connectionQueue.shift();
+            process.nextTick(this.getConnection.bind(this, cb));
+          }
+          return;
+        }
+
+        // Reset successful, continue with normal release flow
+        this._handleSuccessfulRelease(connection);
+      });
+    } else {
+      this._handleSuccessfulRelease(connection);
+    }
+  }
+
+  _handleSuccessfulRelease(connection) {
+    let cb;
+    if (this._connectionQueue.length) {
       cb = this._connectionQueue.shift();
       process.nextTick(() => {
         connection._released = false;

package/lib/commands/auth_switch.js

@@ -72,6 +72,28 @@ function authSwitchRequest(packet, connection, command) {
     return;
   }
 
+  if (pluginName === 'mysql_clear_password') {
+    const hasCustomPlugin =
+      connection.config.authPlugins &&
+      Object.prototype.hasOwnProperty.call(
+        connection.config.authPlugins,
+        'mysql_clear_password'
+      );
+    if (!hasCustomPlugin && !connection.config.enableCleartextPlugin) {
+      const err = new Error(
+        'Server requested authentication using mysql_clear_password, ' +
+          'which sends the password in plaintext over the network and is ' +
+          'disabled by default. To enable it, set the `enableCleartextPlugin` ' +
+          'option to `true` in your connection configuration, or provide a ' +
+          'custom `mysql_clear_password` auth plugin via the `authPlugins` ' +
+          'option. Only use this over a secure connection (TLS/SSL).'
+      );
+      err.code = 'MYSQL_CLEAR_PASSWORD_NOT_ENABLED';
+      err.fatal = true;
+      throw err;
+    }
+  }
+
   const authPlugin = getAuthPlugin(pluginName, connection);
   if (!authPlugin) {
     throw new Error(

package/lib/commands/client_handshake.js

@@ -105,7 +105,9 @@ class ClientHandshake extends Command {
     const canUseDirectAuth =
       !hasCustomAuthPlugin &&
       !hasLegacyAuthSwitchHandler &&
-      this.canUseAuthMethodDirectly(serverAuthMethod, isSecureConnection);
+      this.canUseAuthMethodDirectly(serverAuthMethod, isSecureConnection) &&
+      (serverAuthMethod !== 'mysql_clear_password' ||
+        connection.config.enableCleartextPlugin);
 
     const clientAuthMethod = canUseDirectAuth
       ? serverAuthMethod
@@ -339,8 +341,9 @@ class ClientHandshake extends Command {
         }
         return ClientHandshake.prototype.handshakeResult;
       } catch (err) {
-        // Authentication errors are fatal
-        err.code = 'AUTH_SWITCH_PLUGIN_ERROR';
+        if (!err.code) {
+          err.code = 'AUTH_SWITCH_PLUGIN_ERROR';
+        }
         err.fatal = true;
 
         if (this.onResult) {

package/lib/commands/index.js

@@ -10,6 +10,7 @@ const Ping = require('./ping.js');
 const RegisterSlave = require('./register_slave.js');
 const BinlogDump = require('./binlog_dump.js');
 const ChangeUser = require('./change_user.js');
+const ResetConnection = require('./reset_connection.js');
 const Quit = require('./quit.js');
 
 module.exports = {
@@ -23,5 +24,6 @@ module.exports = {
   RegisterSlave,
   BinlogDump,
   ChangeUser,
+  ResetConnection,
   Quit,
 };

package/lib/commands/reset_connection.js

@@ -0,0 +1,29 @@
+'use strict';
+
+const Command = require('./command');
+const Packets = require('../packets/index.js');
+
+class ResetConnection extends Command {
+  constructor(callback) {
+    super();
+    this.onResult = callback;
+  }
+
+  start(packet, connection) {
+    const req = new Packets.ResetConnection();
+    connection.writePacket(req.toPacket());
+    return ResetConnection.prototype.resetConnectionResponse;
+  }
+
+  resetConnectionResponse(packet, connection) {
+    if (connection._statements) {
+      connection._statements.clear();
+    }
+    if (this.onResult) {
+      process.nextTick(this.onResult.bind(this, null));
+    }
+    return null;
+  }
+}
+
+module.exports = ResetConnection;

package/lib/commands/server_handshake.js

@@ -35,7 +35,10 @@ class ServerHandshake extends Command {
 
   readClientReply(packet, connection) {
     // check auth here
-    const clientHelloReply = Packets.HandshakeResponse.fromPacket(packet);
+    const clientHelloReply = Packets.HandshakeResponse.fromPacket(
+      packet,
+      this.args.capabilityFlags
+    );
     // TODO check we don't have something similar already
     connection.clientHelloReply = clientHelloReply;
     if (this.args.authCallback) {

