@mojaloop/database-lib 11.3.5 → 11.3.7

package/.circleci/config.yml

@@ -20,7 +20,7 @@ version: 2.1
 setup: true
 
 orbs:
-  build: mojaloop/build@1.1.6
+  build: mojaloop/build@1.1.10
 
 workflows:
   setup:

package/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### [11.3.7](https://github.com/mojaloop/database-lib/compare/v11.3.6...v11.3.7) (2026-02-18)
+
+
+### Bug Fixes
+
+* replace allowlisted vulnerabilities with npm overrides ([#189](https://github.com/mojaloop/database-lib/issues/189)) ([904fcad](https://github.com/mojaloop/database-lib/commit/904fcad46304946a7f6493cfd4914a26a3c8dc87))
+
+### [11.3.6](https://github.com/mojaloop/database-lib/compare/v11.3.5...v11.3.6) (2026-02-18)
+
 ### [11.3.5](https://github.com/mojaloop/database-lib/compare/v11.3.4...v11.3.5) (2026-01-13)
 
 ### [11.3.4](https://github.com/mojaloop/database-lib/compare/v11.3.3...v11.3.4) (2025-11-05)

package/audit-ci.jsonc

@@ -3,5 +3,7 @@
   // audit-ci supports reading JSON, JSONC, and JSON5 config files.
   // Only use one of ["low": true, "moderate": true, "high": true, "critical": true]
   "moderate": true,
-  "allowlist": []
+  "allowlist": [ // NOTE: Please add as much information as possible to any items added to the allowList
+    "GHSA-2g4f-4pwh-qvx6" // ajv ReDoS with $data option - transitive via eslint, override breaks standardjs linter
+  ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mojaloop/database-lib",
-  "version": "11.3.5",
+  "version": "11.3.7",
   "description": "Shared database code for central services",
   "main": "src/index.js",
   "license": "Apache-2.0",
@@ -44,12 +44,12 @@
     "release": "standard-version --releaseCommitMessageFormat 'chore(release): {{currentTag}} [skip ci]'"
   },
   "dependencies": {
-    "@mojaloop/central-services-error-handling": "13.1.5",
+    "@mojaloop/central-services-error-handling": "13.1.6",
     "async-exit-hook": "^2.0.1",
     "knex": "3.1.0",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "mysql": "^2.18.1",
-    "mysql2": "^3.16.0"
+    "mysql2": "^3.17.2"
   },
   "overrides": {
     "form-data": "4.0.4",
@@ -73,15 +73,20 @@
     },
     "cross-spawn": "7.0.6",
     "trim": "0.0.3",
-    "undici": "6.21.2",
+    "undici": "6.23.0",
     "yargs-parser": "21.1.1",
-    "validator": "13.15.22"
+    "validator": "13.15.22",
+    "fast-xml-parser": "5.3.6",
+    "qs": "6.14.2",
+    "axios": "1.13.5",
+    "lodash": "4.17.23",
+    "lodash-es": "4.17.23"
   },
   "devDependencies": {
-    "@mojaloop/sdk-standard-components": "19.18.4",
+    "@mojaloop/sdk-standard-components": "19.18.7",
     "audit-ci": "^7.1.0",
     "jest": "^30.2.0",
-    "npm-check-updates": "19.3.1",
+    "npm-check-updates": "19.3.2",
     "nyc": "17.1.0",
     "pre-commit": "1.2.2",
     "proxyquire": "2.1.3",

package/src/table.js

@@ -10,7 +10,7 @@ class Table {
   }
 
   insert (fields) {
-    return this._createBuilder().insert(fields, '*').then(inserted => {
+    return this._createBuilder().insert(fields).then(inserted => {
       if (inserted.length === 0) {
         throw new Error(`There was an error inserting the record to ${this._tableName}`)
       }
@@ -20,7 +20,7 @@ class Table {
 
   update (criteria, fields) {
     const builder = this._createBuilder()
-    return this._addWhere(criteria, builder).update(fields, '*').then(updated => {
+    return this._addWhere(criteria, builder).update(fields).then(updated => {
       if (updated.length === 0) return null
       return updated.length === 1 ? updated[0] : updated
     })

package/test/unit/table.test.js

@@ -36,7 +36,7 @@ Test('table', tableTest => {
       table.insert(fields)
         .then(record => {
           test.equal(record, inserted)
-          test.ok(builderStub.insert.calledWith(fields, '*'))
+          test.ok(builderStub.insert.calledWith(fields))
           test.end()
         })
     })
@@ -53,7 +53,7 @@ Test('table', tableTest => {
         })
         .catch(err => {
           test.equal(err.message, `There was an error inserting the record to ${tableName}`)
-          test.ok(builderStub.insert.calledWith(fields, '*'))
+          test.ok(builderStub.insert.calledWith(fields))
           test.end()
         })
     })
@@ -75,7 +75,7 @@ Test('table', tableTest => {
         .then(record => {
           test.equal(record, updated)
           test.ok(builderStub.where.calledWith('id', 1))
-          test.ok(updateStub.calledWith(fields, '*'))
+          test.ok(updateStub.calledWith(fields))
           test.end()
         })
     })
@@ -93,7 +93,7 @@ Test('table', tableTest => {
         .then(records => {
           test.equal(records, updated)
           test.ok(builderStub.where.calledWith('accountId', 3))
-          test.ok(updateStub.calledWith(fields, '*'))
+          test.ok(updateStub.calledWith(fields))
           test.end()
         })
     })
@@ -123,7 +123,7 @@ Test('table', tableTest => {
       table.update({}, fields)
         .then(records => {
           test.equal(records, updated)
-          test.ok(builderStub.update.calledWith(fields, '*'))
+          test.ok(builderStub.update.calledWith(fields))
           test.end()
         })
     })
@@ -137,7 +137,7 @@ Test('table', tableTest => {
       table.update(null, fields)
         .then(records => {
           test.equal(records, updated)
-          test.ok(builderStub.update.calledWith(fields, '*'))
+          test.ok(builderStub.update.calledWith(fields))
           test.end()
         })
     })