Bump mongoose from 5.12.5 to 5.12.7

[dependabot-preview]

Bumps mongoose from 5.12.5 to 5.12.7.

Changelog

Sourced from mongoose's changelog.

5.12.7 / 2021-04-29

• fix(document): make $getPopulatedDocs() return populated virtuals #10148
• fix(discriminator): take discriminator schema's single nested paths over base schema's #10157
• fix(discriminator): allow numbers and ObjectIds as tied values for discriminators #10130
• fix(document): avoid double validating paths underneath mixed objects in save() #10141
• fix(schema): allow path() to return single nested paths within document arrays #10164
• fix(model+query): consistently wrap query callbacks in process.nextTick() to avoid clean stack traces causing memory leak when using synchronous recursion like async.whilst() #9864
• fix(cursor): correctly report CastError when using noCursorTimeout flag #10150
• fix(index.d.ts): add CastError constructor #10176
• fix(index.d.ts): allow setting mongoose.pluralize(null) in TypeScript #10185
• docs: add link to transactions guide from nav bar #10143
• docs(validation): add section about custom error messages #10140
• docs: make headers linkable via clicking #10156
• docs: broken link in document.js #10190 joostdecock
• docs: make navbar responsive on legacy 2.x docs #10171 ad99526

5.12.6 / 2021-04-27

• fix(query): allow setting writeConcern schema option to work around MongoDB driver's writeConcern deprecation warning #10083 #10009 IslandRhythms
• fix(populate): dedupe when virtual populate foreignField is an array to avoid duplicate docs in result #10117
• fix(populate): add localField filter to $elemMatch on virtual populate when custom match has a $elemMatch and foreignField is an array #10117
• fix(query): convert projection string values to numbers as a workaround for #10142
• fix(document): set version key filter on save() when using optimisticConcurrency if no changes in document #10128 IslandRhythms
• fix(model): use obj as context in Model.validate() if obj is a document #10132
• fix(connection): avoid db events deprecation warning when using useDb() with useUnifiedTopology #8267
• fix: upgrade to sift@13.5.2 to work around transitive dev dependency security warning #10121
• fix(index.d.ts): allow any object as parameter to create() and insertMany() #10144
• fix(index.d.ts): clarify that eachAsync() callback receives a single doc rather than array of docs unless batchSize is set #10135
• fix(index.d.ts): clarify that return value from validateSync() is a ValidationError #10147 michaln-q
• fix(index.d.ts): add generic type for Model constructor #10074 Duchynko
• fix(index.d.ts): add parameter type in merge #10168 yoonhoGo

Commits

• 8f31786 chore: release 5.12.7
• 62ba207 docs(validation): add section about custom error messages
• 2a21efe docs: add link to transactions guide from nav bar
• 2938199 Merge pull request #10190 from joostdecock/patch-1
• 8a65377 Merge pull request #10171 from ad99526/patch-1
• 3fa78b6 Fix: broken link in document.js
• e961cb7 docs: make headers linkable via clicking
• d8785f1 fix(document): make $getPopulatedDocs() return populated virtuals
• 3791616 test(document): repro #10148
• 06c6a8b refactor(discriminator): don't rely on model when getting discriminator by ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

If all status checks pass Dependabot will automatically merge this pull request during working hours.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in the .dependabot/config.yml file in this repo:

• Update frequency
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

---

⚠️ Dependabot won't automerge this PR as it didn't detect CI on it ⚠️

You have automerging enabled for this repo but Dependabot didn't detect any CI statuses or checks. You can disable automerging on this repo by editing the .dependabot/config.yml file in this repo.