what stackpulse tracks
Sequelize releases from GitHub
StackPulse watches Sequelize release notes and keeps the original source link close to every summary.
#stacks/sequelize/orm
Sequelize release notes, breaking changes, and upgrade notes.
Feature-rich ORM for modern Node.js and TypeScript StackPulse turns upstream changelogs into scannable summaries with risky changes, deprecations, migration notes, and source links.
releases
5
breaking
1
security
1
deprecated
0
migrations
0
upgrade risk
Breaking changes and deprecations
Risky changes are separated from normal feature notes so you can scan upgrade impact before changing production dependencies.
migration notes
Source-backed next steps
Migration steps and recommended actions are only shown when the upstream release notes support them.
# latest_releases
source-backedv6.37.8criticalsecurityMar 7, 2026
v6.37.8
This release focuses on a security improvement to validate cast types in JSON where clauses, addressing a specific vulnerability.
affected
Users relying on JSON where clauses in Sequelize are affected by this security fix.
action
Upgrade to v6.37.8 to mitigate the security vulnerability.
release_signals
!Fixed CVE-2026-30951 by validating cast types in JSON where clauses to prevent potential security issues.
v7.0.0-alpha.48mediumfeatureprereleaseFeb 4, 2026
v7.0.0-alpha.48
This release focuses on bug fixes and introduces new features, including TypeScript conversion of core query logic and support for the Oracle dialect in Sequelize v7.
affected
Developers using Sequelize with MySQL, DB2, or Oracle dialects may be affected by updates and optimizations.
action
Update dependencies and test applications for compatibility with the new changes.
release_signals
+Converted `query.js` to TypeScript with caching, pooling, and optimizations.
+Added support for the Oracle dialect in Sequelize v7.
v7.0.0-alpha.47highbreakingfeatureprereleaseOct 25, 2025
v7.0.0-alpha.47
This release introduces a new `parameterStyle` feature replacing `bindParam`, along with several bug fixes for subquery join resolution, DB2 module updates, and PostgreSQL/SQLite3 improvements.
affected
Users relying on the `bindParam` option will need to migrate to `parameterStyle`.
action
Update code to use `parameterStyle` instead of `bindParam`.
release_signals
-The `bindParam` option has been replaced with `parameterStyle`, which defaults to `ParameterStyle.BIND`
+Added `parameterStyle` to replace `bindParam`
v6.37.7mediumfeatureMar 28, 2025
v6.37.7
This release includes a bug fix for Oracle databases, addressing an issue with `changeColumn` SQL for BLOB types to prevent implicit conversion.
affected
Users utilizing Oracle databases with BLOB columns are affected by this fix.
action
Upgrade to v6.37.7 if you are using Oracle databases and encountering issues with BLOB column changes.
v7.0.0-alpha.46mediumfeatureprereleaseMar 22, 2025
v7.0.0-alpha.46
This release focuses on bug fixes and introduces a few new features, including improvements to SQL utilities and support for counting grouped rows. It also updates dependencies like TypeScript and PostgreSQL.
affected
Developers using Sequelize for SQL query building or grouped row counting will benefit from the new features.
action
Update to this version to leverage the new SQL utilities and grouped row counting functionality.
release_signals
+Added `sql.join` and improved `sql.identifier` for better SQL query building.
+Added support for counting grouped rows in queries.