Packages

@prisma/adapter-mssql

7.10.1 · 15 Oct 2026Apache-2.0117k / weekRepositorynpmAtom feed

Upgrading @prisma/adapter-mssql From 7.5.0 to 7.10.1

7 releases in betweennotes for 2

  1. 7.5.0yours
  2. 7.6.0
  3. 7.7.0
  4. 7.8.0
  5. 7.9.0
  6. 7.9.1
  7. 7.10.0security
  8. 7.10.1target
  9. 8 pre
?
changes to make
0
advisories fixed
7+
new
10+
fixes

Counted from 2 of 7 release notes. Advisories are counted from the advisory database, in full.

Security

  • It also updates dependencies that had security advisories.

    7.10.1

  • @prisma/adapter-mariadb now depends on mariadb 3.5.4, which fixes several security advisories in 3.5.3.

    7.10.1

  • Dependencies with security advisories were updated: mysql2, fast-uri, deepmerge-ts, mariadb and source-map-js. (#30314, #30189, #30668)

    7.10.1

  • Binds explicitly to 127.0.0.1 instead of all network interfaces.

    7.10.0

  • Rejects browser requests from origins other than the active localhost or 127.0.0.1 Studio URL.

    7.10.0

  • No longer returns wildcard CORS headers.

    7.10.0

  • Applies the same protections across Node.js, Bun, and Deno.

    7.10.0

Release by release

  1. 7.10.1

    Security fix15 Oct 20262 fixes
    • security

      It also updates dependencies that had security advisories.

    • security

      @prisma/adapter-mariadb now depends on mariadb 3.5.4, which fixes several security advisories in 3.5.3.

    • security

      Dependencies with security advisories were updated: mysql2, fast-uri, deepmerge-ts, mariadb and source-map-js. (#30314, #30189, #30668)

    • fixed

      If the old transaction had committed, the new one failed with P2028;

    • fixed

      If the old transaction was still open, the new one silently ran as a savepoint inside another request's transaction.

  2. 7.10.0

    Security fix25 Aug 20267 new · 8 fixes
    • security

      Binds explicitly to 127.0.0.1 instead of all network interfaces.

    • security

      Rejects browser requests from origins other than the active localhost or 127.0.0.1 Studio URL.

    • security

      No longer returns wildcard CORS headers.

    • security

      Applies the same protections across Node.js, Bun, and Deno.

  3. 7.6.0 – 7.9.15 releases, no release note

28 other lines we could not sort, mostly version bumps

  • Parameter-chunked statements are now executed atomically in a transaction and rolled back if a later chunk fails. #29771

    7.10.0

  • Improved interactive transaction cleanup during $disconnect(), including transactions whose driver-level startup is still in progress. #28768

    7.10.0

  • Prevented transaction cleanup failures after a timeout or backend termination from becoming unhandled promise rejections. #29611

    7.10.0

  • Invalid Date values passed to $queryRaw or $executeRaw now throw PrismaClientValidationError instead of a generic error. #29718

    7.10.0

  • Deserialized Bytes values now own standalone ArrayBuffers rather than exposing unrelated contents from Node.js's shared Buffer pool. This applies to both regular and raw query results. #29701

    7.10.0

  • Result-extension compute callbacks now receive the current model name as a typed second argument:

    7.10.0

  • $on('query') callbacks run within the matching db_query span.

    7.10.0

  • Events from one operation share the same trace.

    7.10.0

  • Error events are recorded as span exceptions.

    7.10.0

  • Log events continue to be emitted when tracing is disabled or their reported span is unavailable.

    7.10.0

1 internal line (docs, tests, tooling) left out.