package/lib/connection_config.js

@@ -60,6 +60,7 @@ const validOptions = {
   uri: 1,
   user: 1,
   disableEval: 1,
+  enableCleartextPlugin: 1,
   // These options are used for Pool
   connectionLimit: 1,
   maxIdle: 1,
@@ -152,6 +153,7 @@ class ConnectionConfig {
       options.nestTables === undefined ? undefined : options.nestTables;
     this.typeCast = options.typeCast === undefined ? true : options.typeCast;
     this.disableEval = Boolean(options.disableEval);
+    this.enableCleartextPlugin = Boolean(options.enableCleartextPlugin);
     if (this.timezone[0] === ' ') {
       // "+" is a url encoded char for space so it
       // gets translated to space when giving a

package/lib/constants/commands.js

@@ -32,5 +32,6 @@ module.exports = {
   STMT_FETCH: 0x1c,
   DAEMON: 0x1d, // deprecated
   BINLOG_DUMP_GTID: 0x1e,
+  RESET_CONNECTION: 0x1f, // introduced in 5.7.3
   UNKNOWN: 0xff, // bad!
 };

package/lib/packets/handshake_response.js

@@ -128,11 +128,11 @@ class HandshakeResponse {
     const p = this.serializeResponse(Packet.MockBuffer());
     return this.serializeResponse(Buffer.alloc(p.offset));
   }
-  static fromPacket(packet) {
+  static fromPacket(packet, serverFlags = 0xffffffff) {
     const args = {};
     args.clientFlags = packet.readInt32();
     function isSet(flag) {
-      return args.clientFlags & ClientConstants[flag];
+      return args.clientFlags & serverFlags & ClientConstants[flag];
     }
     args.maxPacketSize = packet.readInt32();
     args.charsetNumber = packet.readInt8();

package/lib/packets/index.js

@@ -27,6 +27,7 @@ const PrepareStatement = require('./prepare_statement');
 const PreparedStatementHeader = require('./prepared_statement_header');
 const Query = require('./query');
 const RegisterSlave = require('./register_slave');
+const ResetConnection = require('./reset_connection');
 const ResultSetHeader = require('./resultset_header');
 const SSLRequest = require('./ssl_request');
 const TextRow = require('./text_row');
@@ -48,6 +49,7 @@ const ctorMap = {
   PreparedStatementHeader,
   Query,
   RegisterSlave,
+  ResetConnection,
   ResultSetHeader,
   SSLRequest,
   TextRow,

package/lib/packets/packet.js

@@ -155,21 +155,17 @@ class Packet {
   readInt64() {
     const word0 = this.readInt32();
     const word1 = this.readInt32();
-    let res = new Long(word0, word1, true);
+    const res = new Long(word0, word1, true);
     const resNumber = res.toNumber();
-    const resString = res.toString();
-    res = resNumber.toString() === resString ? resNumber : resString;
-    return res;
+    return Number.isSafeInteger(resNumber) ? resNumber : res.toString();
   }
 
   readSInt64() {
     const word0 = this.readInt32();
     const word1 = this.readInt32();
-    let res = new Long(word0, word1, false);
+    const res = new Long(word0, word1, false);
     const resNumber = res.toNumber();
-    const resString = res.toString();
-    res = resNumber.toString() === resString ? resNumber : resString;
-    return res;
+    return Number.isSafeInteger(resNumber) ? resNumber : res.toString();
   }
 
   isEOF() {
@@ -223,8 +219,10 @@ class Packet {
       res = new Long(word0, word1, !signed); // Long need unsigned
       const resNumber = res.toNumber();
       const resString = res.toString();
-      res = resNumber.toString() === resString ? resNumber : resString;
-      return bigNumberStrings ? resString : res;
+      if (bigNumberStrings || !Number.isSafeInteger(resNumber)) {
+        return resString;
+      }
+      return resNumber;
     }
 
     console.trace();
@@ -458,7 +456,7 @@ class Packet {
       if (numDigits >= 15) {
         str = this.readString(end - this.offset, 'binary');
         result = parseInt(str, 10);
-        if (result.toString() === str) {
+        if (Number.isSafeInteger(sign * result)) {
           return sign * result;
         }
         return sign === -1 ? `-${str}` : str;
@@ -480,11 +478,10 @@ class Packet {
     if (!supportBigNumbers) {
       return num;
     }
-    str = this.buffer.toString('ascii', start, end);
-    if (num.toString() === str) {
+    if (Number.isSafeInteger(num)) {
       return num;
     }
-    return str;
+    return this.buffer.toString('ascii', start, end);
   }
 
