Log message:
databases/ruby-sqlite3: update to 2.9.6

2.9.6 (2026-08-11)

Security / Stability

* Fix a garbage collection bug where the argument array passed to a custom
  aggregate function's step was not visible to the GC, so arguments could be
  collected mid-conversion when the aggregate takes two or more arguments,
  corrupting the values passed to step or crashing the process.  See
  GHSA-mwm8-39rw-8826 for more information.  #733 @jeremy

Fixed

* Fix a leak where custom aggregate handler instances were never released,
  so a connection accumulated one instance per GROUP BY group per query for
  its lifetime.  #722 @djmb

* Fix GC compaction issues with custom functions, aggregates, collations,
  #trace and #authorizer=.  These callbacks were registered with sqlite by
  passing a raw Ruby object pointer as user data; keeping the object
  reachable prevented collection but not relocation, after which sqlite held
  a stale address and the next call could raise NoMethodError, return a
  wrong result, or segfault.  Affects applications that call GC.compact or
  run with GC.auto_compact = true.  The equivalent issue in #busy_handler
  was fixed in #466.  #723 @djmb

* Fix the private methods Database#open_v2 and #open16 silently replacing a
  live connection and leaking the previous connection handle when invoked
  via send on an open database.  They now raise SQLite3::Exception.  #729
  @flavorjones

* Fix TEXT values containing an embedded NUL byte being truncated at the
  first NUL when passed as arguments to functions created with
  Database#define_function.  #730 @flavorjones

* Fix an exception raised inside a Database#define_function block leaving
  the connection's sqlite mutex held, which deadlocked any other thread that
  later used the connection.  The exception now propagates to the caller and
  the connection remains usable.  #731 @flavorjones

* Database.new now raises ArgumentError when the filename or VFS name
  contains an embedded NUL byte (or an embedded 0x0000 code unit in a UTF-16
  filename), instead of silently opening a path truncated at the NUL.  #732
  @flavorjones

Improved

* When Database.new fails to open the database file, the underlying sqlite3
  connection handle is now closed immediately instead of waiting for the
  garbage collector to clean it up.  #719 @katafrakt

Log message:
databases/ruby-sqlite3: update to 2.9.5

2.9.5 (2026-06-07)

Dependencies

* Vendored sqlite is updated to v3.53.2 (from v3.53.1). #709 @flavorjones

Security / Stability

* Fix use-after-free issue with custom functions, when the same function
  name is used with multiple arities.  See GHSA-28hh-pr2h-2w89 for more
  information.  #710 @flavorjones

* Fix use-after-free issue with aggregate functions, if a statement is used
  after a soft database close.  See GHSA-j7fr-3v8c-3qc3 for more
  information.  #711 @flavorjones

Log message:
databases/ruby-sqlite3: update to 2.9.4

2.9.4 (2026-05-05)

* Vendored sqlite is updated to v3.53.1 (from v3.53.0).  #704 @flavorjones

Log message:
databases/ruby-sqlite3: update to 2.9.3

2.9.3 (2026-04-15)

* Vendored sqlite is updated to v3.53.0 (from v3.51.3). #696 @flavorjones

Log message:
databases/ruby-sqlite3: update to 2.9.2

2.9.2 (2026-03-15)

* Vendored sqlite is updated to v3.51.3 (from v3.51.2). #688 @flavorjones

Log message:
databases/ruby-sqlite3: update to 2.9.1

2.9.1 (2026-02-28)

* Vendored sqlite is updated to v3.51.2 (from v3.51.1). #683 @flavorjones

Log message:
databases/ruby-sqlite3: update to 2.9.0

2.9.0 (2025-12-27)

Ruby

* Introduce native gem packages for Ruby 4.0. @flavorjones
* Drop support for Ruby 3.1. @flavorjones

Added

* Introduce Statement#named_params to introspect on a parameterized SQL
  statement. #627 #642 @captn3m0

Improved

* Small improvements to docstrings and comments. @flavorjones @houyuanjie

New Contributors

* @captn3m0 made their first contribution in #642
* @houyuanjie made their first contribution in #671

Log message:
*: recursive bump for icu 78.1