[Snyk] Upgrade mssql from 7.3.5 to 12.1.1

[RebelTat]

Snyk has created this PR to upgrade mssql from 7.3.5 to 12.1.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 29 versions ahead of your current version.

• The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	570	Proof of Concept
	Allocation of Resources Without Limits or Throttling SNYK-JS-AXIOS-12613773	570	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	570	Proof of Concept
	Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-9292519	570	Proof of Concept
	Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-9403194	570	No Known Exploit
	Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') SNYK-JS-AZUREIDENTITY-7246760	570	No Known Exploit
	Improper Authentication SNYK-JS-JSONWEBTOKEN-3180022	570	No Known Exploit
	Improper Restriction of Security Token Assignment SNYK-JS-JSONWEBTOKEN-3180024	570	No Known Exploit
	Use of a Broken or Risky Cryptographic Algorithm SNYK-JS-JSONWEBTOKEN-3180026	570	No Known Exploit

Release notes

Package name: mssql

• 12.1.1 - 2025-11-23
  

  12.1.1 (2025-11-23)

  Bug Fixes

  • better rendering of ConnectionError (a82be0c)
• 12.1.0 - 2025-11-04
  

  12.1.0 (2025-11-04)

  Features

  • add --tds-version flag on bin file as option from cli (ac2c211)
  • prepare tedious connection-pool to receive tdsVersion (973b131)
  • remove default value from --tds-version flag on commander (b29d037)
  • rollback to previous options spread on resolveConfig (67b6153)
• 12.0.0 - 2025-09-30
  

  12.0.0 (2025-09-30)

  ⚠ BREAKING CHANGES

  • Config objects are not longer cloned by the library.
    The objects are intended to be readonly and that no modification happens
    to them during the lifetime of the process, changing these values will result
    in undefined behaviour.

  Features

  • remove config object cloning to fix TokenCredential issues (5fcc7d7)
• 11.0.1 - 2024-07-03
  

  11.0.1 (2024-07-03)

  Bug Fixes

  • handle bigint types separately to int to avoid TypeError with BigInt param (b774084)
• 11.0.0 - 2024-06-18
  

  11.0.0 (2024-06-18)

  ⚠ BREAKING CHANGES

  • Node JS min support upgraded to >=18 & tedious version updated

  Features

  • drop node 16.x support (b5efe2f)

  Bug Fixes

  • support use of native bigint from tedious (421e78f)
• 10.0.4 - 2024-06-18
  

  10.0.4 (2024-06-18)

  Bug Fixes

  • revert tedious upgrade (2b35ef3), closes #1665
• 10.0.3 - 2024-06-18
  

  10.0.3 (2024-06-18)

  Bug Fixes

  • support use of native bigint from tedious (c56a458)
• 10.0.2 - 2024-01-16
  

  10.0.2 (2024-01-16)

  Bug Fixes

  • from now _acquire return always a promise to avoid uncatchable exception (55f5a9f)
• 10.0.1 - 2023-09-12
  

  10.0.1 (2023-09-12)

  Performance Improvements

  • use node: prefix to bypass require.cache call for builtins (145d562)
• 10.0.0 - 2023-09-06
  

  10.0.0 (2023-09-06)

  Features

  • upgrade tedious to v16 and drop Node 14 support (cd0bc02)

  BREAKING CHANGES

  • Drop support for NodeJS <= 14. Upgrade tedious version. Update CI to test NodeJS 20.
• 9.3.2 - 2023-09-06
• 9.3.1 - 2023-09-06
• 9.3.0 - 2023-09-04
• 9.2.1 - 2023-09-05
• 9.2.0 - 2023-08-28
• 9.1.3 - 2023-08-08
• 9.1.2 - 2023-08-02
• 9.1.1 - 2023-01-18
• 9.1.0 - 2023-01-17
• 9.0.1 - 2022-08-18
• 9.0.0 - 2022-08-09
• 8.1.4 - 2022-08-18
• 8.1.3 - 2022-08-08
• 8.1.2 - 2022-05-27
• 8.1.1 - 2022-05-18
• 8.1.0 - 2022-04-06
• 8.0.2 - 2022-02-07
• 8.0.1 - 2022-01-30
• 8.0.0 - 2022-01-30
• 7.3.5 - 2022-05-27

from mssql GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[RebelTat]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.