kysely 0.28.12 → 0.28.14

package/dist/cjs/dialect/mysql/mysql-query-compiler.d.ts

@@ -9,5 +9,13 @@ export declare class MysqlQueryCompiler extends DefaultQueryCompiler {
     protected getLeftIdentifierWrapper(): string;
     protected getRightIdentifierWrapper(): string;
     protected sanitizeIdentifier(identifier: string): string;
+    /**
+     * MySQL requires escaping backslashes in string literals when using the
+     * default NO_BACKSLASH_ESCAPES=OFF mode. Without this, a backslash
+     * followed by a quote (\') can break out of the string literal.
+     *
+     * @see https://dev.mysql.com/doc/refman/9.6/en/string-literals.html
+     */
+    protected sanitizeStringLiteral(value: string): string;
     protected visitCreateIndex(node: CreateIndexNode): void;
 }

package/dist/cjs/dialect/mysql/mysql-query-compiler.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MysqlQueryCompiler = void 0;
 const default_query_compiler_js_1 = require("../../query-compiler/default-query-compiler.js");
+const LITERAL_ESCAPE_REGEX = /\\|'/g;
 const ID_WRAP_REGEX = /`/g;
 class MysqlQueryCompiler extends default_query_compiler_js_1.DefaultQueryCompiler {
     getCurrentParameterPlaceholder() {
@@ -20,14 +21,24 @@ class MysqlQueryCompiler extends default_query_compiler_js_1.DefaultQueryCompile
         return '';
     }
     getLeftIdentifierWrapper() {
-        return '`';
+        return ID_WRAP_REGEX.source;
     }
     getRightIdentifierWrapper() {
-        return '`';
+        return ID_WRAP_REGEX.source;
     }
     sanitizeIdentifier(identifier) {
         return identifier.replace(ID_WRAP_REGEX, '``');
     }
+    /**
+     * MySQL requires escaping backslashes in string literals when using the
+     * default NO_BACKSLASH_ESCAPES=OFF mode. Without this, a backslash
+     * followed by a quote (\') can break out of the string literal.
+     *
+     * @see https://dev.mysql.com/doc/refman/9.6/en/string-literals.html
+     */
+    sanitizeStringLiteral(value) {
+        return value.replace(LITERAL_ESCAPE_REGEX, (char) => char === '\\' ? '\\\\' : "''");
+    }
     visitCreateIndex(node) {
         this.append('create ');
         if (node.unique) {

package/dist/cjs/query-builder/case-builder.d.ts

@@ -28,6 +28,14 @@ export declare class CaseThenBuilder<DB, TB extends keyof DB, W, O> {
      *
      * A `then` call can be followed by {@link Whenable.when}, {@link CaseWhenBuilder.else},
      * {@link CaseWhenBuilder.end} or {@link CaseWhenBuilder.endCase} call.
+     *
+     * **Note:** Numbers, booleans, and `null` values are inlined directly into the
+     * SQL query string (e.g. `then 1`, `then true`, `then null`) instead of being
+     * added as parameterized values (e.g. `then $1`). This allows the database
+     * engine to correctly infer the data type of the `case` expression result.
+     * Without this behavior, all results would be returned as strings.
+     *
+     * String values are always parameterized as usual.
      */
     then<E extends Expression<unknown>>(expression: E): CaseWhenBuilder<DB, TB, W, O | ExtractTypeFromValueExpression<E>>;
     then<V>(value: V): CaseWhenBuilder<DB, TB, W, O | V>;
@@ -47,6 +55,14 @@ export declare class CaseWhenBuilder<DB, TB extends keyof DB, W, O> implements W
      * Adds an `else` clause to the `case` statement.
      *
      * An `else` call must be followed by an {@link Endable.end} or {@link Endable.endCase} call.
+     *
+     * **Note:** Numbers, booleans, and `null` values are inlined directly into the
+     * SQL query string (e.g. `else 0`, `else false`, `else null`) instead of being
+     * added as parameterized values (e.g. `else $1`). This allows the database
+     * engine to correctly infer the data type of the `case` expression result.
+     * Without this behavior, all results would be returned as strings.
+     *
+     * String values are always parameterized as usual.
      */
     else<E extends Expression<unknown>>(expression: E): CaseEndBuilder<DB, TB, O | ExtractTypeFromValueExpression<E>>;
     else<V>(value: V): CaseEndBuilder<DB, TB, O | V>;

