[Snyk] Upgrade sequelize from 6.35.1 to 6.37.8

[madisonmay]

Snyk has created this PR to upgrade sequelize from 6.35.1 to 6.37.8.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 11 versions ahead of your current version.

• The recommended version was released 2 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	SQL Injection SNYK-JS-SEQUELIZE-15456219	756	Proof of Concept

Release notes

Package name: sequelize

• 6.37.8 - 2026-03-07
  

  6.37.8 (2026-03-07)

  Security improvements

  • validate cast types in JSON where clauses (b147528) (CVE-2026-30951)
• 6.37.7 - 2025-03-28
  

  6.37.7 (2025-03-28)

  Bug Fixes

  • oracle: fix changeColumn SQL for BLOB to avoid implicit conversion (#17719) (5b7c801)
• 6.37.6 - 2025-03-04
  

  6.37.6 (2025-03-04)

  Meta

  • add call for new maintainers to README (#17701) (ef3bffb)
• 6.37.5 - 2024-10-25
  

  6.37.5 (2024-10-25)

  Bug Fixes

  • cast numbers in DataTypes.STRING to strings (#17564) (fce5ad3)
• 6.37.4 - 2024-10-04
• 6.37.3 - 2024-04-13
• 6.37.2 - 2024-03-29
• 6.37.1 - 2024-02-18
• 6.37.0 - 2024-02-11
• 6.36.0 - 2024-02-02
• 6.35.2 - 2023-12-11
• 6.35.1 - 2023-11-19

from sequelize GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

---

Note

Medium Risk
Upgrades the ORM used for SQL persistence, which can subtly affect query generation and migrations, but the change is a minor/patch-level dependency bump primarily for security fixes.

Overview
Updates the sequelize dependency to 6.37.8 in package.json and refreshes package-lock.json to pull in the new resolved version (including updated integrity metadata).

^{Reviewed by Cursor Bugbot for commit e0f9a2d. Bugbot is set up for automated code reviews on this repo. Configure here.}