Bump sqlite3 from 5.1.7 to 6.0.1

[dependabot]

Bumps sqlite3 from 5.1.7 to 6.0.1.

Release notes

Sourced from sqlite3's releases.

v6.0.1

• Fixed prebuilt binaries for alpine/musl

Full Changelog: TryGhost/node-sqlite3@v6.0.0...v6.0.1

v6.0.0

What's Changed

• Mark repository as unmaintained by @​lsinger in TryGhost/node-sqlite3#1844
• v6.0.0 — Bump all dependencies, SQLite, and modernise CI by @​jonatansberg in TryGhost/node-sqlite3#1857

New Contributors

• @​lsinger made their first contribution in TryGhost/node-sqlite3#1844
• @​jonatansberg made their first contribution in TryGhost/node-sqlite3#1857

Full Changelog: TryGhost/node-sqlite3@v5.1.7...v6.0.0

Commits

• a7badce v6.0.1
• 0ed0c97 Fixed Alpine/musl builds, replaced QEMU with native ARM runners
• 20a3bd2 v6.0.0
• d808e57 Bumped bundled SQLite from 3.45.0 to 3.52.0
• a962b72 Bumped all dependencies and modernised CI for Node 20+/22+/24+
• 66d054a 2026
• a85f9e8 Mark repository as unmaintained (#1844)
• 528e15a 2025
• 2f0c799 Updated actions/upload-artifact to v4
• 1609684 Updated bundled SQLite to v3.45.0
• See full diff in compare view

Maintainer changes

This version was pushed to npm by jonatan-ghost, a new releaser for sqlite3 since your current version.

[jasonacollins]

Holding off on this bump. Two concerns:

1. Upstream marked as unmaintained. Mark repository as unmaintained TryGhost/node-sqlite3#1844 marked the repo unmaintained immediately before v6 was cut, and v6.0.0/6.0.1 were published by a new releaser who had not previously shipped this package. Worth waiting and re-evaluating before pulling in.
2. Node floor conflict. v6 modernised CI for Node 20+/22+/24+ while package.json still declares "engines": { "node": ">=16.0.0" }. Merging as-is would silently break that contract; any future bump needs to raise the engines floor first.

Longer term, the better move is likely migrating to better-sqlite3 (actively maintained, synchronous API, generally faster) rather than tracking this package further. Leaving on 5.1.7 for now. Dependabot can reopen if it wants to.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.