From 427090c9c3b54e1884fcdba0f584c53ada65ea83 Mon Sep 17 00:00:00 2001 From: Bob Van Looveren Date: Wed, 22 Jan 2020 15:40:47 +0100 Subject: [PATCH 1/3] Update mysql to 2.18.0 to support new Amazon RDS certificates See https://github.com/mysqljs/mysql/pull/2280 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 3a8e593..934d69c 100644 --- a/package.json +++ b/package.json @@ -23,7 +23,7 @@ "debug": "2.6.9", "@sailshq/lodash": "^3.10.2", "machine": "^15.0.0", - "mysql": "2.15.0", + "mysql": "^2.18.0", "waterline-sql-builder": "^1.0.0-2" }, "devDependencies": { From 041aafe0fc0fc1799e11943d9a2914d24bf584be Mon Sep 17 00:00:00 2001 From: Bob Van Looveren Date: Tue, 22 Sep 2020 11:37:36 +0200 Subject: [PATCH 2/3] Use sailshq/lodash 3.10.4 because vulnerability See https://snyk.io/vuln/SNYK-JS-SAILSHQLODASH-460129 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 934d69c..99cb524 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "license": "MIT", "dependencies": { "debug": "2.6.9", - "@sailshq/lodash": "^3.10.2", + "@sailshq/lodash": "^3.10.4", "machine": "^15.0.0", "mysql": "^2.18.0", "waterline-sql-builder": "^1.0.0-2" From 4ca8af043c75bdbe8802be8abde8852c199bbbf4 Mon Sep 17 00:00:00 2001 From: eashaw Date: Mon, 19 Jul 2021 15:43:37 -0500 Subject: [PATCH 3/3] locking mysql version to 2.18.0 We lock all dependencies not maintained by the Sails team to a specific version. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 99cb524..300787d 100644 --- a/package.json +++ b/package.json @@ -23,7 +23,7 @@ "debug": "2.6.9", "@sailshq/lodash": "^3.10.4", "machine": "^15.0.0", - "mysql": "^2.18.0", + "mysql": "2.18.0", "waterline-sql-builder": "^1.0.0-2" }, "devDependencies": {