[Snyk] Security upgrade sails from 0.12.14 to 1.1.0

[pantsel]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Poisoning SNYK-JS-QS-3153490	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: sails

The new version differs by 250 commits.

• 3bda9ca 1.1.0
• a127401 Fix typo
• adf3bab 1.1.0-3
• fb6cc8f Use PassThrough stream for file downloads in actions2 (brings in MaA prerelease)
• f709b1e Merge pull request #4486 from oaksofmamre/master
• 9ad1de3 Link names to repos
• ad0b7c4 Update changelog (thanks @ oaksofmamre!)
• 661dfac Fix one more test related to c694f2d2b1db4b9f397c52f540b19d7d4a4125f4
• 8868300 Fix expectations of test to match correct child process output (follow up to c694f2d2b1db4b9f397c52f540b19d7d4a4125f4)
• c694f2d Fix test now that async is no longer included as a dep. in newly generated sails apps (thanks to await and sails.helpers.flow via organics)
• 6e0d30e Pin merge-dictionaries
• f72f5f3 1.1.0-2
• 043623d Fix sails-generate SVR
• 73d1aa9 1.1.0-1
• 8d17695 use prerelease of sails-generate
• 13eb858 Update MODULES.md
• 2b5f6e4 Update MODULES.md
• ef8e98f 2nd follow up to 97082b8e067a490531758f6bcbc471e08874c209 to allow for "$" in route bindings
• a5dedce 1.1.0-0
• 100e4b5 Update error messages for bootstrap/initialize to reflect new reality.
• c66468b Clarify optional-ness of bootstrap callback in comment.
• eaafcc1 1.0.3-4
• 6447a4b Bump skipper dep
• 2eec58d minor clarification

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Poisoning