Bump @mikro-orm/core from 6.6.3 to 6.6.10 in /packages/server

[dependabot]

Bumps @mikro-orm/core from 6.6.3 to 6.6.10.

Release notes

Sourced from @​mikro-orm/core's releases.

v6.6.10

6.6.10 (2026-03-26)

Bug Fixes

• core: handle JSON column type conversion in em.refresh() for detached entities (e41b500), closes #7383
• core: prevent prototype pollution in Utils.merge (06ed5f6)
• core: tighten query construction validation (ad3643e)
• schema: escape single quotes in enum CHECK constraints (#7397) (db19731), closes #7396 #7395

v6.6.9

6.6.9 (2026-03-05)

Bug Fixes

• core: fix findOne with entity refs for composite PKs with shared FK columns (6f95f72), closes #5629
• core: make entity prototype toJSON non-enumerable to prevent data leaks (c895808)
• core: prevent double JSON-encoding of nested embeddable arrays (309b278), closes #7233
• migrations: normalize snapshots and write on both up/down (#7236) (a07aca6), closes #7234
• migrations: skip snapshot write on migration:up to support read-only filesystems (c8584e8), closes #7232
• mysql: fix table.bigincrements() producing int instead of bigint (5660607), closes #7246

v6.6.8

6.6.8 (2026-03-01)

Bug Fixes

• core: allow using property accessor on to-one relations (06978c9), closes #7211
• core: fix double processing of JSON properties when reloading an entity (514ed87)
• core: preserve embeddable properties in toPOJO regardless of partial loading hints (c27dbae)
• core: preserve function expression indexes through metadata cache round-trip (#7229) (9ae8d20), closes #7238
• core: use full hydration in mergeData for initialized entities (5529308), closes #7205
• knex: handle $not operator inside relation filters (#7227) (d0dac2f), closes #7226
• migrations: delete snapshot file after migration:down (dfcc8c6), closes #7210
• postgres: fix phantom diffs for check constraints (#7224) (103346c)

v6.6.7

6.6.7 (2026-02-15)

Bug Fixes

• core: do not propagate cursor related options to populate queries (e6b9a6a), closes #7148
• core: ignore empty conditions produced by filters (1ebbfb0)
• guard prototype.toJSON against being called on prototype itself (#7152) (fa5290e), closes #7151
• migrations: support emitting multiline queries (fcf360a), closes #7185
• schema: do not ignore changes to entity level comments (b421c9d), closes #7187

... (truncated)

Changelog

Sourced from @​mikro-orm/core's changelog.

6.6.10 (2026-03-26)

Bug Fixes

• core: handle JSON column type conversion in em.refresh() for detached entities (e41b500), closes #7383
• core: prevent prototype pollution in Utils.merge (06ed5f6)
• core: tighten query construction validation (ad3643e)
• schema: escape single quotes in enum CHECK constraints (#7397) (db19731), closes #7396 #7395

6.6.9 (2026-03-05)

Bug Fixes

• core: fix findOne with entity refs for composite PKs with shared FK columns (6f95f72), closes #5629
• core: make entity prototype toJSON non-enumerable to prevent data leaks (c895808)
• core: prevent double JSON-encoding of nested embeddable arrays (309b278), closes #7233
• migrations: normalize snapshots and write on both up/down (#7236) (a07aca6), closes #7234
• migrations: skip snapshot write on migration:up to support read-only filesystems (c8584e8), closes #7232
• mysql: fix table.bigincrements() producing int instead of bigint (5660607), closes #7246

6.6.8 (2026-03-01)

Bug Fixes

• core: allow using property accessor on to-one relations (06978c9), closes #7211
• core: fix double processing of JSON properties when reloading an entity (514ed87)
• core: preserve embeddable properties in toPOJO regardless of partial loading hints (c27dbae)
• core: preserve function expression indexes through metadata cache round-trip (#7229) (9ae8d20), closes #7238
• core: use full hydration in mergeData for initialized entities (5529308), closes #7205
• knex: handle $not operator inside relation filters (#7227) (d0dac2f), closes #7226
• migrations: delete snapshot file after migration:down (dfcc8c6), closes #7210
• postgres: fix phantom diffs for check constraints (#7224) (103346c)

6.6.7 (2026-02-15)

... (truncated)

Commits

• a55e6f2 chore(release): v6.6.10 [skip ci]
• ad3643e fix(core): tighten query construction validation
• 06ed5f6 fix(core): prevent prototype pollution in Utils.merge
• db19731 fix(schema): escape single quotes in enum CHECK constraints (#7397)
• e41b500 fix(core): handle JSON column type conversion in em.refresh() for detached ...
• 823b3d5 ci: use next-v6 dist tag for canary releases on 6.x branch
• 2e53006 chore(release): update internal dependencies [skip ci]
• 85d6eb2 chore(release): v6.6.9 [skip ci]
• 5de970b chore(deps): bump mysql2 to 3.19.0
• 6f95f72 fix(core): fix findOne with entity refs for composite PKs with shared FK columns
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.