   // note that if value of inputNumberAsString is bigger than MAX_SAFE_INTEGER

package/lib/packets/reset_connection.js

@@ -0,0 +1,17 @@
+'use strict';
+
+const Packet = require('../packets/packet');
+const CommandCodes = require('../constants/commands');
+
+class ResetConnection {
+  constructor() {}
+
+  toPacket() {
+    const packet = new Packet(0, Buffer.alloc(5), 0, 5);
+    packet.offset = 4;
+    packet.writeInt8(CommandCodes.RESET_CONNECTION);
+    return packet;
+  }
+}
+
+module.exports = ResetConnection;

package/lib/pool_config.js

@@ -24,6 +24,10 @@ class PoolConfig {
     this.queueLimit = isNaN(options.queueLimit)
       ? 0
       : Number(options.queueLimit);
+    this.resetOnRelease =
+      options.resetOnRelease === undefined
+        ? false
+        : Boolean(options.resetOnRelease);
   }
 }
 

package/lib/promise/connection.js

@@ -26,14 +26,13 @@ class PromiseConnection extends EventEmitter {
 
   query(query, params) {
     const c = this.connection;
-    const localErr = new Error();
     if (typeof params === 'function') {
       throw new Error(
         'Callback function is not available with promise clients.'
       );
     }
     return new this.Promise((resolve, reject) => {
-      const done = makeDoneCb(resolve, reject, localErr);
+      const done = makeDoneCb(resolve, reject);
       if (params !== undefined) {
         c.query(query, params, done);
       } else {
@@ -44,14 +43,13 @@ class PromiseConnection extends EventEmitter {
 
   execute(query, params) {
     const c = this.connection;
-    const localErr = new Error();
     if (typeof params === 'function') {
       throw new Error(
         'Callback function is not available with promise clients.'
       );
     }
     return new this.Promise((resolve, reject) => {
-      const done = makeDoneCb(resolve, reject, localErr);
+      const done = makeDoneCb(resolve, reject);
       if (params !== undefined) {
         c.execute(query, params, done);
       } else {
@@ -74,37 +72,34 @@ class PromiseConnection extends EventEmitter {
 
   beginTransaction() {
     const c = this.connection;
-    const localErr = new Error();
     return new this.Promise((resolve, reject) => {
-      const done = makeDoneCb(resolve, reject, localErr);
+      const done = makeDoneCb(resolve, reject);
       c.beginTransaction(done);
     });
   }
 
   commit() {
     const c = this.connection;
-    const localErr = new Error();
     return new this.Promise((resolve, reject) => {
-      const done = makeDoneCb(resolve, reject, localErr);
+      const done = makeDoneCb(resolve, reject);
       c.commit(done);
     });
   }
 
   rollback() {
     const c = this.connection;
-    const localErr = new Error();
     return new this.Promise((resolve, reject) => {
-      const done = makeDoneCb(resolve, reject, localErr);
+      const done = makeDoneCb(resolve, reject);
       c.rollback(done);
     });
   }
 
   ping() {
     const c = this.connection;
-    const localErr = new Error();
     return new this.Promise((resolve, reject) => {
       c.ping((err) => {
         if (err) {
+          const localErr = new Error();
           localErr.message = err.message;
           localErr.code = err.code;
           localErr.errno = err.errno;
@@ -118,12 +113,31 @@ class PromiseConnection extends EventEmitter {
     });
   }
 
+  reset() {
+    const c = this.connection;
+    return new this.Promise((resolve, reject) => {
+      c.reset((err) => {
+        if (err) {
+          const localErr = new Error();
+          localErr.message = err.message;
+          localErr.code = err.code;
+          localErr.errno = err.errno;
+          localErr.sqlState = err.sqlState;
+          localErr.sqlMessage = err.sqlMessage;
+          reject(localErr);
+        } else {
+          resolve();
+        }
+      });
+    });
+  }
+
   connect() {
     const c = this.connection;
-    const localErr = new Error();
     return new this.Promise((resolve, reject) => {
       c.connect((err, param) => {
         if (err) {
+          const localErr = new Error();
           localErr.message = err.message;
           localErr.code = err.code;
           localErr.errno = err.errno;
@@ -140,10 +154,10 @@ class PromiseConnection extends EventEmitter {
   prepare(options) {
     const c = this.connection;
     const promiseImpl = this.Promise;
-    const localErr = new Error();
     return new this.Promise((resolve, reject) => {
       c.prepare(options, (err, statement) => {
         if (err) {
+          const localErr = new Error();
           localErr.message = err.message;
           localErr.code = err.code;
           localErr.errno = err.errno;
@@ -163,10 +177,10 @@ class PromiseConnection extends EventEmitter {
 
   changeUser(options) {
     const c = this.connection;
-    const localErr = new Error();
     return new this.Promise((resolve, reject) => {
       c.changeUser(options, (err) => {
         if (err) {
+          const localErr = new Error();
           localErr.message = err.message;
           localErr.code = err.code;
           localErr.errno = err.errno;

package/lib/promise/make_done_cb.js

@@ -1,8 +1,9 @@
 'use strict';
 
