Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency mongoose to v5 - autoclosed #263

Closed

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented Jun 19, 2022

This PR contains the following updates:

Package Type Update Change
mongoose (source) dependencies major ^4.13.12 -> ^5.11.7

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.8 CVE-2020-7610 #21
High 9.8 CVE-2021-23438 #66
High 7.8 CVE-2021-43138 #248
Medium 6.5 WS-2019-0311 #18
Medium 5.4 CVE-2019-2391 #267
Medium 5.3 CVE-2020-35149 #54

Release Notes

Automattic/mongoose

v5.11.7

Compare Source

===================

  • fix(document): ensure calling get() with empty string returns undefined for mongoose-plugin-autoinc #​9681
  • fix(model): set isNew to false for documents that were successfully inserted by insertMany with ordered = false when an error occurred #​9677
  • fix(index.d.ts): add missing Aggregate#skip() & Aggregate#limit() #​9692 sahasayan
  • fix(index.d.ts): make Document#id optional so types that use id can use Model<IMyType & Document> #​9684

v5.11.6

Compare Source

===================

  • fix(middleware): ensure sync errors in pre hooks always bubble up to the calling code #​9659
  • fix(index.d.ts): allow passing ObjectId properties as strings to create() and findOneAndReplace() #​9676
  • fix(index.d.ts): allow calling mongoose.model() and Connection#model() with model as generic param #​9685 #​9678 sahasayan
  • fix(index.d.ts): Fix return type of Model#aggregate() #​9680 orgads
  • fix(index.d.ts): optional next() parameter for post middleware #​9683 isengartz
  • fix(index.d.ts): allow array of validators in SchemaTypeOptions #​9686 cjroebuck

v5.11.5

Compare Source

===================

  • fix(map): support null in maps of subdocs #​9628
  • fix(index.d.ts): support object syntax for validate #​9667
  • fix(index.d.ts): Allow number for Schema expires #​9670 alecgibson
  • fix(index.d.ts): allow definining arbitrary properties on SchemaTypeOpts for plugins like mongoose-autopopulate #​9669
  • fix(index.d.ts): add mongoose.models #​9661 #​9660 AbdelrahmanHafez
  • fix(index.d.ts): allow the next() argument to be optional #​9665 #​9664 sahasayan
  • fix(index.d.ts): add missing VirtualType#applyGetters() and applySetters(), Schema#virtuals, Schema#childSchemas, Query#_mongooseOptions #​9658
  • fix(index.d.ts): add id to LeanDocuments in case it is defined in the user's schema #​9657
  • fix(index.d.ts): add missing types for hook functions #​9653
  • fix(index.d.ts): improve support for strict null checks with upsert and orFail() #​9654
  • fix(index.d.ts): make return values for insertMany() more consistent #​9662
  • fix(index.d.ts): Change options in Connection#collection() to be optional #​9663 orgads
  • fix(index.d.ts): add the missing generic declaration for Schema #​9655 sahasayan
  • fix(index.d.ts): add missing SchemaTypeOpts and ConnectionOptions aliases for backwards compat
  • docs(populate): remove sort() from limit example to avoid potential confusion #​9584
  • docs(compatibility): add MongoDB server 4.4 version compatibility #​9641

v5.11.4

Compare Source

===================

  • fix(index.d.ts): add Document#__v so documents have a Version by default #​9652 sahasayan
  • fix(index.d.ts): add missing session option to SaveOptions #​9642
  • fix(index.d.ts): add Schema#paths, Schema#static(obj), Embedded#schema, DocumentArray#schema, make Schema inherit from EventEmitter #​9650
  • fix(index.d.ts): order when cb is optional in method #​9647 CatsMiaow
  • fix(index.d.ts): use DocumentDefinition for FilterQuery #​9649
  • fix(index.d.ts): correct callback result types for find(), findOne(), findById() #​9648
  • fix(index.d.ts): remove Document#parent() method because it conflicts with existing user code #​9645
  • fix(index.d.ts): add missing Connection#db property #​9643
  • test(typescript): add tsconfig.json file for intellisense #​9611 alecgibson

