pg-promise 12.2.0 → 12.4.0

package/README.md

@@ -392,7 +392,7 @@ When a variable name ends with `:value`, or shorter syntax `#`, it is escaped as
 the trailing quotes are not added.
 
 Open values are primarily to be able to compose complete `LIKE`/`ILIKE` dynamic statements in external SQL files,
-without having to generate them in the code.
+without having to generate them in the code. They should not be used otherwise because they are not safe from SQL injection.
 
 i.e. you can either generate a filter like this in your code:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pg-promise",
-  "version": "12.2.0",
+  "version": "12.4.0",
   "description": "PostgreSQL interface for Node.js",
   "main": "lib/index.js",
   "typings": "typescript/pg-promise.d.ts",
@@ -42,23 +42,23 @@
   },
   "dependencies": {
     "assert-options": "0.8.3",
-    "pg": "8.16.3",
+    "pg": "8.17.2",
     "pg-minify": "1.8.0",
-    "spex": "4.0.2"
+    "spex": "4.1.0"
   },
   "peerDependencies": {
-    "pg-query-stream": "4.10.3"
+    "pg-query-stream": "4.11.2"
   },
   "devDependencies": {
-    "@eslint/js": "9.36.0",
-    "@types/node": "24.6.1",
+    "@eslint/js": "9.39.2",
+    "@types/node": "25.1.0",
     "coveralls": "3.1.1",
-    "cspell": "9.2.1",
-    "eslint": "9.36.0",
-    "globals": "16.4.0",
+    "cspell": "9.6.2",
+    "eslint": "9.39.2",
+    "globals": "17.2.0",
     "istanbul": "0.4.5",
     "jasmine-node": "3.0.0",
-    "jsdoc": "4.0.4",
+    "jsdoc": "4.0.5",
     "JSONStream": "1.3.5",
     "typescript": "5.9.3"
   }

package/typescript/pg-promise.d.ts

@@ -206,9 +206,11 @@ declare namespace pgPromise {
             skip?: string | string[] | ((c: Column<T>) => boolean)
         }): string
 
-        extend<S>(columns: Column<T> | ColumnSet<T> | Array<string | IColumnConfig<T> | Column<T>>): ColumnSet<S>
+        extend<K extends string>(columns: K[]): ColumnSet<T & Record<K, unknown>>
+        extend<S>(columns: Column<S> | ColumnSet<S> | Array<IColumnConfig<S> | Column<S>>): ColumnSet<T & S>
 
-        merge<S>(columns: Column<T> | ColumnSet<T> | Array<string | IColumnConfig<T> | Column<T>>): ColumnSet<S>
+        merge<K extends string>(columns: K[]): ColumnSet<T & Record<K, unknown>>
+        merge<S>(columns: Column<S> | ColumnSet<S> | Array<IColumnConfig<S> | Column<S>>): ColumnSet<T & S>
 
         prepare(obj: object): object