Skip to content

Conversation

@Ahim-Gillamore
Copy link
Contributor

snyk-top-banner

Snyk has created this PR to upgrade mongoose from 8.5.2 to 8.6.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 5 versions ahead of your current version.

  • The recommended version was released on a month ago.

Release notes
Package name: mongoose
  • 8.6.1 - 2024-09-03

    8.6.1 / 2024-09-03

    • fix(document): avoid unnecessary clone() in applyGetters() that was preventing getters from running on 3-level deep subdocuments #14844 #14840 #14835
    • fix(model): throw error if bulkSave() did not insert or update any documents #14837 #14763
    • fix(cursor): throw error in ChangeStream constructor if changeStreamThunk() throws a sync error #14846
    • types(query): add $expr to RootQuerySelector #14845
    • docs: update populate.md to fix missing match: { } #14847 makhoulshbeeb
  • 8.6.0 - 2024-08-28

    8.6.0 / 2024-08-28

    • feat: upgrade mongodb -> 6.8.0, handle throwing error on closed cursor in Mongoose with MongooseError instead of MongoCursorExhaustedError #14813
    • feat(model+query): support options parameter for distinct() #14772 #8006
    • feat(QueryCursor): add getDriverCursor() function that returns the raw driver cursor #14745
    • types: change query selector to disallow unknown top-level keys by default #14764 alex-statsig
    • types: make toObject() and toJSON() not generic by default to avoid type widening #14819 #12883
    • types: avoid automatically inferring lean result type when assigning to explicitly typed variable #14734
  • 8.5.5 - 2024-08-28
  • 8.5.4 - 2024-08-23
  • 8.5.3 - 2024-08-13
  • 8.5.2 - 2024-07-30
from mongoose GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Snyk has automatically assigned this pull request, set who gets assigned.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade mongoose from 8.5.2 to 8.6.1.

See this package in npm:
mongoose

See this project in Snyk:
https://app.snyk.io/org/ahim-gillamore/project/ee7fcd19-3ca5-400d-9ebb-c16580a5f566?utm_source=github&utm_medium=referral&page=upgrade-pr
@Ahim-Gillamore Ahim-Gillamore self-assigned this Sep 29, 2024
@vercel
Copy link

vercel bot commented Sep 29, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
nufacturing-api ✅ Ready (Inspect) Visit Preview 💬 Add feedback Sep 29, 2024 9:22am

Copy link
Contributor

@John-Lloyd-013 John-Lloyd-013 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 🤘😎

John-Lloyd-013
John-Lloyd-013 previously approved these changes Sep 30, 2024
@vercel
Copy link

vercel bot commented Sep 30, 2024

@John-Lloyd-013 is attempting to deploy a commit to the Ahim-GallimoreSoftrware's projects team on Vercel, but is not a member of this team. To resolve this issue, you can:

  • Make your repository public. Collaboration is free for open source and public repositories.
  • Upgrade to pro and add @John-Lloyd-013 as a member. A Pro subscription is required to access Vercel's collaborative features.
    • If you're the owner of the team, click here to upgrade and add @John-Lloyd-013 as a member.
    • If you're the user who initiated this build request, click here to request access.
    • If you're already a member of the Ahim-GallimoreSoftrware's projects team, make sure that your Vercel account is connected to your GitHub account.

To read more about collaboration on Vercel, click here.

@John-Lloyd-013
Copy link
Contributor

Fixed merge conflict but can't merge since account not Pro on 'Vercel'. Conflict was due to versioning. Following versions are now upgraded to:
"mongodb": 6.8.1, "mongoose": 8.6.1

@nfgallimore nfgallimore requested review from nfgallimore and removed request for nfgallimore October 1, 2024 00:46
@nfgallimore nfgallimore merged commit e97e974 into production Oct 1, 2024
6 of 9 checks passed
@nfgallimore nfgallimore deleted the snyk-upgrade-1891e8c5c184716c4f01f206b9436039 branch October 1, 2024 00:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants