[Snyk] Upgrade mongoose from 7.4.3 to 7.5.1 #43
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade mongoose from 7.4.3 to 7.5.1. See this package in npm: https://www.npmjs.com/package/mongoose See this project in Snyk: https://app.snyk.io/org/brifr33/project/fde4b909-883b-405d-97bd-44f70f8e1017?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade mongoose from 7.4.3 to 7.5.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-MONGODB-5871303
Why? Has a fix available, CVSS 4.2
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: mongoose
-
7.5.1 - 2023-09-11
- fix: set default value for _update when no update object is provided and versionKey is set to false #13795 #13783 MohOraby
- fix: avoid unexpected error when accessing null array element on discriminator array when populating #13716 ZSabakh
- types(schematypes): use DocType for instance method this #13822 #13800 pshaddel
- types: remove duplicated 'exists' method in Model interface in models.d.ts #13818 ohzeno
- docs(model): replace outdated docs on deprecated findOneAndUpdate() overwrite option #13821 #13715
- docs: add example of using
-
7.5.0 - 2023-08-29
- feat: use mongodb driver v5.18.1
- feat: allow top level dollar keys with findOneAndUpdate(), update() for MongoDB 5 #13786
- fix(document): make array getters avoid unintentionally modifying array, defer getters until index access instead #13774
- feat: deprecate
- feat: add pathsToSkip option for Model.validate #13663 #10353
- feat: support alias when declaring index #13659 #13276
- fix(query): remove unnecessary check for atomic operators in findOneAndReplace() #13678
- types: add SearchMeta Interface for Atlas Search #13792 mreouven
- types(schematypes): add missing BigInt SchemaType #13787
-
7.4.5 - 2023-08-25
- fix(debug): avoid putting virtuals and getters in debug output #13778
- fix(model): make Model.bulkWrite() with empty array and ordered false not throw an error #13664
- fix(document): correctly handle inclusive/exclusive projections when applying subdocument defaults #13763 #13720
-
7.4.4 - 2023-08-22
- fix(connection): reset document state in between transaction retries #13726 #13698
- fix(cursor): bubble up resumeTokenChanged event from change streams #13736 #13607
- fix(query+populate): add refPath to projection by default, unless explicitly excluded #13758
- fix(schema): support 'ascending', 'asc', 'descending', 'desc' for index direction #13761 #13725
- fix(ChangeStream): add _bindEvents to addListener function for observable support #13759 yury-ivaniutsenka
- types: infer return type when using
- types: add missing typings for option includeResultMetadata #13747 #13746 Idnan
- types: export InferSchemaType #13737
- docs(middleware): clarify that query middleware applies to document by default #13734 #13713
- docs: add brief note on TypeScript generic usage for embedded discriminator path() calls #13728 #10435
- docs: link v7 migration guide #13742 Cooldogyum
- docs(migrating_to_6): add note about incompatible packages #13733
-
7.4.3 - 2023-08-11
- fix: avoid applying map property getters when saving #13704 #13657
- fix(query): allow deselecting discriminator key #13722 #13679
- types(models+query): return lean type when passing QueryOptions with lean: true to relevant model functions like find() and findOne() #13721 #13705
- types(schema): correct return type for Schema.prototype.indexes() #13718 #13702
- types: allow accessing options from pre middleware #13708 #13633
- types: add UpdateQueryKnownOnly type for stricter UpdateQuery type checking #13699 #13630
- types(schema): support required: { isRequired: true } syntax in schema definition #13680
- docs(middleware): clarify that doc.deleteOne() doesn't run query middleware currently #13707 #13669
from mongoose GitHub release notes7.5.1 / 2023-09-11
virtuals.pathsToSkipoption fortoObject()andtoJSON()#13798 RobertHunter-Pluto7.5.0 / 2023-08-29
overwriteoption for findOneAndUpdate() #135787.4.5 / 2023-08-25
7.4.4 / 2023-08-22
get(),markModified(), etc. with known property name literal #13739 maybesmurf7.4.3 / 2023-08-11
Commit messages
Package name: mongoose
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs