Skip to content

build(deps): bump pymysql from 1.1.2 to 1.1.3 - #1646

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/pip/pymysql-1.1.3
May 4, 2026
Merged

build(deps): bump pymysql from 1.1.2 to 1.1.3#1646
github-actions[bot] merged 1 commit into
masterfrom
dependabot/pip/pymysql-1.1.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Copy link
Copy Markdown
Contributor

Bumps pymysql from 1.1.2 to 1.1.3.

Release notes

Sourced from pymysql's releases.

v1.1.3

What's Changed

New Contributors

Full Changelog: PyMySQL/PyMySQL@v1.1.2...v1.1.3

Changelog

Sourced from pymysql's changelog.

v1.1.3

Release date: 2026-05-01

Security

  • Fix Cursor.callproc() didn't escape procedure name. (#1206) There was a possibility of SQL injection when calling a procedure with a string received from an untrusted source as the procedure name.

    NOTICE: This change may cause backward compatibility issues. If you specified a procedure name like "dbname.funcname", the previous version called CALL dbname.funcname, but from this version, it will call CALL `dbname.funcname` so you cannot specify procedure name with database name anymore.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 4, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) May 4, 2026 02:28
Bumps [pymysql](https://github.com/PyMySQL/PyMySQL) from 1.1.2 to 1.1.3.
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v1.1.2...v1.1.3)

---
updated-dependencies:
- dependency-name: pymysql
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/pymysql-1.1.3 branch from e33c4e5 to 2f346cb Compare May 4, 2026 02:33
@github-actions
github-actions Bot merged commit 6301cd8 into master May 4, 2026
10 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/pymysql-1.1.3 branch May 4, 2026 02:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants