All notable changes to this project will be documented in this file.

API compatible with node:sqlite from Node.js v25.9.0.

• SQLite 3.53.0: Updated from 3.52.0. Adds json_array_insert() / jsonb_array_insert() SQL functions, ALTER TABLE support for adding/removing NOT NULL and CHECK constraints, REINDEX EXPRESSIONS to rebuild expression indexes, VACUUM INTO reserve=N URI parameter, and new C APIs (sqlite3_str_truncate, sqlite3_str_free, sqlite3_carray_bind_v2, SQLITE_PREPARE_FROM_DDL, SQLITE_DBCONFIG_FP_DIGITS). Floating-point text conversion default changed from 15 to 17 significant digits. Full release notes.
• Upstream sync: Node.js v25.x-staging@ca2d6ea → ffa9b8f (includes content through Node.js v25.9.0). Upstream made a cosmetic lambda-capture fix in ApplyChangeset's filter callback; our port already used equivalent by-value captures.

• Docs: corrected stale "DataView parameter binding is not currently supported" note; BLOB binding accepts TypedArray or DataView input and returns Uint8Array.

• Test sync: skip test-sqlite-serialize.js — Node.js DatabaseSync.prototype.serialize() / deserialize() APIs are not yet ported.

• SQLite 3.51.3: Reverted from 3.52.0 (retracted by the SQLite team)

Promotion to v1.0.0 following API stabilization and 0.5.0 release.

API compatible with node:sqlite from Node.js v25.8.0.

• db.limits property: Get and set SQLite limits (length, sqlLength, column, exprDepth, compoundSelect, vdbeOp, functionArg, attach, likePatternLength, variableNumber, triggerDepth) at runtime. Supports Infinity to reset to compile-time maximum. Also accepts limits option in DatabaseSync constructor.
• Statement iterator invalidation: Calling stmt.run(), stmt.get(), stmt.all(), or stmt.iterate() now invalidates any active iterator on the same statement, throwing ERR_INVALID_STATE

• SQLite 3.52.0: Updated from 3.51.2

• Statement modes via enhance(): stmt.pluck(), stmt.raw(), stmt.expand() for better-sqlite3 compatibility
  • .pluck() returns only the first column value from queries
  • .raw() returns rows as arrays instead of objects
  • .expand() returns rows namespaced by table, correctly handling duplicate column names across JOINs
  • All three modes are mutually exclusive, matching better-sqlite3's toggle semantics
• stmt.database: Back-reference from prepared statements to their parent database instance
• EnhancedStatementMethods type: TypeScript interface for pluck(), raw(), expand(), and database

API compatible with node:sqlite from Node.js v25.6.1.

• enhance() function: Adds better-sqlite3-style .pragma() and .transaction() methods to any compatible database instance
• isEnhanced() type guard: Check if a database has enhanced methods
• Transaction helper: Automatic BEGIN/COMMIT/ROLLBACK with savepoint support for nested transactions
• Pragma convenience method: Simple API for reading and setting SQLite pragmas with simple option
• Node.js test sync script: npm run sync:tests downloads and adapts upstream Node.js SQLite tests
• Percentile extension: SQLITE_ENABLE_PERCENTILE now enabled, adding percentile(), median(), percentile_cont(), percentile_disc() SQL functions (Node.js v25+)
• Prepare options: db.prepare(sql, options) now accepts per-statement options (readBigInts, returnArrays, allowBareNamedParameters, allowUnknownNamedParameters) to override database-level defaults. This is a Node.js v25+ feature; node:sqlite on v24 and earlier silently ignores these options.
• StatementColumnMetadata type: stmt.columns() now returns richer metadata including column, database, table, and type properties alongside name
• SQLite 3.51.2: Updated from 3.51.1

• BREAKING: Removed API extensions to achieve exact parity with node:sqlite:
  • Removed stmt.finalize() method (use database close for cleanup)
  • Removed stmt.finalized property
  • Removed stmt[Symbol.dispose] (still available on DatabaseSync and Session)
  • Removed db.backup() instance method (use standalone backup(db, path) function instead)
• BREAKING: Session.changeset() and Session.patchset() now return Uint8Array instead of Buffer to match node:sqlite API
• BREAKING: Defensive mode now defaults to true instead of false to match Node.js v25+ behavior. Use { defensive: false } to restore old behavior.

