Skip to content

Bump pymysql from 1.1.2 to 1.1.3#109

Merged
GitTimeraider merged 1 commit into
developfrom
dependabot/pip/develop/pymysql-1.1.3
May 12, 2026
Merged

Bump pymysql from 1.1.2 to 1.1.3#109
GitTimeraider merged 1 commit into
developfrom
dependabot/pip/develop/pymysql-1.1.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps pymysql from 1.1.2 to 1.1.3.

Release notes

Sourced from pymysql's releases.

v1.1.3

What's Changed

New Contributors

Full Changelog: PyMySQL/PyMySQL@v1.1.2...v1.1.3

Changelog

Sourced from pymysql's changelog.

v1.1.3

Release date: 2026-05-01

Security

  • Fix Cursor.callproc() didn't escape procedure name. (#1206) There was a possibility of SQL injection when calling a procedure with a string received from an untrusted source as the procedure name.

    NOTICE: This change may cause backward compatibility issues. If you specified a procedure name like "dbname.funcname", the previous version called CALL dbname.funcname, but from this version, it will call CALL `dbname.funcname` so you cannot specify procedure name with database name anymore.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 4, 2026
Bumps [pymysql](https://github.com/PyMySQL/PyMySQL) from 1.1.2 to 1.1.3.
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v1.1.2...v1.1.3)

---
updated-dependencies:
- dependency-name: pymysql
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/develop/pymysql-1.1.3 branch from 72f126c to 5e0cbe9 Compare May 12, 2026 06:56
@GitTimeraider GitTimeraider merged commit 61c742d into develop May 12, 2026
2 checks passed
@dependabot dependabot Bot deleted the dependabot/pip/develop/pymysql-1.1.3 branch May 12, 2026 06:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant