Skip to content

Bump trilogy from 2.10.0 to 2.11.0#142

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/trilogy-2.11.0
Open

Bump trilogy from 2.10.0 to 2.11.0#142
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/trilogy-2.11.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 23, 2026

Bumps trilogy from 2.10.0 to 2.11.0.

Release notes

Sourced from trilogy's releases.

v2.11.0

Changed

  • Establish socket connection in Ruby #218

Added

  • Support caching_sha2_password over TCP without TLS by requesting the server RSA public key when needed. #262
  • Now raise an explicit error when a single connection is being used concurrently by multiple threads or fibers. #226.
  • Trilogy#abandon_results! as an optimized alternative to client.next_result while client.more_results_exist?. #264

Fixed

  • Handle server disconnects (Error 4031) correctly by raising Trilogy::BaseConnectionError instead of raising a QueryError / TRILOGY_INVALID_SEQUENCE_ID. #257.
  • Column names in results are now encoded using the connection encoding. #210.
  • Use correct malloc and free to avoid invalid pointer crashes #266 and #269
Changelog

Sourced from trilogy's changelog.

2.11.0

Changed

  • Establish socket connection in Ruby #218

Added

  • Support caching_sha2_password over TCP without TLS by requesting the server RSA public key when needed. #262
  • Now raise an explicit error when a single connection is being used concurrently by multiple threads or fibers. #226.
  • Trilogy#abandon_results! as an optimized alternative to client.next_result while client.more_results_exist?. #264

Fixed

  • Handle server disconnects (Error 4031) correctly by raising Trilogy::BaseConnectionError instead of raising a QueryError / TRILOGY_INVALID_SEQUENCE_ID. #257.
  • Column names in results are now encoded using the connection encoding. #210.
  • Use correct malloc and free to avoid invalid pointer crashes #266 and #269
Commits
  • f4648ae Release v2.11.0
  • 894e2a6 Lock minitest to fix Ruby 3.0 CI
  • df40264 Fix unused variable warning
  • 9f8ba20 Handle server disconnection
  • cdb7a78 Fix free(): invalid pointer by using free() instead of xfree() in buffer_checkin
  • 3fb9d2a CI: test against MySQL 9.6 instead of 9.5 (#267)
  • 612f4ab Merge pull request #264 from byroot/abandon_results
  • 8d04c04 Merge pull request #266 from byroot/wip-address-realloc-invalid-pointer
  • 34c4a6e Don't pass ruby_xmalloc memory to trilogy
  • 0f7c88f Implement Trilogy#abandon_results!
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [trilogy](https://github.com/trilogy-libraries/trilogy) from 2.10.0 to 2.11.0.
- [Release notes](https://github.com/trilogy-libraries/trilogy/releases)
- [Changelog](https://github.com/trilogy-libraries/trilogy/blob/main/CHANGELOG.md)
- [Commits](trilogy-libraries/trilogy@v2.10.0...v2.11.0)

---
updated-dependencies:
- dependency-name: trilogy
  dependency-version: 2.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Mar 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants