[Snyk] Security upgrade sequelize from 3.12.1 to 6.6.5

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	No	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	No	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-450202	No	Proof of Concept
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-LODASH-567746	No	Proof of Concept
	704/1000 Why? Has a fix available, CVSS 9.8	Prototype Pollution SNYK-JS-LODASH-590103	No	No Known Exploit
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	No	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-73638	No	Proof of Concept
	541/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	No	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-MINIMIST-559764	No	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090599	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090600	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090601	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090602	Yes	Proof of Concept
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:lodash:20180130	No	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Buffer Overflow npm:validator:20160218	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: sequelize

The new version differs by 250 commits.

• 56bb1d6 fix(dependency): upgrade validator (#13350)
• b674600 chores: keep only @ papb email in maintainers field
• 5fa695f meta: empty commit to rerun ci
• dc3ec53 fix(ci): fix semantic-release usage
• c7d7ca5 meta: forbid auto major version release
• cd2de40 fix(typings): make `Transactionable` compatible with `TransactionOptions` (#13334)
• 1a16b91 fix(utils): clone attributes before mutating them (#13226)
• 39299a6 docs(read-replication.md): fix typo (#13179)
• d0d7188 docs(eager-loading.md): fix typo (#13161)
• 1cfbd33 fix(data-types): use proper field name for `ARRAY(ENUM)` (#13210)
• 444f06f docs(migrations.md): grammar improvements (#13294)
• b33d78e fix(typings): fix `ignoreDuplicates` option (#13220)
• 6b0b532 fix(typings): allow `schema` for queryInterface methods (#13223)
• 63ceb73 fix(typings): restrict update typings (#13216)
• 143cc84 fix(typings): `returning` can specify column names (#13215)
• 8f2a0d5 fix(typings): model init returns model class, not instance (#13214)
• deeb5c6 fix(plurals): bump inflection dependency (#13260)
• 421f44d docs(model-querying-basics.md): fix typo (#13256)
• 68ef453 docs(model-querying-basics.md): fix typo (#13324)
• 1c1aa33 refactor: nonempty array check style
• 6dcb565 fix(bulk-create): `ON CONFLICT` with unique index (#13345)
• 97b3767 meta: improve `contributing.md` and `sscce.js`
• 0a90312 meta: remove unused Dockerfile
• aaf3234 meta: refactor mocha configuration

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic