jOOQ 3.20

Apply the Java 21 prompt first. These rules target jOOQ 3.20 on Java 21, using org.jooq for the Open Source Edition or org.jooq.pro for commercial editions, and were checked against 3.20.18. Hidden and readonly columns, client-side computed and audit columns, policies, and model API replacement require a commercial edition. Verify edition support before relying on those features.

Plain SQL and injection

• Build queries with generated tables and fields, pass values through typed DSL operations such as FIELD.eq(value) or DSL.val(value), and retain the default StatementType.PREPARED_STATEMENT for ordinary DML.
• Confine @PlainSQL entry points, including DSL.sql, string-based field, condition, and table overloads, and DSLContext.query, resultQuery, fetch, and execute overloads, to reviewed helpers with trusted SQL structure.
• Match the plain SQL overload to its placeholders: use ? with Object... bind arguments, or {0} with QueryPart... arguments such as DSL.val(userValue). A QueryPart argument can contain SQL structure; it is not automatically a bound value.
• Keep templates constant or assembled only from reviewed fragments; never concatenate, interpolate, or format request data into them. Placeholders inside literals, quoted identifiers, comments, or JDBC escapes are not substituted by the template mini-parser.
• Keep renderPlainSQLTemplatesAsRaw=false; enabling it or calling DSL.raw(String) bypasses template processing. Reserve raw SQL for trusted text because it does not bind or sanitize embedded input.
• Configure