dsh-db-tool 1.9.0 → 1.9.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +14 -0
- package/README.md +1 -1
- package/README_EN.md +1 -1
- package/package.json +1 -1
- package/vendor/sqlserver-driver.cjs +1046 -747
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,19 @@
|
|
|
1
1
|
# Changelog — dsh-db-tool
|
|
2
2
|
|
|
3
|
+
## 1.9.1
|
|
4
|
+
|
|
5
|
+
依赖安全与维护性升级（无代码改动，仅 `package-lock.json`）。
|
|
6
|
+
|
|
7
|
+
### 安全
|
|
8
|
+
|
|
9
|
+
- **`fast-uri` 3.1.8 → 3.1.9**：修复 4 个 URI 解析/规范化漏洞——URI scheme 伪造（百分号编码 scheme 不再被解码为活跃 scheme，CVE-2026-110306）、域名规范化时的 host 混淆（CVE-2026-110180）、相对引用规范化语义错误（CVE-2026-110095）、后缀引用中的 scheme 注入（CVE-2026-110725）。该包经 `ajv` ← `@stryker-mutator/core` 引入，仅用于变异测试，不在运行时代码路径中；项目自身的连接串解析使用原生 `new URL()`，不经过 fast-uri。实测确认修复生效：`%68ttp%3A%2F%2F...` 不再被解析出 scheme。
|
|
10
|
+
|
|
11
|
+
### 杂项
|
|
12
|
+
|
|
13
|
+
- **`vitest` 4.1.11 → 4.1.12**：mocker 加固手动与重定向 mock。
|
|
14
|
+
- **`vite` 8.3.1 → 8.3.5**：修复 build 阶段的 chunk import map 与 preload 依赖处理。
|
|
15
|
+
- **`@azure/msal-node` 6.0.1 → 7.1.2 / `@azure/identity` 4.13.3 → 4.14.1**：主版本跳跃，新增依赖 `is-in-ssh`、`powershell-utils`（均由 sindresorhus 维护）。该链路经 `tedious` → `@azure/identity` 引入；本项目仅支持 SQL 认证、不支持 Azure AD 认证，故运行时不会走到，升级属跟随上游维护。
|
|
16
|
+
|
|
3
17
|
## 1.9.0
|
|
4
18
|
|
|
5
19
|
前端挂载点迁移到 DSH 官方右侧栏，摆脱第三方 `dsh-better-sidebar` 依赖。
|
package/README.md
CHANGED
|
@@ -190,7 +190,7 @@ DSH 桌面端 0.2.0-rc.2+ 已捆绑 `dsh` 命令：
|
|
|
190
190
|
2. 安装插件（npm 安装须钉精确版本，`@latest` 会因 release-age 校验回落）：
|
|
191
191
|
|
|
192
192
|
```bash
|
|
193
|
-
dsh plugin --profile desktop add dsh-db-tool@1.9.
|
|
193
|
+
dsh plugin --profile desktop add dsh-db-tool@1.9.1 --registry=https://registry.npmjs.org/
|
|
194
194
|
```
|
|
195
195
|
|
|
196
196
|
3. **重启桌面端**生效
|
package/README_EN.md
CHANGED
|
@@ -190,7 +190,7 @@ DSH desktop 0.2.0-rc.2+ bundles the `dsh` command:
|
|
|
190
190
|
2. Install the plugin (npm installs must pin an exact version — `@latest` falls back to an older release due to release-age checks):
|
|
191
191
|
|
|
192
192
|
```bash
|
|
193
|
-
dsh plugin --profile desktop add dsh-db-tool@1.9.
|
|
193
|
+
dsh plugin --profile desktop add dsh-db-tool@1.9.1 --registry=https://registry.npmjs.org/
|
|
194
194
|
```
|
|
195
195
|
|
|
196
196
|
3. **Restart the desktop app** to load it
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "dsh-db-tool",
|
|
3
|
-
"version": "1.9.
|
|
3
|
+
"version": "1.9.1",
|
|
4
4
|
"description": "DSH community plugin: chat-operated multi-database admin tool with sidebar management, project-scoped grants, ro/rw modes and dangerous-operation confirmation",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "Apache-2.0",
|