[dependabot]

Bumps sqlite3 from 2.9.6 to 2.10.1.

Release notes

Sourced from sqlite3's releases.

2.10.1 / 2026-10-19

Dependencies

• Vendored sqlite is updated to v3.54.1 (from v3.54.0). This release contains a fix for a possible heap buffer overflow on 32-bit builds, including the precompiled x86-linux-gnu and x86-linux-musl gems. #756 @​flavorjones

Improved

• Database#define_aggregator no longer creates an anonymous class for each aggregate function it defines. Each invocation of the function still runs on a clone of the template object. #752 @​jhawthorn

48390cc2b809acd1280f5c9daaf3c2013833adb8a5ece9b0634f708651080ccd  gems/sqlite3-2.10.1-aarch64-linux-gnu.gem
db1bcddf98e4eeea80ca896f56aa3f9468364fa1ee8e042ddc6b628b5092fabb  gems/sqlite3-2.10.1-aarch64-linux-musl.gem
34a67a3fe84f705a0fad6f7aa4541579300644b9acdf414797e59929a6e3528b  gems/sqlite3-2.10.1-arm-linux-gnu.gem
e317adb8979b57dafd999b54410b4050296aa5d00caa664e3f75d876e2ae90e8  gems/sqlite3-2.10.1-arm-linux-musl.gem
45f74dad0a8ee57ae5fadfac39bf160d1f09fb0484a442223310d869cd957d92  gems/sqlite3-2.10.1-arm64-darwin.gem
bf5c7d7e8ce0253456777432c826a6f8f2c06e891686f1157f44548a53416a87  gems/sqlite3-2.10.1-x64-mingw-ucrt.gem
7b3f9eff7c5c26551800649312796203ded8a505bcdaf30cd915dd9ae5e9575c  gems/sqlite3-2.10.1-x86-linux-gnu.gem
8f193eb1b4a66156baaaedafac0de091533cf840f4b78cf3fa2019cde0388f10  gems/sqlite3-2.10.1-x86-linux-musl.gem
00d1cd2e8ecff5ad9fffa0c97de59d4f85c5fc54eada2587d53ca0bd933b7a5d  gems/sqlite3-2.10.1-x86_64-darwin.gem
661ecede31e23a412059cd8c684ed84e332f64f167e4a90902cf99e8ea2c8718  gems/sqlite3-2.10.1-x86_64-linux-gnu.gem
67c7c5443a930157b4e148f0f4cb9ab998ee7ecfa8ce56879a6b56d1d742b2be  gems/sqlite3-2.10.1-x86_64-linux-musl.gem
7ae52c91f5b766882cf44d2dbd26d2dbbb841606f0ec78df3be019bd07b13ff4  gems/sqlite3-2.10.1.gem

2.10.0 / 2026-10-13

Dependencies

• Vendored sqlite is updated to v3.54.0 (from v3.53.2). #750 @​flavorjones

  Notable changes in this version include:

  • ALTER TABLE now raises an error when adding, renaming, or dropping a column named ROWID, _ROWID_, or OID.
  • The authorizer callback is now invoked for SQL functions in the DEFAULT clauses of CREATE TABLE statements.
  • SQLite no longer supports Windows XP or earlier. On Windows, the precompiled gem and any installation that compiles the vendored sqlite now require Windows Vista or later.

Added

• ResultSet#each and #each_hash return an Enumerator when called without a block. Previously they raised LocalJumpError. #656 @​kch
• Introduce Database#serialize, which returns a database as a binary string, and Database#deserialize, which replaces a database with the contents of such a string. These wrap sqlite3_serialize() and sqlite3_deserialize(). Both methods are defined only when SQLite was compiled without SQLITE_OMIT_DESERIALIZE, and Database#deserialize also requires that the loaded SQLite is v3.54.0 or later. An image of a database in WAL mode cannot be queried after deserializing; see the Database#deserialize documentation. #685 @​Maaarcocr

Fixed

... (truncated)

Changelog

Sourced from sqlite3's changelog.

2.10.1 / 2026-10-19

Dependencies

• Vendored sqlite is updated to v3.54.1 (from v3.54.0). This release contains a fix for a possible heap buffer overflow on 32-bit builds, including the precompiled x86-linux-gnu and x86-linux-musl gems. #756 @​flavorjones

Improved

• Database#define_aggregator no longer creates an anonymous class for each aggregate function it defines. Each invocation of the function still runs on a clone of the template object. #752 @​jhawthorn

2.10.0 / 2026-10-13

Dependencies

• Vendored sqlite is updated to v3.54.0 (from v3.53.2). #750 @​flavorjones

  Notable changes in this version include:

  • ALTER TABLE now raises an error when adding, renaming, or dropping a column named ROWID, _ROWID_, or OID.
  • The authorizer callback is now invoked for SQL functions in the DEFAULT clauses of CREATE TABLE statements.
  • SQLite no longer supports Windows XP or earlier. On Windows, the precompiled gem and any installation that compiles the vendored sqlite now require Windows Vista or later.

Added

• ResultSet#each and #each_hash return an Enumerator when called without a block. Previously they raised LocalJumpError. #656 @​kch
• Introduce Database#serialize, which returns a database as a binary string, and Database#deserialize, which replaces a database with the contents of such a string. These wrap sqlite3_serialize() and sqlite3_deserialize(). Both methods are defined only when SQLite was compiled without SQLITE_OMIT_DESERIALIZE, and Database#deserialize also requires that the loaded SQLite is v3.54.0 or later. An image of a database in WAL mode cannot be queried after deserializing; see the Database#deserialize documentation. #685 @​Maaarcocr

Fixed

• Fix Database#statement_timeout= interrupting statements almost immediately instead of after the timeout elapsed, including re-executed prepared statements and calls to Database#execute_batch2. #737 @​palkan @​flavorjones

Improved

• On CRuby, Statement#types allocates fewer strings. Each declared type is downcased and interned in C, instead of allocating two strings per column. #743 @​jhawthorn

Changed

• ResultSet#each and #each_hash return the result set when called with a block. As a consequence, Database#execute and #execute2 called with a block return the closed ResultSet instead of nil. #656 @​kch
• Statement#columns and Statement#types return frozen arrays, and the strings in Statement#types are frozen. Code that mutates them now raises FrozenError. #743 @​jhawthorn
• Statement#column_decltype and Statement#types return UTF-8 strings. Previously they returned ASCII-8BIT strings. #743 @​jhawthorn

Commits

• f465056 version bump to v2.10.1
• 3fdb2d0 build(deps): bump ruby/setup-ruby (#755)
• eac117b build(deps-dev): update rubocop-minitest requirement (#754)
• 1102a6f build(deps-dev): update rake-compiler requirement from 1.3.1 to 1.3.2 (#753)
• 90d52d5 dep: update vendored sqlite to 3.54.1 (#756)
• 03af202 Merge pull request #752 from jhawthorn/aggregator-factories
• 5e65275 Replace define_aggregator's generated proxy class with a factory object
• 07186c3 version bump to v2.10.0
• 7ad6fc0 feat: Add Database#serialize and Database#deserialize methods (#685)
• c35ae35 Fix statement_timeout interrupting most queries (#737)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)