package/dist/cjs/query-compiler/default-query-compiler.js

@@ -392,7 +392,7 @@ class DefaultQueryCompiler extends operation_node_visitor_js_1.OperationNodeVisi
     }
     visitCreateTable(node) {
         this.append('create ');
-        if (node.frontModifiers && node.frontModifiers.length > 0) {
+        if (node.frontModifiers?.length) {
             this.compileList(node.frontModifiers, ' ');
             this.append(' ');
         }
@@ -404,22 +404,22 @@ class DefaultQueryCompiler extends operation_node_visitor_js_1.OperationNodeVisi
             this.append('if not exists ');
         }
         this.visitNode(node.table);
-        if (node.selectQuery) {
-            this.append(' as ');
-            this.visitNode(node.selectQuery);
-        }
-        else {
+        if (!node.selectQuery) {
             this.append(' (');
             this.compileList([...node.columns, ...(node.constraints ?? [])]);
             this.append(')');
-            if (node.onCommit) {
-                this.append(' on commit ');
-                this.append(node.onCommit);
-            }
-            if (node.endModifiers && node.endModifiers.length > 0) {
-                this.append(' ');
-                this.compileList(node.endModifiers, ' ');
-            }
+        }
+        if (node.onCommit) {
+            this.append(' on commit ');
+            this.append(node.onCommit);
+        }
+        if (node.endModifiers?.length) {
+            this.append(' ');
+            this.compileList(node.endModifiers, ' ');
+        }
+        if (node.selectQuery) {
+            this.append(' as ');
+            this.visitNode(node.selectQuery);
         }
     }
     visitColumnDefinition(node) {

