[Snyk] Fix for 1 vulnerabilities

[Sweetpurple616]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	461/1000 Why? Recently disclosed, Has a fix available, CVSS 3.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-DEBUG-3227433	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: sails-hook-grunt

The new version differs by 8 commits.

• 405b3ec 4.0.0
• fae8fec Merge pull request [Snyk] Fix for 3 vulnerable dependencies #2 from sailshq/upgrades
• 408524d 3.1.1
• 69e24d7 Regenerate shrinkwrap file
• dd83d09 Upgrade several dependencies to resolve vulnerability and deprecation warnings, and remove jst and coffee
• 1a99e13 Upgrade babel-core version to resolve vulnerabilities
• b2a173a Upgrade grunt version to resolve vulnerabilities
• 62248fe Skip node 0.10 and 0.12 tests on travis, because they're now failing due to the latest eslint.

See the full diff

Package name: sails-hook-organics

The new version differs by 24 commits.

• d32fcd9 0.16.1
• 4a9a27d Merge pull request [Snyk] Fix for 1 vulnerable dependencies #5 from sailshq/upgrade-mailgun
• 6d5b901 Remove pointless .intercept()
• ce0d07b Remove now-unused dependencies
• 28590a8 Update `sendHtmlEmail` to use machinepack-http instead of mailgun-js + mailcomposer, to resolve deprecation warnings and potential security vulnerabilities
• 16d9fe8 switch to [email protected], since that's the earliest version after 0.13.1 that has the vulnerabilities patched
• be681ea Update supported node versions in travis and appveyor files
• a5f7096 Upgrade version of mailgun-js to remove vulnerabilities
• b9979d1 Merge pull request [Snyk] Fix for 2 vulnerable dependencies #4 from hakash/master
• 87a8f11 Update spacing to match conventions
• 783657a Tweak descriptions and where to get URLs (https://mailgun.com/cp goes to a 404 nowadays)
• 5ccbcca Updated the descriptions for 'MAILGUN_HOST' to reflect default usecase.
• 8ba1ff5 Added support for non-breaking optional mailgun option 'host'
• a09bd96 0.16.0
• 3084c73 mp-http@7
• d26bf29 0.15.2
• 8113cae Remove fromStream again (because of encoding issues). Use sails-hook-uploads' .reservoir() method as a more complete solution for this. (Eventually, would be nice to backport that.)
• be4939e Expose strings.fromStream() and strings.template()
• 6f280df clean up .iterate()'s interface and complete the usage example
• 220b9a7 rough draft of .iterate()
• 6ff9aaa trivial
• d005907 Expand extendedDescriptions to provide an example of the strategy of using a dummy default argument as a "memo"
• 2db368c 0.15.1
• 510043d simultaneouslyForEach()

See the full diff

Package name: sails-hook-sockets

The new version differs by 29 commits.

• bade0f7 2.0.0
• 64d08ac 2.0.0-0
• 4e1fb5b Merge pull request Bump degenerator and sails-hook-organics #41 from balderdashy/upgrades
• fd20a5f Just pass in the full URL for sendHttpRequest
• 0b43d86 Revert "Nevermind, just run the redis tests anyway"
• c697c00 Nevermind, just run the redis tests anyway
• 37f1285 Revert "Try new way of skipping redis tests on appveyor"
• 052a44f Try new way of skipping redis tests on appveyor
• adb9084 Revert "Revert mp-http upgrade"
• b7514b9 Revert mp-http upgrade
• 8e05bce Remove TODO that's toDONE
• a506e88 Upgrade mp-http, and also comment out a test we've pretty much always been skipping because it doesn't matter based on the behavior of redis
• 8454a80 Try out a way of skipping redis tests on appveyor
• f4788a2 Don't set `return_buffers` in call to `createManager`, because of a change in the version of node_redis used by machinepack-redis
• 320b7f7 Fix warning about not being able to parse redis URL after upgrading machinepack-urls
• cadf099 Remove copy/pasted comment
• bab71cf Revert "Temporarily revert machinepack-redis upgrade"
• 629bfbe Temporarily revert machinepack-redis upgrade
• fa242a6 Don't pass through faulty meta in call to Redis.getConnection() (relies on fix in mp-redis 2.0.3)
• 8dd28a4 clarify that to run tests, you'll benefit from having the redis server expect a dummy password
• 5b1d961 Add note about something weird.
• 91dfa06 trivial
• 975ed17 Update CI config files
• 609a66b Fix usage of machinepack-redis `getConnection` after upgrading

See the full diff

Package name: sails-mysql

The new version differs by 28 commits.

• 962ab29 3.0.0
• b78d563 Merge pull request #361 from balderdashy/update-machinepack-mysql
• 706bf0d Update node versions in travis.yml
• 58850c2 Update package.json
• c980c20 2.0.0
• fbceafd Merge pull request #359 from balderdashy/upgrade-machinepack-mysql-dependency
• 345048d 1.0.3
• 0c79575 Merge pull request #360 from balderdashy/redact-passwords
• d9355f2 Update redact-passwords.js
• 9e9d3db add meta.password redacting
• 025e80c update node versions in appveyor
• baba304 machinepack-mysql ^3.1.0 -> ^4.0.0
• b6660e3 added redact-passwords.js from sails-postgresql
• 8b0f110 1.0.2
• c4e8f3c Merge pull request #358 from balderdashy/fix-travis-ci-tests
• 2e28b64 Update package.json
• 9856e0a remove MariaDB addon, update node versions
• faaa98d Revert "Update .travis.yml"
• 3b88718 Update .travis.yml
• 687b1a4 Update .travis.yml
• 7fa0b75 testing specific versions
• 62b0315 test switching to mariaDB 10.3
• 5629d4e error typo correction (#357)
• 8cf4dcc 1.0.1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)