• Alpine Linux / musl stability: Fixed native crashes by removing N-API reference cleanup from destructors that corrupted V8 JIT state
• Session lifecycle management: Fixed use-after-free, double-free, and mutex deadlock when databases are garbage collected before their sessions
• Worker thread stability: Added cleanup hooks and exception handling for worker thread termination
• Callback error preservation: applyChangeset() now preserves the original error message when JavaScript callbacks throw
• createTagStore() now throws errors with code: 'ERR_INVALID_STATE' property when database is closed, matching Node.js error format

• BREAKING: SQLTagStore.size changed from method to getter for Node.js API parity (Node.js PR #60246)
  • Before: sql.size()
  • After: sql.size
  • Note: This change was merged into Node.js main on December 11, 2025 and will appear in a future Node.js release. Current Node.js v24.x still uses sql.size() as a method.

• Windows ARM64 prebuilt binaries

• Error message handling on Windows ARM64 (ABI compatibility)
• Error handling consistency across platforms

• Node.js v25 API sync: SQLite 3.51.1, native Symbol.dispose in C++, Session class exposed in public API
• New database open options: readBigInts, returnArrays, allowBareNamedParameters, allowUnknownNamedParameters, defensive, open
• Defensive mode: enableDefensive() method to prevent SQL from deliberately corrupting the database
• Statement enhancements: setAllowUnknownNamedParameters() method, finalized property
• Type identification: sqlite-type symbol property on DatabaseSync (Node.js PR #59405)
• SQLite error properties: sqliteCode, sqliteExtendedCode, code, sqliteErrorString, systemErrno
• ARM64 prebuilds: macOS Apple Silicon and Windows ARM64 binaries
• Tagged template literals: db.createTagStore() for cached prepared statements (Node.js PR #58748)
• Authorization API: db.setAuthorizer() for security callbacks (Node.js PR #59928)
• Standalone backup: backup(srcDb, destFile, options?) for database backups with progress callbacks

• DataView parameter binding (previously returned garbage data)
• DataView and TypedArray return values in user-defined functions
• RETURNING clause metadata handling
• Null and empty values in user function return value conversion
• Native stability: N-API reference cleanup in aggregates/destructors, thread-local napi_env storage, statement-to-database reference tracking, deferred exception handling in authorizers

• Initial release of @photostructure/sqlite, standalone SQLite for Node.js 20+
• Compatible with Node.js built-in SQLite module API
• Core SQLite operations with DatabaseSync and StatementSync classes
• User-defined scalar and aggregate functions with window function support
• Database backup and restoration
• SQLite sessions and changesets for change tracking
• Extension loading with automatic platform-specific file resolution
• TypeScript definitions
• Cross-platform prebuilt binaries for Windows, macOS, and Linux (x64, ARM64)
• Test suite with 89+ tests
• Memory safety validation with Valgrind and sanitizers
• Performance benchmarking suite comparing to better-sqlite3
• Automated synchronization from Node.js upstream SQLite implementation
• CI/CD pipeline with security scanning and multi-platform builds

• Synchronous API: Blocking database operations for scripts and tools
• Parameter binding: All SQLite data types including BigInt
• Error handling: Detailed error messages with SQLite error codes
• Resource limits: Control memory usage and query complexity
• Safe integer handling: JavaScript-safe integer conversion with overflow detection
• Multi-process support: Concurrent access from multiple Node.js processes
• Worker thread support: Works in worker threads
• URI filename support: SQLite URI syntax for advanced database configuration
• Strict tables: SQLite strict table mode
• Double-quoted strings: Configurable SQL syntax compatibility

• Node.js 20.0.0 and later
• Windows (x64, ARM64)
• macOS (x64, ARM64)
• Linux (x64, ARM64), (glibc 2.28+, musl)