-function makeDoneCb(resolve, reject, localErr) {
+function makeDoneCb(resolve, reject) {
   return function (err, rows, fields) {
     if (err) {
+      const localErr = new Error();
       localErr.message = err.message;
       localErr.code = err.code;
       localErr.errno = err.errno;

package/lib/promise/pool.js

@@ -33,14 +33,13 @@ class PromisePool extends EventEmitter {
 
   query(sql, args) {
     const corePool = this.pool;
-    const localErr = new Error();
     if (typeof args === 'function') {
       throw new Error(
         'Callback function is not available with promise clients.'
       );
     }
     return new this.Promise((resolve, reject) => {
-      const done = makeDoneCb(resolve, reject, localErr);
+      const done = makeDoneCb(resolve, reject);
       if (args !== undefined) {
         corePool.query(sql, args, done);
       } else {
@@ -51,14 +50,13 @@ class PromisePool extends EventEmitter {
 
   execute(sql, args) {
     const corePool = this.pool;
-    const localErr = new Error();
     if (typeof args === 'function') {
       throw new Error(
         'Callback function is not available with promise clients.'
       );
     }
     return new this.Promise((resolve, reject) => {
-      const done = makeDoneCb(resolve, reject, localErr);
+      const done = makeDoneCb(resolve, reject);
       if (args) {
         corePool.execute(sql, args, done);
       } else {
@@ -69,10 +67,10 @@ class PromisePool extends EventEmitter {
 
   end() {
     const corePool = this.pool;
-    const localErr = new Error();
     return new this.Promise((resolve, reject) => {
       corePool.end((err) => {
         if (err) {
+          const localErr = new Error();
           localErr.message = err.message;
           localErr.code = err.code;
           localErr.errno = err.errno;

package/lib/promise/pool_cluster.js

@@ -24,28 +24,26 @@ class PromisePoolNamespace {
 
   query(sql, values) {
     const corePoolNamespace = this.poolNamespace;
-    const localErr = new Error();
     if (typeof values === 'function') {
       throw new Error(
         'Callback function is not available with promise clients.'
       );
     }
     return new this.Promise((resolve, reject) => {
-      const done = makeDoneCb(resolve, reject, localErr);
+      const done = makeDoneCb(resolve, reject);
       corePoolNamespace.query(sql, values, done);
     });
   }
 
   execute(sql, values) {
     const corePoolNamespace = this.poolNamespace;
-    const localErr = new Error();
     if (typeof values === 'function') {
       throw new Error(
         'Callback function is not available with promise clients.'
       );
     }
     return new this.Promise((resolve, reject) => {
-      const done = makeDoneCb(resolve, reject, localErr);
+      const done = makeDoneCb(resolve, reject);
       corePoolNamespace.execute(sql, values, done);
     });
   }

package/lib/promise/prepared_statement_info.js

@@ -10,9 +10,8 @@ class PromisePreparedStatementInfo {
 
   execute(parameters) {
     const s = this.statement;
-    const localErr = new Error();
     return new this.Promise((resolve, reject) => {
-      const done = makeDoneCb(resolve, reject, localErr);
+      const done = makeDoneCb(resolve, reject);
       if (parameters) {
         s.execute(parameters, done);
       } else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@depup/mysql2",
-  "version": "3.21.0-depup.0",
+  "version": "3.22.0-depup.0",
   "description": "fast mysql driver. Implements core protocol, prepared statements, ssl and compression in native JS (with updated dependencies)",
   "main": "index.js",
   "typings": "typings/mysql/index",
@@ -76,7 +76,7 @@
   "devDependencies": {
     "@eslint/eslintrc": "^3.3.3",
     "@eslint/js": "^9.39.2",
-    "@eslint/markdown": "^7.5.1",
+    "@eslint/markdown": "^8.0.1",
     "@ianvs/prettier-plugin-sort-imports": "^4.7.1",
     "@pokujs/multi-suite": "^1.0.0",
     "@rollup/plugin-commonjs": "^29.0.2",
@@ -104,8 +104,8 @@
     "changes": {},
     "depsUpdated": 0,
     "originalPackage": "mysql2",
-    "originalVersion": "3.21.0",
-    "processedAt": "2026-04-09T12:31:00.076Z",
+    "originalVersion": "3.22.0",
+    "processedAt": "2026-04-10T16:28:18.721Z",
     "smokeTest": "passed"
   }
 }

package/promise.d.ts

@@ -51,6 +51,8 @@ export declare class Connection extends QueryableAndExecutableBase {
 
   ping(): Promise<void>;
 
+  reset(): Promise<void>;
+
   beginTransaction(): Promise<void>;
 
   commit(): Promise<void>;

package/promise.js

@@ -16,7 +16,6 @@ const PromisePoolNamespace = require('./lib/promise/pool_cluster');
 
 function createConnectionPromise(opts) {
   const coreConnection = createConnection(opts);
-  const createConnectionErr = new Error();
   const thePromise = opts.Promise || Promise;
   if (!thePromise) {
     throw new Error(
@@ -30,6 +29,7 @@ function createConnectionPromise(opts) {
       resolve(new PromiseConnection(coreConnection, thePromise));
     });
     coreConnection.once('error', (err) => {
+      const createConnectionErr = new Error();
       createConnectionErr.message = err.message;
       createConnectionErr.code = err.code;
       createConnectionErr.errno = err.errno;
@@ -83,28 +83,26 @@ class PromisePoolCluster extends EventEmitter {
 
   query(sql, args) {
     const corePoolCluster = this.poolCluster;
-    const localErr = new Error();
     if (typeof args === 'function') {
       throw new Error(
         'Callback function is not available with promise clients.'
       );
     }
     return new this.Promise((resolve, reject) => {
-      const done = makeDoneCb(resolve, reject, localErr);
+      const done = makeDoneCb(resolve, reject);
       corePoolCluster.query(sql, args, done);
     });
   }
 
   execute(sql, args) {
     const corePoolCluster = this.poolCluster;
-    const localErr = new Error();
     if (typeof args === 'function') {
       throw new Error(
         'Callback function is not available with promise clients.'
       );
     }
     return new this.Promise((resolve, reject) => {
-      const done = makeDoneCb(resolve, reject, localErr);
+      const done = makeDoneCb(resolve, reject);
       corePoolCluster.execute(sql, args, done);
     });
   }
@@ -118,10 +116,10 @@ class PromisePoolCluster extends EventEmitter {
 
   end() {
     const corePoolCluster = this.poolCluster;
-    const localErr = new Error();
     return new this.Promise((resolve, reject) => {
       corePoolCluster.end((err) => {
         if (err) {
+          const localErr = new Error();
           localErr.message = err.message;
           localErr.code = err.code;
           localErr.errno = err.errno;

package/typings/mysql/lib/Connection.d.ts

@@ -326,6 +326,18 @@ export interface ConnectionOptions {
 
   disableEval?: boolean;
 
+  /**
+   * Enable the `mysql_clear_password` authentication plugin, which sends the
+   * password in plaintext. Disabled by default for security — only enable
+   * over secure connections (TLS/SSL).
+   *
+   * Providing a custom `mysql_clear_password` function via `authPlugins`
+   * implicitly enables cleartext authentication without this flag.
+   *
+   * (Default: false)
+   */
+  enableCleartextPlugin?: boolean;
+
   authPlugins?: {
     [key: string]: AuthPlugin;
   };
@@ -426,6 +438,8 @@ declare class Connection extends QueryableBase(ExecutableBase(EventEmitter)) {
 
   ping(callback?: (err: QueryError | null) => any): void;
 
+  reset(callback?: (err: QueryError | null) => any): void;
+
   writeOk(args?: OkPacketParams): void;
 
   writeError(args?: ErrorPacketParams): void;

package/typings/mysql/lib/Pool.d.ts

@@ -37,6 +37,13 @@ export interface PoolOptions extends ConnectionOptions {
    * is no limit to the number of queued connection requests. (Default: 0)
    */
   queueLimit?: number;
+
+  /**
+   * Whether to reset the connection state (user variables, temporary tables, transactions, etc.) when
+   * releasing the connection back to the pool. This ensures each connection starts clean for the next user.
+   * Requires MySQL 5.7.3+. (Default: false)
+   */
+  resetOnRelease?: boolean;
 }
 
 declare class Pool extends QueryableBase(ExecutableBase(EventEmitter)) {