💉 CVE-2025-71316: Critical RCE (CVSS 9.2) in SQLite sqldiff. The '-L' flag enables arbitrary DLL loading via Unicode-to-ANSI argument injection in Windows runtime handling. Attack conditions apply but no privileges needed. secalerts.co/vulnerability/C…
I made a big change to a data pipeline refactoring last week. I ran the process then did an sqldiff on the million or so records and there was none. The data set was worst case.
That was my test case and feel perfectly safe that I didn’t break anything. I’d need 50 new tests
I had been thinking about merging and approvals ("pull requests") just this weekend. One idea was to simply use `sqldiff` against two embedded replicas. But I guess, I should wait for a bit to see what @tursodatabase brings. @iavins
Valentina Studio Pro Universal one license on all OS Linux, macOS & Windows, inc comprehensive #database admin tools visual data modeling tools, #report design, SQLDIFF & more. #DBA#sysadminbit.ly/3H9c1gl
SQLite has "sqldiff", although maybe the effort to import into SQLite just to compare the data might not be worth it.
Exporting as CSV/TSV/JSON and using text diffing tools might be just as easy.
Another fun option: SQLite has a sqldiff tool which can take two database files and figure out the minimal SQL needed to transform one into the other
So you could load the latest version from your YAML into a fresh DB and calculate the SQL diff using that sqlite.org/sqldiff.html