[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	776/1000 Why? Recently disclosed, Has a fix available, CVSS 9.8	Improper Input Validation SNYK-JS-SOCKETIOPARSER-3091012	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: sails

The new version differs by 250 commits.

• 69623b2 0.12.0
• 3c960f4 Update changelog
• df09bb6 Add 0.11.5 notes to changelog
• 0d0297e update changelog
• 66b9519 bump waterline dependencies to 0.11
• 043a629 Update CHANGELOG.md
• 1ae4fcb Update 0.11-migration-guide.md
• 4eb7539 Update 0.11-migration-guide.md
• 225c5e3 Updated changelog
• 54cbd39 Use local Sails in `sails console` if available
• fdce998 add resolution for https://github.com/[email protected] ignoring deeply nested changes balderdashy/sails#3526 to changelog
• 8eef18d Minor cleanup in blueprints hook.
• d6efda0 Specify explicit default value for `sails.config.cors.allRoutes`
• 2fc1620 Updated changelog
• 957defd Improved error message and added inline troubleshooting tips. Closes https://github.com/EMFILE + ENOSPC errors swallowed by Grunt hook instead of being logged as errors balderdashy/sails#3523
• b0f1217 Revert to [email protected] and pin dependency. See https://github.com/[email protected] ignoring deeply nested changes balderdashy/sails#3526 for more information."
• da59607 Improve sails --help output re: https://github.com/"Duplicate" entries in sails cli? balderdashy/sails#3539 (note that this removes support for common mispellings)
• 62ae56f t Merge branch 'master' of github.com:balderdashy/sails
• 183f460 0.12.0-rc9
• 20ff115 Better HTTPs tests
• 24a19bb Don't use sails-util for Lodash methods
• 7ae836b Ensure that SSL options (if provided) are buffers
• c638573 Update version of sails.io.js used in tests
• 9168001 Added "destroy" method to HTTP, used in .lower() for clean shutdown.

See the full diff

Package name: socket.io-client

The new version differs by 104 commits.

• b7e07ba chore(release): 3.0.0
• ffa2804 chore(release): 3.0.0-rc4
• 0939395 feat: emit an Error object upon middleware error
• 969debe refactor: rework of the Manager events
• a9127ce chore(release): 3.0.0-rc3
• 13e1db7 refactor: rename ERROR to CONNECT_ERROR
• 55f464f feat: add support for catch-all listeners
• 71d6048 feat: add bundle with msgpack parser
• f3cbe98 refactor: additional typings
• 7ddad2c feat: add volatile events
• b600e78 chore(release): 3.0.0-rc2
• 1789094 feat: move binary detection back to the parser
• c7998d5 refactor: add Manager and Socket typings
• 2c7c230 chore: publish the wrapper.mjs file
• a66473f chore: use socketio GitHub organization
• 946a9f0 chore: fix test script
• a838ff1 chore(release): 3.0.0-rc1
• b68f816 chore: bump debug
• cbabb03 feat: add ES6 module export
• e826992 refactor: remove the 'connect_timeout' event
• b60e909 refactor: remove the 'connecting' event
• 6494f61 feat: throw upon reserved event names
• 132f8ec feat: split the events of the Manager and Socket
• 6cd2e4e refactor: remove the packetBuffer array

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Input Validation