Bump validator and sails

[dependabot[bot]]

Bumps validator to 13.7.0 and updates ancestor dependency sails. These dependencies need to be updated together.

Updates validator from 3.41.2 to 13.7.0

Release notes

Sourced from validator's releases.

13.7.0

13.7.0

New Features

• #1706 isISO4217, currency code validator @​jpaya17

Fixes and Enhancements

• #1647 isFQDN: add allow_wildcard option @​fasenderos
• #1654 isRFC3339: Disallow prepended and appended strings to RFC 3339 date-time @​jmacmahon
• #1658 maintenance: increase code coverage @​tux-tn
• #1669 IBAN export list of country codes that implement IBAN @​dror-heller @​fedeci
• #1676 isBoolean: add loose option @​brybrophy
• #1697 maintenance: fix npm installation error @​rubiin
• #1708 isISO31661Alpha3: perf @​jpaya17
• #1711 isDate: allow users to strictly validate dates with . as delimiter @​flymans
• #1715 isCreditCard: fix for Union Pay cards @​shreyassai123
• #1718 isEmail: replace all dots in GMail length validation @​DasDingGehtNicht
• #1721 isURL: add allow_fragments and allow_query_components @​cowboy-bebug
• #1724 isISO31661Alpha2: perf @​jpaya17
• #1730 isMagnetURI @​tux-tn
• #1738 trim: remove regex to prevent ReDOS attack @​tux-tn
• #1747 maintenance: run scripts in parallel for build and clean @​sachinraja
• #1748 isURL: higher priority to whitelist @​deepanshu2506
• #1751 isURL: allow url with colon and no port @​MatteoPierro
• #1777 isUUID: fix for null version argument @​theteladras
• #1799 isFQDN: check more special chars @​MatteoPierro
• #1833 isURL: allow URL with an empty user @​MiguelSavignano
• #1835 unescape: fixed bug where intermediate string contains escaped @​Marcholio
• #1836 contains: can check that string contains seed multiple times @​Marcholio
• #1844 docs: add CDN instructions @​luiscobits
• #1848 isUUID: add support for validation of v1 and v2 @​theteladras
• #1941 isEmail: add host_blacklist option @​fedeci

New and Improved Locales

• isAlpha, isAlphanumeric:

  • #1716 hi-IN @​MiKr13
  • #1837 fi-FI @​Marcholio

• isPassportNumber:

  • #1656 ID @​rubiin
  • #1714 CN @​anirudhgiri
  • #1809 PL @​Ronqn
  • #1810 RU @​Theta-Dev

• isPostalCode:

  • #1788 LK @​nimanthadilz

... (truncated)

Changelog

Sourced from validator's changelog.

13.7.0

New Features

• #1706 isISO4217, currency code validator @​jpaya17

Fixes and Enhancements

• #1647 isFQDN: add allow_wildcard option @​fasenderos
• #1654 isRFC3339: Disallow prepended and appended strings to RFC 3339 date-time @​jmacmahon
• #1658 maintenance: increase code coverage @​tux-tn
• #1669 IBAN export list of country codes that implement IBAN @​dror-heller @​fedeci
• #1676 isBoolean: add loose option @​brybrophy
• #1697 maintenance: fix npm installation error @​rubiin
• #1708 isISO31661Alpha3: perf @​jpaya17
• #1711 isDate: allow users to strictly validate dates with . as delimiter @​flymans
• #1715 isCreditCard: fix for Union Pay cards @​shreyassai123
• #1718 isEmail: replace all dots in GMail length validation @​DasDingGehtNicht
• #1721 isURL: add allow_fragments and allow_query_components @​cowboy-bebug
• #1724 isISO31661Alpha2: perf @​jpaya17
• #1730 isMagnetURI @​tux-tn
• #1738 rtrim: remove regex to prevent ReDOS attack @​tux-tn
• #1747 maintenance: run scripts in parallel for build and clean @​sachinraja
• #1748 isURL: higher priority to whitelist @​deepanshu2506
• #1751 isURL: allow url with colon and no port @​MatteoPierro
• #1777 isUUID: fix for null version argument @​theteladras
• #1799 isFQDN: check more special chars @​MatteoPierro
• #1833 isURL: allow URL with an empty user @​MiguelSavignano
• #1835 unescape: fixed bug where intermediate string contains escaped @​Marcholio
• #1836 contains: can check that string contains seed multiple times @​Marcholio
• #1844 docs: add CDN instructions @​luiscobits
• #1848 isUUID: add support for validation of v1 and v2 @​theteladras
• #1941 isEmail: add host_blacklist option @​fedeci

New and Improved Locales

• isAlpha, isAlphanumeric:

  • #1716 hi-IN @​MiKr13
  • #1837 fi-FI @​Marcholio

• isPassportNumber:

  • #1656 ID @​rubiin
  • #1714 CN @​anirudhgiri
  • #1809 PL @​Ronqn
  • #1810 RU @​Theta-Dev

• isPostalCode:

  • #1788 LK @​nimanthadilz

• isIdentityCard:

... (truncated)

Commits

• 47ee5ad 13.7.0
• 496fc8b fix(rtrim): remove regex to prevent ReDOS attack (#1738)
• 45901ec Merge pull request #1851 from validatorjs/chore/fix-merge-conflicts
• 83cb7f8 chore: merge conflict clean-up
• f17e220 feat(isMobilePhone): add El Salvador es-SV locale
• 5b06703 feat(isMobilePhone): add Palestine ar-PS locale
• a3faa83 feat(isMobilePhone): add Botswana en-BW locale
• 26605f9 feat(isMobilePhone): add Turkmenistan tk-TM
• 0e5d5d4 feat(isMobilePhone): add Guyana en-GY locale
• f7ff349 feat(isMobilePhone): add Frech Polynesia fr-PF locale
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by profnandaa, a new releaser for validator since your current version.

Updates sails from 0.12.14 to 1.5.4

Release notes

Sourced from sails's releases.

v1.4.0

• Support sameSite:none in cookie options (thanks @​pixnlove!)

v1.3.1

• Updated the machine-as-action dependency to include a reminder about escaping strings with dynamic data when they're injected (Thanks @​dusterherz for letting us know about this)

v1.2.5

• Added more info to the error message shown when an app fails to lift
• Updated the sails-generate dependency

v1.2.4

• Fix resourceful PubSub for the update blueprint action, resolving #6824 (thanks @​Tarrask!)
• Re-enable afterDestroy lifecycle callback for the destroy blueprint action, fixing #5630
• Update CSRF hook to fix an issue with disabling CSRF for routes defined using regular expression syntax, resolving #6838
• Update session hook to fix an issue with double-prefixes, resolving #6541 (thanks @​travispwingo!)
• Update minimist dependency to resolve potential vulnerabilities
• Update various comments, error messages, and logs for clarity/consistency

v1.2.3

1.2.3

• Update eslint dev depdendency to get rid of vulnerability warnings
• Minor formatting/verbiage fixes

v1.2.2

• Update merge-defaults dependency to resolve potential vulnerabilities • Update sails-stringfile dependency to resolve potential vulnerabilities • Update sort-route-addresses dependency to resolve potential vulnerabilities

v1.2.1

• Added sails migrate for quickly running auto-migrations by hand
• The output of sails inspect no longer includes controller information
• When loading user hooks, if sails.config.loadHooks is specified, skip hooks whose names aren't explicitly included
• Increased time to display warning message in config/bootstrap.js from 5 seconds to 30 seconds
• Switched to using updateOne in the "update" blueprint
• Blueprint queries no longer include fetch: true by default, to avoid warnings from updateOne
• Update error mesage in default serverError response to use flaverr
• In lib/router/res.js, instead of always setting 'content-type' to 'application/json', only set it if res.get('content-type') is falsy
• Update flaverr dependency
• Update i18n-2 dependency to resolve deprecation warning
• Update rc dependency to address potential vulnerabilities
• Update machinepack-process dependency to address potential vulnerabilities
• Update machinepack-redis dependency to address potential vulnerabilities

v0.9.13: 0.9.13

No release notes provided.

v0.9.12: 0.9.12

No release notes provided.

Changelog

Sourced from sails's changelog.

Sails Changelog

1.2.0

• Added sails migrate for quickly running auto-migrations by hand
• The output of sails inspect no longer includes controller information
• When loading user hooks, if sails.config.loadHooks is specified, skip hooks whose names aren't explicitly included
• Increased time to display warning message in config/bootstrap.js from 5 seconds to 30 seconds
• Switched to using updateOne in the "update" blueprint
• Blueprint queries no longer include fetch: true by default, to avoid warnings from updateOne
• Update error mesage in default serverError response to use flaverr
• In lib/router/res.js, instead of always setting 'content-type' to 'application/json', only set it if res.get('content-type') is falsy
• Update flaverr dependency
• Update i18n-2 dependency to resolve deprecation warning
• Update rc dependency to address potential vulnerabilities
• Update machinepack-process dependency to address potential vulnerabilities
• Update machinepack-redis dependency to address potential vulnerabilities

1.1.0

As always, we owe a debt of gratitude to our contributors-- we mentioned you below next to the features/enhancements/fixes you contributed to. (Apologies to anyone we missed, there was a lot in this release! Let us know and we'll add you to the list.)

We especially want to thank those contributors who helped out with the documentation:

• Rachael Shaw
• Mike McNeil
• Ali Norouzi
• Ronny Medina
• Alex Schwarz
• Xavier Spriet
• Ian Harris
• Vladyslav Piskunov
• Michael Frederick
• Mark Strelecky
• Freddy
• pavan
• Scott Reed
• Mario Colque
• Okoli Lemuel
• ultimate-tester
• @​snidell
• Pika
• AYEDOUN Fiacre
• Tim Wisniewski
• Tom Saleeba
• s-slavchev
• Daniel Harvey
• Julien Le Coupanec
• floriancummings
• Bernardo Gomes
• Eli Peters

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by eashaw, a new releaser for sails since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.