[Snyk] Upgrade mongoose from 6.2.2 to 6.8.0 #319
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade mongoose from 6.2.2 to 6.8.0. See this package in npm: https://www.npmjs.com/package/mongoose See this project in Snyk: https://app.snyk.io/org/danneelssophie/project/caedcc91-c74a-408e-861b-bca4a7b37fc9?utm_source=github&utm_medium=referral&page=upgrade-pr
This was referenced Feb 26, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade mongoose from 6.2.2 to 6.8.0.
As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-MONGOOSE-2961688
Why? Proof of Concept exploit, Has a fix available, CVSS 7
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: mongoose
-
6.8.0 - 2022-12-05
- feat: add alpha support for Deno #12397 #9056
- feat: add deprecation warning for default strictQuery #12666
- feat: upgrade to MongoDB driver 4.12.1
- feat(schema): add doc as second params to validation message function #12564 #12651 IslandRhythms
- feat(document): add $clone method #12549 #11849 lpizzinidev
- feat(populate): allow overriding
- feat(schema+types): add { errorHandler: true } option to Schema post() for better TypeScript support #12723 #12583
- feat(debug): allow setting debug on a per-connection basis #12704 #12700 lpizzinidev
- feat: add rewind function to QueryCursor #12710 passabilities
- feat(types): infer timestamps option from schema #12731 #12069
- docs: change links to not link to api.html anymore #12644 hasezoey
-
6.7.5 - 2022-11-30
- fix(schema): copy indexes when calling add() with schema instance #12737 #12654
- fix(query): handle deselecting _id when another field has schema-level select: false #12736 #12670
- fix(types): support using UpdateQuery in bulkWrite() #12742 #12595
- docs(middleware): added note about execution policy on subdocuments #12735 #12694 lpizzinidev
- docs(validation): clarify context for update validators in validation docs #12738 #12655 IslandRhythms
-
6.7.4 - 2022-11-28
- fix: allow setting global strictQuery after Schema creation #12717 #12703 lpizzinidev
- fix(cursor): make eachAsync() avoid modifying batch when mixing parallel and batchSize #12716
- fix(types): infer virtuals in query results #12727 #12702 #12684
- fix(types): correctly infer ReadonlyArray types in schema definitions #12720
- fix(types): avoid typeof Query with generics for TypeScript 4.6 support #12712 #12688
- chore: avoid bundling .tgz files when publishing #12725 hasezoey
-
6.7.3 - 2022-11-22
- fix(document): handle setting array to itself after saving and pushing a new value #12672 #12656
- fix(types): update replaceWith pipeline stage #12715 coyotte508
- fix(types): remove incorrect modelName type definition #12682 #12669 lpizzinidev
- fix(schema): fix setupTimestamps for browser.umd #12683 raphael-papazikas
- docs: correct justOne description #12686 #12599 tianguangcn
- docs: make links more consistent #12690 #12645 hasezoey
- docs(document): explain that $isNew is false in post('save') hooks #12685 #11990
- docs: fixed line causing a "used before defined" linting error #12707 sgpinkus
-
6.7.2 - 2022-11-07
-
6.7.1 - 2022-11-02
-
6.7.0 - 2022-10-24
-
6.6.7 - 2022-10-21
- fix: correct browser build and improve isAsyncFunction check for browser #12577 #12576 #12392
- fix(query): allow overwriting discriminator key with overwriteDiscriminatorKey if strict: 'throw' #12578 #12513
-
6.6.6 - 2022-10-20
-
6.6.5 - 2022-10-05
-
6.6.4 - 2022-10-03
-
6.6.3 - 2022-09-30
-
6.6.2 - 2022-09-26
-
6.6.1 - 2022-09-14
-
6.6.0 - 2022-09-08
-
6.5.5 - 2022-09-07
-
6.5.4 - 2022-08-30
-
6.5.3 - 2022-08-25
-
6.5.2 - 2022-08-10
-
6.5.1 - 2022-08-03
-
6.5.0 - 2022-07-26
-
6.4.7 - 2022-07-25
-
6.4.6 - 2022-07-20
-
6.4.5 - 2022-07-18
-
6.4.4 - 2022-07-08
-
6.4.3 - 2022-07-05
-
6.4.2 - 2022-07-01
-
6.4.1 - 2022-06-27
-
6.4.0 - 2022-06-17
-
6.3.9 - 2022-06-17
-
6.3.8 - 2022-06-13
-
6.3.7 - 2022-06-13
-
6.3.6 - 2022-06-07
-
6.3.5 - 2022-05-30
-
6.3.4 - 2022-05-19
-
6.3.3 - 2022-05-09
-
6.3.2 - 2022-05-02
-
6.3.1 - 2022-04-21
-
6.3.0 - 2022-04-14
-
6.2.11 - 2022-04-13
-
6.2.10 - 2022-04-04
-
6.2.9 - 2022-03-28
-
6.2.8 - 2022-03-23
-
6.2.7 - 2022-03-16
-
6.2.6 - 2022-03-11
-
6.2.5 - 2022-03-09
-
6.2.4 - 2022-02-28
-
6.2.3 - 2022-02-21
-
6.2.2 - 2022-02-16
from mongoose GitHub release notes6.8.0 / 2022-12-05
localFieldandforeignFieldfor virtual populate #12657 #6963 IslandRhythms6.7.5 / 2022-11-30
6.7.4 / 2022-11-28
6.7.3 / 2022-11-22
Read more
Read more
Read more
6.6.7 / 2022-10-21
Read more
Commit messages
Package name: mongoose
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs