[Snyk] Fix for 2 vulnerabilities

[tghastings]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	753/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: grunt-contrib-coffee

The new version differs by 9 commits.

• 40bfa6b add back internal ci (#198)
• f9eec6e updating to coffeescript 2 (#196)
• 72e1818 Merge pull request #193 from Florian-R/coffee-1.11.1
• 634e41f Bump coffee-script to 1.11.1
• c643075 Remove trailing spaces.
• 9bcddc1 Update grunt-contrib-internal to v1.1.0.
• bdc062c Update grunt to 1.0.0
• dbb494f Update CHANGELOG.
• bd39fc5 Update dependencies.

See the full diff

Package name: grunt-contrib-jst

The new version differs by 11 commits.

• 376f0d0 fix up the line endings on windows
• ed88af9 v2.0.0
• 1bd3d2a Merge pull request #65 from shailesh-kanzariya/upgrade_lodash_to_4.17.20
• 0d595c2 updated ci script
• e659f27 modified engine prop to nodejs 4.x
• af22b11 bumped lodash, modified jst and test cases to work with latest lodash version
• 719a961 Normalize line endings.
• 285f3ec Trying to fix Windows tests; one is left broken.
• 806ddbe Minor lint tweaks.
• adb8c04 Add AppVeyor support.
• c8bf51f Update grunt-contrib-internal

See the full diff

Package name: grunt-contrib-watch

The new version differs by 16 commits.

• 6ec71e9 v1.0.1
• 7d20933 Update copyright year
• e3d19df Update ci configs
• d117574 Updating ci configs
• 99410a7 README.md: Fixed typos (#536)
• 7f8cf80 Add local grunt-cli
• ab6771e Drop back to [email protected] until the bad test helper can be sorted
• 2e2daa5 Update to [email protected]
• 3d7fa3a Avoid timing issue in tests because of the bad test helper
• 0130a16 Merge pull request #500 from gruntjs/deps
• 5289845 Update devDependencies.
• fd3ed7a Lint tweaks.
• e42386a Merge pull request #501 from cepko33/master
• 8c93077 Updated lodash and changed outdated 'contains' to 'includes'
• 986b8a9 Update CHANGELOG.
• 5e155ec Add AppVeyor for Windows testing.

See the full diff

Package name: grunt-sync

The new version differs by 1 commits.

• ca10eb6 Bumping deps

See the full diff

Package name: include-all

The new version differs by 12 commits.

• b74f353 3.0.0
• 6c877b0 Merge pull request [Snyk] Security upgrade grunt-sync from 0.5.2 to 0.6.2 #19 from balderdashy/use-sailshq-lodash
• 80834c3 Replace "lodash" with "sailshq/lodash"
• 4c34bd3 Merge pull request [Snyk] Fix for 1 vulnerabilities #18 from balderdashy/use-merge-dictionary-module
• d2f8bb7 Merge branch 'master' into use-merge-dictionary-module
• ffc1185 Fix nesting test to work on Windows
• ff0a21d Added test for merging arrays, and reorganized tests into "edge cases" suite
• 5f5f423 Add some comments just to remind ourselves what this test is doing.
• 4369f5e Use the `merge-dictionaries` module to safely merge modules in `.aggregate()`
• 4a40680 Update README.md
• d21d8c4 2.0.0
• 3314bc1 Don't clear ".node" files when deep-cleaning the cache

See the full diff

Package name: sails-disk

The new version differs by 85 commits.

• 15faa44 1.0.0
• a2b7ee6 1.0.0-12
• 9d7118c Only set footprint keys for uniqueness violations.
• a2c2261 Add some assertions.
• a222824 Update gitignore and scripts
• 3b3c334 1.0.0-11
• cef95b4 Support updating the primary key value, as long as it's not using _id as the column.
• aad2a15 Set _id column to value of primary key when creating records.
• 333e2d1 1.0.0-10
• c8a26c5 Add shim to replicate MongoDB's behavior w/ `{ $ne: null }` and empty arrays.
• bf92cb8 1.0.0-9
• af97943 Workaround issue with projections including only `_id`
• b5b985b Relax restrictions on using `_id` column in sails disk.
• f4adfd7 Add an entry in the `refCols` dictionary for every model, so we don't have to short-circuit checks for it later
• b494fd9 In `find`, deserialize Buffer objects into `ref` attributes where possible.
• 7aaaaa4 Merge pull request #58 from balderdashy/expose-lib
• 70ead96 (whoops) Add back 0.10 and 0.12 in appveyor.yml
• beabe7a Merge pull request #57 from balderdashy/expose-lib
• 9c80187 1.0.0-8
• f7a349d Actually, don't expose the static lib. (No reason to do so, and better to not introduce something experimental if there's any chance it could make an app dependent on random stuff in a dev-only adapter)
• 2d4d97e 1.0.0-7
• f2dd761 Rename afterwards function to avoid perceived scope conflict (whether or not it'd ever actually be a big deal, this avoids any potential future scope issues from refactoring, etc).
• 4051e5e 1.0.0-6
• 250c32e Handle stray error (and a couple of other trivial changes just from when I was reading through the code)

See the full diff

Package name: sails-mysql

The new version differs by 202 commits.

• e9ca5d0 1.0.0
• 1c8eba9 1.0.0-17
• 2384285 Same as 2cc4850eb0fc3ff58eeaef044c2b14379af1be32 but for 2 other occurrences.
• 2cc4850 Apply fix from eslint to properly pass through compileStatement() errors
• ba40d9a Update eslint
• ed86ee1 1.0.0-16
• 227e9ba Bump versions of mariadb tests-- and explicitly test node 8
• 917db33 Use mp-mysql@3 (see https://github.com/Memory leak balderdashy/sails#4264#issuecomment-353152823)
• 5e8ed7e Follow-up to 075d7590dfb5fc51ee7c3084df87261b46ea5356
• 075d759 Update machine runner to v15. (refs https://github.com/Memory leak balderdashy/sails#4264)
• 0d0503c Even better
• 6186297 Update language in config errors
• d1f0791 1.0.0-15
• d511f24 Allow `ref` type attributes to represent any object, not just Buffers.
• 3a62cf5 1.0.0-14
• b8c74aa Merge pull request #349 from balderdashy/revert-utf8mb4-default
• b98a2f0 Revert code that defaults to the `utf8mb4` character set.
• 987f467 Merge pull request #346 from balderdashy/support-emojis
• 3adc445 1.0.0-13
• 65aa28f lint fix
• 9fd09c9 1.0.0-12
• e9cbd78 Change default charset to support emojis. This also adds some comments and notes for the future.
• 6efdddc 1.0.0-11
• 056b12b use LONGTEXT by default because mysql truncates data silently

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic