[Snyk] Security upgrade sails from 0.11.5 to 0.12.12

[ellyish]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	591/1000 Why? Recently disclosed, Has a fix available, CVSS 6.1	Open Redirect SNYK-JS-EXPRESS-6474509	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: sails

The new version differs by 250 commits.

• 6d775fc 0.12.12
• b21974a 0.12.12-3
• b3d8fd8 Ditch Lodash chaining in blueprints hook.
• 18fb8a0 0.12.12-2
• bdcce2f Update changelog
• b13c078 Crank up that saltiness -- thanks @ Plazmaz! (Note: This only affects apps which explicitly do not provide their own session secret. In production, this is always accompanied by a warning message regardless.)
• 8c7234d Use @ sailshq/express
• 29f983d Bump skipper version
• 0d0f58f Remove Waterline dependency, and set sails-hook-orm dep back to 1.0.9.
• db68dd6 prerelease with waterline update
• 0ce0d86 0.12.11
• 0f938d8 Update CHANGELOG.md.
• 0cf841a 0.12.11-1
• 5232d6a Merge pull request #3902 from Hiro-Nakamura/0.12
• 7129304 fix mis typed variable names in badLocalDependency()
• 31da115 Add 0.12.11 to changelog
• 6e029ed 0.12.11-0
• 4bfa025 pesky little bugger
• ea842a3 lodash->sailshq/lodash to pick up the _.isFunction() I backported from JDs patch in Lodash 4. (see https://github.com/isFunction() fails on async function lodash/lodash#2768)
• e5ae9ba Bump lodash version in package.json.
• d37ee13 Remove individual per-method lodash deps (this is already done on v1.0, just backportin')
• 223567c rebase https://github.com/balderdashy/sails/commit/aa4594fa21259b3a7482ae85ef5358c724c41b95
• ec6be74 0.12.10
• c97014f Bump s-h-sockets SVR to avoid relying on a prerelease build

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Open Redirect