build(deps): bump @mikro-orm/core from 6.4.11 to 6.6.10 in the npm_and_yarn group across 1 directory

[dependabot]

Bumps the npm_and_yarn group with 1 update in the / directory: @mikro-orm/core.

Updates @mikro-orm/core from 6.4.11 to 6.6.10

Release notes

Sourced from @​mikro-orm/core's releases.

v6.6.10

6.6.10 (2026-03-26)

Bug Fixes

• core: handle JSON column type conversion in em.refresh() for detached entities (e41b500), closes #7383
• core: prevent prototype pollution in Utils.merge (06ed5f6)
• core: tighten query construction validation (ad3643e)
• schema: escape single quotes in enum CHECK constraints (#7397) (db19731), closes #7396 #7395

v6.6.9

6.6.9 (2026-03-05)

Bug Fixes

• core: fix findOne with entity refs for composite PKs with shared FK columns (6f95f72), closes #5629
• core: make entity prototype toJSON non-enumerable to prevent data leaks (c895808)
• core: prevent double JSON-encoding of nested embeddable arrays (309b278), closes #7233
• migrations: normalize snapshots and write on both up/down (#7236) (a07aca6), closes #7234
• migrations: skip snapshot write on migration:up to support read-only filesystems (c8584e8), closes #7232
• mysql: fix table.bigincrements() producing int instead of bigint (5660607), closes #7246

v6.6.8

6.6.8 (2026-03-01)

Bug Fixes

• core: allow using property accessor on to-one relations (06978c9), closes #7211
• core: fix double processing of JSON properties when reloading an entity (514ed87)
• core: preserve embeddable properties in toPOJO regardless of partial loading hints (c27dbae)
• core: preserve function expression indexes through metadata cache round-trip (#7229) (9ae8d20), closes #7238
• core: use full hydration in mergeData for initialized entities (5529308), closes #7205
• knex: handle $not operator inside relation filters (#7227) (d0dac2f), closes #7226
• migrations: delete snapshot file after migration:down (dfcc8c6), closes #7210
• postgres: fix phantom diffs for check constraints (#7224) (103346c)

v6.6.7

6.6.7 (2026-02-15)

Bug Fixes

• core: do not propagate cursor related options to populate queries (e6b9a6a), closes #7148
• core: ignore empty conditions produced by filters (1ebbfb0)
• guard prototype.toJSON against being called on prototype itself (#7152) (fa5290e), closes #7151
• migrations: support emitting multiline queries (fcf360a), closes #7185
• schema: do not ignore changes to entity level comments (b421c9d), closes #7187

... (truncated)

Changelog

Sourced from @​mikro-orm/core's changelog.

6.6.10 (2026-03-26)

Bug Fixes

• core: handle JSON column type conversion in em.refresh() for detached entities (e41b500), closes #7383
• core: prevent prototype pollution in Utils.merge (06ed5f6)
• core: tighten query construction validation (ad3643e)
• schema: escape single quotes in enum CHECK constraints (#7397) (db19731), closes #7396 #7395

6.6.9 (2026-03-05)

Bug Fixes

• core: fix findOne with entity refs for composite PKs with shared FK columns (6f95f72), closes #5629
• core: make entity prototype toJSON non-enumerable to prevent data leaks (c895808)
• core: prevent double JSON-encoding of nested embeddable arrays (309b278), closes #7233
• migrations: normalize snapshots and write on both up/down (#7236) (a07aca6), closes #7234
• migrations: skip snapshot write on migration:up to support read-only filesystems (c8584e8), closes #7232
• mysql: fix table.bigincrements() producing int instead of bigint (5660607), closes #7246

6.6.8 (2026-03-01)

Bug Fixes

• core: allow using property accessor on to-one relations (06978c9), closes #7211
• core: fix double processing of JSON properties when reloading an entity (514ed87)
• core: preserve embeddable properties in toPOJO regardless of partial loading hints (c27dbae)
• core: preserve function expression indexes through metadata cache round-trip (#7229) (9ae8d20), closes #7238
• core: use full hydration in mergeData for initialized entities (5529308), closes #7205
• knex: handle $not operator inside relation filters (#7227) (d0dac2f), closes #7226
• migrations: delete snapshot file after migration:down (dfcc8c6), closes #7210
• postgres: fix phantom diffs for check constraints (#7224) (103346c)

6.6.7 (2026-02-15)

... (truncated)

Commits

• a55e6f2 chore(release): v6.6.10 [skip ci]
• ad3643e fix(core): tighten query construction validation
• 06ed5f6 fix(core): prevent prototype pollution in Utils.merge
• db19731 fix(schema): escape single quotes in enum CHECK constraints (#7397)
• e41b500 fix(core): handle JSON column type conversion in em.refresh() for detached ...
• 823b3d5 ci: use next-v6 dist tag for canary releases on 6.x branch
• 2e53006 chore(release): update internal dependencies [skip ci]
• 85d6eb2 chore(release): v6.6.9 [skip ci]
• 5de970b chore(deps): bump mysql2 to 3.19.0
• 6f95f72 fix(core): fix findOne with entity refs for composite PKs with shared FK columns
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​mikro-orm/core since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[changeset-bot]

⚠️ No Changeset found

Latest commit: f5e8a9e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR