objection-find Upgrade peer dependency for objection to 3.0.0

Is there any plan to upgrade peer dependency for objection to 3.0.0 version?

Nov 22 '21 11:11 SandraShklyaeva

Will try to! Hopefully there are no major incompatibilities.

Nov 22 '21 11:11 kibertoad

Has there been any progress with this?

Aug 08 '22 23:08 thisiskalnins

It seems there is a security bug in knex that put most objection environments at risk.

Mar 12 '23 19:03 hassan-jahan

thanks, I need to work on the update

Mar 12 '23 19:03 kibertoad

Thanks! To give more context:

knex  <2.4.0
Severity: high
Knex.js has a limited SQL injection vulnerability - https://github.com/advisories/GHSA-4jv9-3563-23j3
fix available via `npm audit fix --force`
Will install [email protected], which is a breaking change
node_modules/knex
  objection  0.5.0-alpha.0 - 2.2.18
  Depends on vulnerable versions of knex
  node_modules/objection
    objection-find  0.3.0 - 0.9.0 || >=2.1.0
    Depends on vulnerable versions of objection
    node_modules/objection-find

Mar 12 '23 20:03 hassan-jahan