Packages

@prisma/adapter-mssql

7.10.1 · 15 Oct 2026Apache-2.0117k / weekRepositorynpmAtom feed

Upgrading @prisma/adapter-mssql From 6.17.1 to 7.10.1

21 releases in betweennotes for 3

Other targets from 6.17.1Newest 6.x6.19.3
7.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
  1. 6.17.1yours
  2. 4 releases
  3. 6.19.3security
  4. 7.0.0major
  5. 13 releases
  6. 7.10.0security
  7. 7.10.1target
  8. 8 pre
?
changes to make
0
advisories fixed
7+
new
10+
fixes

Counted from 3 of 21 release notes. Advisories are counted from the advisory database, in full.

Security

  • It also updates dependencies that had security advisories.

    7.10.1
  • @prisma/adapter-mariadb now depends on mariadb 3.5.4, which fixes several security advisories in 3.5.3.

    7.10.1
  • Dependencies with security advisories were updated: mysql2, fast-uri, deepmerge-ts, mariadb and source-map-js. (#30314, #30189, #30668)

    7.10.1
  • Binds explicitly to 127.0.0.1 instead of all network interfaces.

    7.10.0
  • Rejects browser requests from origins other than the active localhost or 127.0.0.1 Studio URL.

    7.10.0
  • No longer returns wildcard CORS headers.

    7.10.0
  • Applies the same protections across Node.js, Bun, and Deno.

    7.10.0
  • It updates the effect dependency to resolve a security vulnerability.

    6.19.3

Release by release

  1. 7.10.1

    Security fix15 Oct 20262 fixes
    • security

      It also updates dependencies that had security advisories.

    • security

      @prisma/adapter-mariadb now depends on mariadb 3.5.4, which fixes several security advisories in 3.5.3.

    • security

      Dependencies with security advisories were updated: mysql2, fast-uri, deepmerge-ts, mariadb and source-map-js. (#30314, #30189, #30668)

    • fixed

      If the old transaction had committed, the new one failed with P2028;

    • fixed

      If the old transaction was still open, the new one silently ran as a savepoint inside another request's transaction.

  2. 7.10.0

    Security fix25 Aug 20267 new · 8 fixes
    • security

      Binds explicitly to 127.0.0.1 instead of all network interfaces.

    • security

      Rejects browser requests from origins other than the active localhost or 127.0.0.1 Studio URL.

    • security

      No longer returns wildcard CORS headers.

    • security

      Applies the same protections across Node.js, Bun, and Deno.

  3. 7.0.0 – 7.9.114 releases, no release note

  4. 6.19.3

    Security fix1 Apr 2026
    • security

      It updates the effect dependency to resolve a security vulnerability.

  5. 6.18.0 – 6.19.24 releases, no release note

28 other lines we could not sort, mostly version bumps
  • Parameter-chunked statements are now executed atomically in a transaction and rolled back if a later chunk fails. #29771

    7.10.0
  • Improved interactive transaction cleanup during $disconnect(), including transactions whose driver-level startup is still in progress. #28768

    7.10.0
  • Prevented transaction cleanup failures after a timeout or backend termination from becoming unhandled promise rejections. #29611

    7.10.0
  • Invalid Date values passed to $queryRaw or $executeRaw now throw PrismaClientValidationError instead of a generic error. #29718

    7.10.0
  • Deserialized Bytes values now own standalone ArrayBuffers rather than exposing unrelated contents from Node.js's shared Buffer pool. This applies to both regular and raw query results. #29701

    7.10.0
  • Result-extension compute callbacks now receive the current model name as a typed second argument:

    7.10.0
  • $on('query') callbacks run within the matching db_query span.

    7.10.0
  • Events from one operation share the same trace.

    7.10.0
  • Error events are recorded as span exceptions.

    7.10.0
  • Log events continue to be emitted when tracing is disabled or their reported span is unavailable.

    7.10.0

1 internal line (docs, tests, tooling) left out.