Restart closed merge request !75: chore(deps): bump drizzle-orm from 0.45.1 to 0.45.2 at Restart / DeviceGalaxy

Restart
2026-04-03T17:07:10+01:00

Bumps drizzle-orm from 0.45.1 to 0.45.2.

Release notes

Sourced from drizzle-orm's releases.

0.45.2

Fixed sql.identifier(), sql.as() escaping issues. Previously all the values passed to this functions were not properly escaped causing a possible SQL Injection (CWE-89) vulnerability

Thanks to @​EthanKim88, @​0x90sh and @​wgoodall01 for reaching out to us with a reproduction and suggested fix

Commits

273c780 + 0.45.2 (#5534)

4aa6ecf Kit updates (#5490)

e8e6edf feat(drizzle-kit): support d1 via binding (#5302)