[Snyk] Upgrade sequelize from 6.28.0 to 6.37.3

[NelipeFunes]

Snyk has created this PR to upgrade sequelize from 6.28.0 to 6.37.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 21 versions ahead of your current version.
• The recommended version was released 6 months ago, on 2024-04-13.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Improper Filtering of Special Elements SNYK-JS-SEQUELIZE-3324088	629/1000 Why? Has a fix available, CVSS 8.3	No Known Exploit
	Prototype Pollution SNYK-JS-DOTTIE-3332763	629/1000 Why? Has a fix available, CVSS 8.3	Proof of Concept
	Information Exposure SNYK-JS-SEQUELIZE-3324089	629/1000 Why? Has a fix available, CVSS 8.3	No Known Exploit
	Access of Resource Using Incompatible Type ('Type Confusion') SNYK-JS-SEQUELIZE-3324090	629/1000 Why? Has a fix available, CVSS 8.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sequelize

• 6.37.3 - 2024-04-13
  

  6.37.3 (2024-04-13)

  Bug Fixes

  • postgres: use schema for foreign key constrains of a table (#17099) (6aba382)
• 6.37.2 - 2024-03-29
  

  6.37.2 (2024-03-29)

  Bug Fixes

  • add readOnly to the transaction options types and docs (#17226) (7c8972f)
• 6.37.1 - 2024-02-18
  

  6.37.1 (2024-02-18)

  Bug Fixes

  • types: Add definition of returning in SaveOptions. (#16954) (505467b)
• 6.37.0 - 2024-02-11
  

  6.37.0 (2024-02-11)

  Features

  • postgres: support connectionTimeoutMillis dialectOption (#14119) (e81200e)
• 6.36.0 - 2024-02-02
• 6.35.2 - 2023-12-11
• 6.35.1 - 2023-11-19
• 6.35.0 - 2023-11-12
• 6.34.0 - 2023-11-03
• 6.33.0 - 2023-09-08
• 6.32.1 - 2023-06-17
• 6.32.0 - 2023-06-01
• 6.31.1 - 2023-05-01
• 6.31.0 - 2023-04-09
• 6.30.0 - 2023-03-24
• 6.29.3 - 2023-03-10
• 6.29.2 - 2023-03-09
• 6.29.1 - 2023-03-07
• 6.29.0 - 2023-02-23
• 6.28.2 - 2023-02-22
• 6.28.1 - 2023-02-21
• 6.28.0 - 2022-12-20

from sequelize GitHub release notes

Commit messages

Package name: sequelize

• 6aba382 fix(postgres): use schema for foreign key constrains of a table (#17099)
• 7c8972f fix: add `readOnly` to the transaction options types and docs (#17226)
• 505467b fix(types): Add definition of `returning` in `SaveOptions`. (#16954)
• e81200e feat(postgres): support connectionTimeoutMillis dialectOption (#14119)
• a250058 feat(postgres): backport stream dialectOption to v6 (#16868)
• cb8ea88 fix: sort keys by depth in groupJoinData (#16823)
• 47cba67 fix(mssql): allow calling describeTable a table with a dot in its name (#16769)
• 5bfbb99 feat: backport `findModel` to v6 (#16705)
• 6c03176 fix(oracle): clean constraints (#16694)
• b204b5f fix(oracle): add missing default and not null condition to addColumn (#16619)
• b284d37 feat(oracle): add support for lock (#16643)
• 57025db meta: add node-gyp globally (#16696)
• 252e6d2 docs: add missing conflictAttributes to bulkCreate (#16573)
• 367caf3 feat(types): add TypeScript 5.2 support (#16442)
• e4c780c meta: update lockfile (#16265)
• 2eb7a5d fix(types): remove escape from query-interface types (#15944)
• a3213f0 fix: bump dependencies (#16119)
• 99c3530 fix: move `types` condition to the front (#16085)
• af4f0ae feat(oracle): add width support for numerictype (#16073)
• e07eefb feat(oracle): add new error messages introduced in new driver version (#16075)
• 5c8250e fix(oracle): reordered check constraint for unsigned numeric type (#16074)
• fd38e79 fix(oracle): For Raw queries avoid converting the input parameters passed (#16067)
• eb71077 meta: use Node 18 in CI (#16000)
• a9fd501 fix(postgres): adds support for minifying through join aliases (#15897)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs