Upgrade peer dependency for objection to 3.0.0

[SandraShklyaeva]

Is there any plan to upgrade peer dependency for objection to 3.0.0 version?

[kibertoad]

Will try to! Hopefully there are no major incompatibilities.

[thisiskalnins]

Has there been any progress with this?

[hassan-jahan]

It seems there is a security bug in knex that put most objection environments at risk.

[kibertoad]

thanks, I need to work on the update

[hassan-jahan]

Thanks! To give more context:

knex  <2.4.0
Severity: high
Knex.js has a limited SQL injection vulnerability - https://github.com/advisories/GHSA-4jv9-3563-23j3
fix available via `npm audit fix --force`
Will install knex@2.4.2, which is a breaking change
node_modules/knex
  objection  0.5.0-alpha.0 - 2.2.18
  Depends on vulnerable versions of knex
  node_modules/objection
    objection-find  0.3.0 - 0.9.0 || >=2.1.0
    Depends on vulnerable versions of objection
    node_modules/objection-find