Bump sqlite3 from 2.9.3 to 2.9.5
Closed
DE
5mo ago+4+4+0123456789-4-4-0123456789
Bumps sqlite3 from 2.9.3 to 2.9.5.
Release notes
Sourced from sqlite3's releases.
2.9.5 / 2026-06-07
Dependencies
- Vendored sqlite is updated to v3.53.2 (from v3.53.1). #709
@flavorjonesSecurity / Stability
- Fix use-after-free issue with custom functions, when the same function name is used with multiple arities. See https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-28hh-pr2h-2w89 for more information. #710
@flavorjones- Fix use-after-free issue with aggregate functions, if a statement is used after a soft database close. See https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-j7fr-3v8c-3qc3 for more information. #711
@flavorjones78075b6337d3d182c6d2b4691049ed45cd220826160c9ea18946bf6a1de200dc gems/sqlite3-2.9.5-aarch64-linux-gnu.gem 18c801185deb4adc01ddb281e8f672a39e3d1729979ca91e39439cd3eac0402d gems/sqlite3-2.9.5-aarch64-linux-musl.gem 1bdfca0c7d63998c60b0f4a8e3c8df2d33800ccc4abd2d612eddbbbc92a4c48b gems/sqlite3-2.9.5-arm-linux-gnu.gem bae1109d12b2e9f588455967729b008e1ff4feb7761749df695019c9079913c6 gems/sqlite3-2.9.5-arm-linux-musl.gem d0cf444a70fc9395d513cfbcc1e6719e224aa645314e3824cb0474c721425aa2 gems/sqlite3-2.9.5-arm64-darwin.gem b00d5697994ee8589b6096694a2130aa5567db64373baca55ea98c9bf958f46a gems/sqlite3-2.9.5-x64-mingw-ucrt.gem c94b96b16f17796be6fa099d15218b52e396f55690c4760faaaefa21ebab9dd5 gems/sqlite3-2.9.5-x86-linux-gnu.gem 063a8c13cbadfe7f29453b1706cbdf91fca4a78d244f816ff20bac4fb259f1e4 gems/sqlite3-2.9.5-x86-linux-musl.gem 8e9caae38bd7ebb29cbeee3e7ab1d12dc2327d9a1b92c7fcf0dda05589627a81 gems/sqlite3-2.9.5-x86_64-darwin.gem 233dbcb6714148dd23bc5aeb33e8efd6eac974969564ddd5794c23d5f52b231e gems/sqlite3-2.9.5-x86_64-linux-gnu.gem e7d3a7474e8af0f96150c21abc203fbab5437206bfcdf11deab7741c0ca516f2 gems/sqlite3-2.9.5-x86_64-linux-musl.gem 04572973a3f943ad50a8adfffc8dd752a5f06e4c3db2026f71838fed8a982606 gems/sqlite3-2.9.5.gem2.9.4 / 2026-05-05
- Vendored sqlite is updated to v3.53.1 (from v3.53.0). #704
@flavorjonesecabed721e6eaad54601d2685f09029d90025efc8d931040dc89cb3f8a2080ec gems/sqlite3-2.9.4-aarch64-linux-gnu.gem ffb4255947fb54c8c3eeca97460c9702b40de91ce390455ef7367ca6a3929a31 gems/sqlite3-2.9.4-aarch64-linux-musl.gem 9ee2008b9fbec984c3c165b0d7eedd2bd2a415100b761bfa3a4c6fbec9208bf6 gems/sqlite3-2.9.4-arm-linux-gnu.gem 8dc1fe4da6977992cd62decf4a93ccf6cc2e124a5e6a340160d52092f70e837a gems/sqlite3-2.9.4-arm-linux-musl.gem 1d5aad413a815d236e96d43f05a1acc600b6cd086800770342a3f9c2877499ff gems/sqlite3-2.9.4-arm64-darwin.gem 40997c549b19e2fdfcc5e271f6bdd4d502179742c0bfd678da23d0d09b929848 gems/sqlite3-2.9.4-x64-mingw-ucrt.gem 5cab40ea734796802853501bd23b6162eec391dc37f3bf04bc2ffbda9c8bf93d gems/sqlite3-2.9.4-x86-linux-gnu.gem 936e2d4a428887fac15f55e26a18671fbb4e522bffaa43969fadf7b40ab25214 gems/sqlite3-2.9.4-x86-linux-musl.gem f280c476e360b73e86165a5e59b72801385b4a6c3a47f8af5ecefb9d90bec17f gems/sqlite3-2.9.4-x86_64-darwin.gem 537a3eda71b1df1336d0055cbebe55a7317c34870c192c7b6b9d8d0be6871847 gems/sqlite3-2.9.4-x86_64-linux-gnu.gem 3fc5e865b4be9a85d998203ef8d0c0fdcb92f20acf34a254346ff8a19088efec gems/sqlite3-2.9.4-x86_64-linux-musl.gem 6161c5b9c17886b289558e6c8082b28a22a814736d2433c9a67f4c6bfcde5c97 gems/sqlite3-2.9.4.gem </tr></table>
... (truncated)
Changelog
Sourced from sqlite3's changelog.
2.9.5 / 2026-06-07
Dependencies
- Vendored sqlite is updated to v3.53.2 (from v3.53.1). #709
@flavorjonesSecurity / Stability
- Fix use-after-free issue with custom functions, when the same function name is used with multiple arities. See https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-28hh-pr2h-2w89 for more information. #710
@flavorjones- Fix use-after-free issue with aggregate functions, if a statement is used after a soft database close. See https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-j7fr-3v8c-3qc3 for more information. #711
@flavorjones2.9.4 / 2026-05-05
- Vendored sqlite is updated to v3.53.1 (from v3.53.0). #704
@flavorjones
Commits
747e7deversion bump to v2.9.52bd436dFix use-after-free issue with custom functions (#710)b24e1e6Fix use-after-free issue with aggregate functions (#711)9abc955dep: update vendored sqlite to 3.53.2 (#709)a3f8e71For sqlcipher builds, prefer sqlcipher's header (#708)9292033build(deps): bump the actions group across 1 directory with 3 updates (#707)b79c841Introduce a security reporting policyae58899version bump to v2.9.4e16df53Merge pull request #704 from sparklemotion/dep-sqlite-3.53.12dc95ffdep: update vendored sqlite to 3.53.1- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Summary by cubic
Upgrade sqlite3 from 2.9.3 to 2.9.5 to address security and stability issues. This includes fixes for use-after-free bugs and updates the vendored SQLite to 3.53.2.
- Dependencies
- Bump
sqlite3to 2.9.5. - Vendored SQLite updated to 3.53.2; includes fixes for custom and aggregate function use-after-free.
- Bump