Connector/Node.js 3.5.4 Changelog

Connector/Node.js 3.5.4 is a Stable (GA) release of MariaDB Connector/Node.js, released on 2026-08-07

Download Release Notes Changelog Connector/Node.js Overview

Release date: 7 Aug 2026

For the highlights of this release, see the release notes.

The revision number links will take you to the revision's page on GitHub. On GitHub you can view more details of the revision and view diffs of the code modified in that revision.

• Revision #ff43a2c - [misc] type definitions: StreamCallback declared as a value it never exports

• Revision #2044071 - Merge pull request #356 from GiHoon1123/fix-sqlerror-instanceof

• Revision #f7009c4 - [misc] fix SqlError losing its constructor shape via namespace import

• Revision #1d9ae05 - [misc] command queue: never discard a command that has not started

• Revision #a666b5e - [misc] test correction

• Revision #8efc399 - bump 3.5.4 version

• Revision #f050ee7 - [misc] callback API: give callbacks to the command layer instead of a promise

• Revision #1e79cee - [misc] test addition

• Revision #3fdaf48 - [CONJS-329] Exception thrown by a callback reported as a database error

• Revision #a0671c2 - [CONJS-361] Connection stops sending commands after a command ends on the last packet of a chunk

• Revision #db87409 - [misc] correct test for mysql

• Revision #784ca3d - [CONJS-356] ed25519 authentication correction for zero conf SSL

• Revision #5ffdf2b - [CONJS-366] Add maxAllowedColumns option to bound server-announced column count

• Revision #dc2ad11 - [CONJS-362] Limit parsec authentication PBKDF2 iteration factor and move derivation off the event loop

• Revision #6743b2f - [CONJS-369] Object keys interpolated as identifiers without escapeId in SET expansion

• Revision #ce6b4f6 - [misc] test correction

• Revision #95886df - [CONJS-368] SQL injection in text protocol when session uses NO_BACKSLASH_ESCAPES

• Revision #b2ca628 - [CONJS-367] Uninitialized process memory leaked to server via malformed GeoJSON Polygon parameter

• Revision #35d169a - [misc] TLS handshake crashes when the server presents no certificate #354

• Revision #cded360 - [CONJS-365] enable standard TLS certificate identity validation under Deno

• Revision #1257f3d - [misc] Gate TLS certificate fingerprint validation instead of computing it on every connection

• Revision #b20dea0 - [misc] auto-generate CommonJS type declarations (types/*.d.cts) from .d.ts

• Revision #444f1fd - [CONJS-364] Types / TypeNumbers enums throw at runtime

• Revision #165fa6a - Merge branch 'main' into develop

• Revision #31fe79a - Merge pull request #355 from BrianDouglasIE/feature/347-Types-not-exported

• Revision #f8a275f - [CONJS-363] typeCast accessors return corrupted values with prepared statements

• Revision #9584147 - [misc] batch small perf improvement

• Revision #302e0a2 - [misc] callback performance improvement

• Revision #3c01692 - [CONJS-359] default maxAllowedPacket value when not set

• Revision #71e241f - [CONJS-360] batch insertId honors insertIdAsNumber/supportBigNumbers options

• Revision #89be97e - [CONJS-358] Refuse multi-part packet reassembly before authentication

• Revision #f2b476b - [misc] correct CodeQL false positive

• Revision #613f079 - [CONJS-357] use codeql v4

• Revision #23930c0 - [misc] test correction for restrictedAuth

• Revision #116f3a9 - [CONJS-357] Add JavaScript SAST: CodeQL workflow + eslint-plugin-security with CI lint gate

• Revision #60312c9 - [misc] Replace hand-rolled connection-string regexes with the WHATWG URL parser

• Revision #5341d63 - [misc] Escape server-supplied filename before building LOCAL INFILE validation regex

• Revision #ea0a7bc - feature: export Types for both promise and callback api

• Revision #6f5bbf7 - [misc] enhance ChangeUser and Authentication classes to handle server certificate validation and error management

• Revision #f593066 - [misc] add an object parameter benchmark test

• Revision #0870a12 - [misc] Extend prototype-chain opts merge to change-user and batch-result path

• Revision #404fcbb - Prototype-chain merge instead of a flat clone

• Revision #81c55f7 - Merge branch 'main' into develop

• Revision #2feb7b4 - [misc] Enforce restrictedAuth on the initial handshake plugin

_{This page is: Copyright © 2026 MariaDB. All rights reserved.}