RTC NPM Resource Changed PR-5.4-dev Pending

User tests: Successful: Unsuccessful:

avatar muhme
muhme
30 Oct 2025

Summary of Changes

This is a follow-up to #46186. The development dependency mysql was upgraded to mysql2 for GitHub Actions based System Tests. But the used version as currently five security vulnerabilities. This PR upgrades to the current version of NPM packet mysql2 to fix the security vulnerabilities. As it is a developer dependency, we do not ship its code to end users, so it is not that critical, but we have to fix it.

Updated to current version with npm install -D mysql2@3.15.3

Testing Instructions

  1. Code review
  2. You can check the mysql2 security vulnerabilities:
npm audit | awk "/^mysql2 /,/^$/"
  1. Optional: Running the System Tests by your own.

Actual result BEFORE applying this Pull Request

  • There are security vulnerabilities with NPM package mysql2.
  • GitHub Actions based System Tests are passing.

Expected result AFTER applying this Pull Request

  • There are no security vulnerabilities with NPM package mysql2.
  • GitHub Actions based System Tests are passing.
  • If you run the System Test by your own, please check before the PR as some may fail. Compare after the PR that no new/further tests fail.

Link to documentations

Please select:

  • Documentation link for docs.joomla.org:

  • No documentation changes for docs.joomla.org needed

  • Pull Request link for manual.joomla.org:

  • No documentation changes for manual.joomla.org needed

avatar muhme muhme - open - 30 Oct 2025
avatar muhme muhme - change - 30 Oct 2025
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 30 Oct 2025
Category NPM Change
avatar richard67 richard67 - change - 31 Oct 2025
Labels Added: NPM Resource Changed PR-5.4-dev
avatar richard67 richard67 - change - 31 Oct 2025
Status Pending Ready to Commit
avatar richard67
richard67 - comment - 31 Oct 2025

RTC after 2 approvals by maintainers.


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46383.

avatar richard67 richard67 - change - 31 Oct 2025
Labels Added: RTC
avatar richard67 richard67 - change - 31 Oct 2025
Status Ready to Commit Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 2025-10-31 09:47:57
Closed_By richard67
avatar richard67 richard67 - close - 31 Oct 2025
avatar richard67 richard67 - merge - 31 Oct 2025
avatar richard67
richard67 - comment - 31 Oct 2025

Thanks @muhme for the fix and @laoneo for the review.

Add a Comment

Login with GitHub to post a comment