build(deps): Replace sqlstring by sql-escaper

sidorares/node-mysql2#4054

Author: mbaumgartl

lib/context.js

@@ -1,6 +1,6 @@
 'use strict';
 
-const { escape, escapeId, raw } = require('mysql2/promise');
+const { escape, escapeId, raw } = require('sql-escaper');
 const Transaction = require('./transaction');
 const { insertStmt, updateStmt, deleteStmt, upsertStmt, bindParams, getRow, getColumn, getField } = require('./util');
 const { ImplementationError } = require('@florajs/errors');

lib/util.js

@@ -3,7 +3,7 @@
 const util = require('util');
 const { escape, escapeId } = require('mysql2/promise');
 const unname = require('named-placeholders')();
-const Sqlstring = require('sqlstring');
+const SqlEscaper = require('sql-escaper');
 
 const { ImplementationError } = require('@florajs/errors');
 
@@ -176,12 +176,12 @@ function bindParams(sql, values) {
         if (!Array.isArray(values) && isIterable(values)) {
             if (!Object.keys(values).length) throw new ImplementationError('"values" must not be an empty object');
             const [tpl, params] = unname(sql, values);
-            return Sqlstring.format(tpl, params);
+            return SqlEscaper.format(tpl, params);
         }
 
         if (Array.isArray(values) && values.every(isEscapable)) {
             if (!values.length) throw new ImplementationError('"values" must not be an empty array');
-            return Sqlstring.format(sql, values);
+            return SqlEscaper.format(sql, values);
         }
     }
 

package.json

@@ -50,7 +50,7 @@
     "@florajs/sql-parser": "^4.0.0",
     "mysql2": "^3.14.3",
     "named-placeholders": "^1.1.3",
-    "sqlstring": "^2.3.3"
+    "sql-escaper": "^1.3.1"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",