[Snyk] Upgrade mongoose from 5.11.16 to 5.12.2

[snyk-bot]

Snyk has created this PR to upgrade mongoose from 5.11.16 to 5.12.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 7 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2021-03-22.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-MONGOOSE-1086688	673/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.6	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

• 5.12.2 - 2021-03-22
  

  chore: release 5.12.2

• 5.12.1 - 2021-03-18
  

  chore: release 5.12.1

• 5.12.0 - 2021-03-11
  

  5.12

• 5.11.20 - 2021-03-11
  

  chore: release 5.11.20

• 5.11.19 - 2021-03-05
  

  chore: release 5.11.19

• 5.11.18 - 2021-02-23
  

  chore: release 5.11.18

• 5.11.17 - 2021-02-17
  

  chore: release 5.11.17

• 5.11.16 - 2021-02-12
  

  chore: release 5.11.16

from mongoose GitHub release notes

Commit messages

Package name: mongoose

• 5549f26 chore: release 5.12.2
• 4b1aaac Merge pull request #10050 from SoftwareSing/fix-bulkwrite-with-timestamps-false
• 3759f34 chore: address CR comments
• 5ffbb8e fix(query): apply schema-level `select` option from array schematypes
• 7d19c9f test(query): repro #10029
• 4b0052e fix(schema): support setting `ref` as an option on an array SchemaType
• 171c31f test(schema): repro #10029
• 96f7905 fix(index.d.ts): make query methods return `QueryWithHelpers` so query helpers pass through chaining
• 04f880f fix(index.d.ts): add back `Aggregate#project()` types that were mistakenly removed in 5.12.0
• 9a3a7b4 style: fix lint
• 91f003a Merge pull request #10053 from 418sec/1-npm-mongoose
• 3ed44ff Merge pull request #1 from zpbrent/patch-2
• 00e059d fix(index.d.ts): add `upserted` array to `updateOne()`, `updateMany()`, `update()` result
• 003e477 add missing issue number
• 0101ab8 fix(bulkwrite): make bulkWrite can work with `timestamps: false`
• 9559c46 test(bulkwrite): repro #10048
• 1bb97ba chore: update opencollective sponsors
• 5888269 docs(mongoose+browser): fix broken links to info about `mongoose.Types`
• 43b0cfa Merge branch 'master' of github.com:Automattic/mongoose
• 03905c5 fix(index.d.ts): always allow setting `type` in Schema to a SchemaType class or a Schema instance
• 422620b Merge pull request #10015 from Automattic/gh-9982
• 7b14258 test(QueryCursor): fix tests from #10015
• f2651d7 docs(transactions): introduce `session.withTransaction()` before `session.startTransaction()` because `withTransaction()` is the recommended approach
• 61d313b chore: update opencollective sponsor logo

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[github-actions]

Stale pull request message