Update async package to resolve security vulnerabilities

.github/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: ['10', '12', '14', '16']
+        node-version: ['6', '8', '10', '12', '14', '16']
 
     name: test on nodejs ${{ matrix.node-version }}
 
@@ -70,7 +70,8 @@ jobs:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'
 
-      - uses: bahmutov/npm-install@v1
+      - name: install packages
+        run: npm install
 
       - name: run tests
         run: npm run test

Changelog.md

@@ -1,5 +1,9 @@
+### v7.0.0
+- Update `async` package from v2 to v3 to resolve security vulnerabilities ([858](../../pull/858))
+- Drop support for node < 6 (due to `async` package update)
+
 ### v6.2.0
-- [Feature] Add `.driver.generateQuery` function - same as `.driver.execQuery` but returns the SQL instead of executing it
+- [Feature] Add `.driver.generateQuery` function - same as `.driver.execQuery` but returns the SQL instead of executing it ([857](../../pull/857))
 
 ### v6.1.0
 - [Feature] Accept options when calling `Model.create` ([856](../../pull/856))

package.json

@@ -12,7 +12,7 @@
     "sqlite",
     "mongodb"
   ],
-  "version": "6.2.0",
+  "version": "7.0.0",
   "license": "MIT",
   "homepage": "http://dresende.github.io/node-orm2",
   "repository": "http://github.com/dresende/node-orm2.git",
@@ -57,11 +57,11 @@
     "test": "nyc make test"
   },
   "engines": {
-    "node": ">= 4.0.0"
+    "node": ">= 6.0.0"
   },
   "analyse": false,
   "dependencies": {
-    "async": "~2.6.3",
+    "async": "~3.2.3",
     "bluebird": "3.5.1",
     "enforce": "0.1.7",
     "hat": "0.0.3",
@@ -73,7 +73,7 @@
   "devDependencies": {
     "chalk": "~4.1.2",
     "glob": "~7.2.0",
-    "mocha": "~9.1.3",
+    "mocha": "~9.2.2",
     "mongodb": "~1.4.10",
     "mysql": "~2.18.1",
     "nyc": "~15.1.0",