package/dist/cjs/util/column-type.d.ts

@@ -144,7 +144,7 @@ export type Selectable<R> = DrainOuterGeneric<{
  * // }
  * ```
  */
-export type Insertable<R> = DrainOuterGeneric<{
+export type Insertable<R> = DrainOuterGeneric<object & {
     [K in NonNullableInsertKeys<R>]: InsertType<R[K]>;
 } & {
     [K in NullableInsertKeys<R>]?: InsertType<R[K]>;

package/dist/esm/dialect/mysql/mysql-query-compiler.d.ts

@@ -9,5 +9,13 @@ export declare class MysqlQueryCompiler extends DefaultQueryCompiler {
     protected getLeftIdentifierWrapper(): string;
     protected getRightIdentifierWrapper(): string;
     protected sanitizeIdentifier(identifier: string): string;
+    /**
+     * MySQL requires escaping backslashes in string literals when using the
+     * default NO_BACKSLASH_ESCAPES=OFF mode. Without this, a backslash
+     * followed by a quote (\') can break out of the string literal.
+     *
+     * @see https://dev.mysql.com/doc/refman/9.6/en/string-literals.html
+     */
+    protected sanitizeStringLiteral(value: string): string;
     protected visitCreateIndex(node: CreateIndexNode): void;
 }

package/dist/esm/dialect/mysql/mysql-query-compiler.js

@@ -1,5 +1,6 @@
 /// <reference types="./mysql-query-compiler.d.ts" />
 import { DefaultQueryCompiler } from '../../query-compiler/default-query-compiler.js';
+const LITERAL_ESCAPE_REGEX = /\\|'/g;
 const ID_WRAP_REGEX = /`/g;
 export class MysqlQueryCompiler extends DefaultQueryCompiler {
     getCurrentParameterPlaceholder() {
@@ -18,14 +19,24 @@ export class MysqlQueryCompiler extends DefaultQueryCompiler {
         return '';
     }
     getLeftIdentifierWrapper() {
-        return '`';
+        return ID_WRAP_REGEX.source;
     }
     getRightIdentifierWrapper() {
-        return '`';
+        return ID_WRAP_REGEX.source;
     }
     sanitizeIdentifier(identifier) {
         return identifier.replace(ID_WRAP_REGEX, '``');
     }
+    /**
+     * MySQL requires escaping backslashes in string literals when using the
+     * default NO_BACKSLASH_ESCAPES=OFF mode. Without this, a backslash
+     * followed by a quote (\') can break out of the string literal.
+     *
+     * @see https://dev.mysql.com/doc/refman/9.6/en/string-literals.html
+     */
+    sanitizeStringLiteral(value) {
+        return value.replace(LITERAL_ESCAPE_REGEX, (char) => char === '\\' ? '\\\\' : "''");
+    }
     visitCreateIndex(node) {
         this.append('create ');
         if (node.unique) {

package/dist/esm/query-builder/case-builder.d.ts

@@ -28,6 +28,14 @@ export declare class CaseThenBuilder<DB, TB extends keyof DB, W, O> {
      *
      * A `then` call can be followed by {@link Whenable.when}, {@link CaseWhenBuilder.else},
      * {@link CaseWhenBuilder.end} or {@link CaseWhenBuilder.endCase} call.
+     *
+     * **Note:** Numbers, booleans, and `null` values are inlined directly into the
+     * SQL query string (e.g. `then 1`, `then true`, `then null`) instead of being
+     * added as parameterized values (e.g. `then $1`). This allows the database
+     * engine to correctly infer the data type of the `case` expression result.
+     * Without this behavior, all results would be returned as strings.
+     *
+     * String values are always parameterized as usual.
      */
     then<E extends Expression<unknown>>(expression: E): CaseWhenBuilder<DB, TB, W, O | ExtractTypeFromValueExpression<E>>;
     then<V>(value: V): CaseWhenBuilder<DB, TB, W, O | V>;
@@ -47,6 +55,14 @@ export declare class CaseWhenBuilder<DB, TB extends keyof DB, W, O> implements W
      * Adds an `else` clause to the `case` statement.
      *
      * An `else` call must be followed by an {@link Endable.end} or {@link Endable.endCase} call.
+     *
+     * **Note:** Numbers, booleans, and `null` values are inlined directly into the
+     * SQL query string (e.g. `else 0`, `else false`, `else null`) instead of being
+     * added as parameterized values (e.g. `else $1`). This allows the database
+     * engine to correctly infer the data type of the `case` expression result.
+     * Without this behavior, all results would be returned as strings.
+     *
+     * String values are always parameterized as usual.
      */
     else<E extends Expression<unknown>>(expression: E): CaseEndBuilder<DB, TB, O | ExtractTypeFromValueExpression<E>>;
     else<V>(value: V): CaseEndBuilder<DB, TB, O | V>;

package/dist/esm/query-compiler/default-query-compiler.js

@@ -390,7 +390,7 @@ export class DefaultQueryCompiler extends OperationNodeVisitor {
     }
     visitCreateTable(node) {
         this.append('create ');
-        if (node.frontModifiers && node.frontModifiers.length > 0) {
+        if (node.frontModifiers?.length) {
             this.compileList(node.frontModifiers, ' ');
             this.append(' ');
         }
@@ -402,22 +402,22 @@ export class DefaultQueryCompiler extends OperationNodeVisitor {
             this.append('if not exists ');
         }
         this.visitNode(node.table);
-        if (node.selectQuery) {
-            this.append(' as ');
-            this.visitNode(node.selectQuery);
-        }
-        else {
+        if (!node.selectQuery) {
             this.append(' (');
             this.compileList([...node.columns, ...(node.constraints ?? [])]);
             this.append(')');
-            if (node.onCommit) {
-                this.append(' on commit ');
-                this.append(node.onCommit);
-            }
-            if (node.endModifiers && node.endModifiers.length > 0) {
-                this.append(' ');
-                this.compileList(node.endModifiers, ' ');
-            }
+        }
+        if (node.onCommit) {
+            this.append(' on commit ');
+            this.append(node.onCommit);
+        }
+        if (node.endModifiers?.length) {
+            this.append(' ');
+            this.compileList(node.endModifiers, ' ');
+        }
+        if (node.selectQuery) {
+            this.append(' as ');
+            this.visitNode(node.selectQuery);
         }
     }
     visitColumnDefinition(node) {

package/dist/esm/util/column-type.d.ts

@@ -144,7 +144,7 @@ export type Selectable<R> = DrainOuterGeneric<{
  * // }
  * ```
  */
-export type Insertable<R> = DrainOuterGeneric<{
+export type Insertable<R> = DrainOuterGeneric<object & {
     [K in NonNullableInsertKeys<R>]: InsertType<R[K]>;
 } & {
     [K in NullableInsertKeys<R>]?: InsertType<R[K]>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kysely",
-  "version": "0.28.12",
+  "version": "0.28.14",
   "description": "Type safe SQL query builder",
   "repository": {
     "type": "git",
@@ -68,6 +68,7 @@
       "default": "./dist/cjs/helpers/sqlite.js"
     }
   },
+  "sideEffects": false,
   "author": "Sami Koskimäki <sami@jakso.me>",
   "license": "MIT",
   "contributors": [
@@ -86,14 +87,14 @@
     "@types/pg-cursor": "^2.7.2",
     "@types/semver": "^7.7.1",
     "@types/sinon": "^21.0.0",
-    "better-sqlite3": "^12.6.2",
+    "better-sqlite3": "^12.8.0",
     "chai": "^6.2.2",
     "chai-as-promised": "^8.0.2",
     "esbuild": "^0.27.4",
     "jsr": "^0.14.3",
     "lodash": "^4.17.23",
     "mocha": "^11.7.5",
-    "mysql2": "^3.19.1",
+    "mysql2": "^3.20.0",
     "pathe": "^2.0.3",
     "pg": "^8.20.0",
     "pg-cursor": "^2.19.0",
@@ -101,7 +102,7 @@
     "playwright": "^1.58.2",
     "prettier": "^3.8.1",
     "semver": "^7.7.4",
-    "sinon": "^21.0.2",
+    "sinon": "^21.0.3",
     "std-env": "^4.0.0",
     "tarn": "^3.0.2",
     "tedious": "^19.2.1",