v5.11.3

Compare Source

===================

  • fix(index.d.ts): make Mongoose collection inherit MongoDB collection #​9637 #​9630 AbdelrahmanHafez
  • fix(index.d.ts): add Document#_id so documents have an id by default #​9632
  • fix(index.d.ts): allow inline schema definitions for nested properties #​9639 Green-Cat
  • fix(index.d.ts): add support for missing error message definitions #​9638 SaifAlsabe
  • fix(schema+discriminator): support defining recursive embedded discriminators by passing document array schematype to discriminator #​9600
  • fix(index.d.ts): make it possible to use LeanDocument with arrays #​9620
  • fix(index.d.ts): add ModelUpdateOptions as alias for QueryOptions for backwards compat #​9637

v5.11.2

Compare Source

====================

  • fix(query+populate): avoid unnecessarily projecting in subpath when populating a path that uses an elemMatch projection #​9973
  • fix(connection): avoid db events deprecation warning with 'close' events #​10004 #​9930
  • fix(index.d.ts): make $pull more permissive to allow dotted paths #​9993

v5.11.1

Compare Source

====================

  • fix(document): skip validating array elements that aren't modified when validateModifiedOnly is set #​9963
  • fix(timestamps): apply timestamps on findOneAndReplace() #​9951
  • fix(schema): correctly handle trailing array filters when looking up schema paths #​9977
  • fix(schema): load child class getter for virtuals instead of base class when using loadClass() #​9975
  • fix(index.d.ts): allow creating statics without passing generics to Schema constructor #​9969
  • fix(index.d.ts): add QueryHelpers generic to schema and model, make all query methods instead return QueryWithHelpers #​9850
  • fix(index.d.ts): support setting type to an array of schemas when using SchemaDefinitionType #​9962
  • fix(index.d.ts): add generic to plugin schema definition #​9968 emiljanitzek
  • docs: small typo fix #​9964 KrishnaMoorthy12

v5.11.0

Compare Source

===================

  • feat: add official TypeScript definitions index.d.ts file #​8108
  • feat(connection): add bufferTimeoutMS option that configures how long Mongoose will allow commands to buffer #​9469
  • feat(populate): support populate virtuals with localField and foreignField as arrays #​6608
  • feat(populate+virtual): feat: support getters on populate virtuals, including get option for Schema#virtual() #​9343
  • feat(populate+schema): add support for populate schematype option that sets default populate options #​6029
  • feat(QueryCursor): execute post find hooks for each doc in query cursor #​9345
  • feat(schema): support overwriting cast logic for individual schematype instances #​8407
  • feat(QueryCursor): make cursor populate() in batch when using batchSize #​9366 biomorgoth
  • chore: remove changelog from published bundle #​9404
  • feat(model+mongoose): add overwriteModels option to bypass OverwriteModelError globally #​9406
  • feat(model+query): allow defining middleware for all query methods or all document methods, but not other middleware types #​9190
  • feat(document+model): make change tracking skip saving if new value matches last saved value #​9396
  • perf(utils): major speedup for deepEqual() on documents and arrays #​9396
  • feat(schema): support passing a TypeScript enum to enum validator in schema #​9547 #​9546 AbdelrahmanHafez
  • feat(debug): #​8963 shell option for date format (ISODate) #​9532 FlameFractal
  • feat(document): support square bracket indexing for get(), set() #​9375
  • feat(document): support array and space-delimited syntax for Document#$isValid(), isDirectSelected(), isSelected(), $isDefault() #​9474
  • feat(string): make minLength and maxLength behave the same as minlength and maxlength #​8777 m-weeks
  • feat(document): add $parent() as an alias for parent() for documents and subdocuments to avoid path name conflicts #​9455

v5.10.19

Compare Source

====================

  • fix(query): support passing an array to $type in query filters #​9577
  • perf(schema): avoid creating unnecessary objects when casting to array #​9588
  • docs: make example gender neutral #​9601 rehatkathuria

v5.10.18

Compare Source

====================

v5.10.17

Compare Source

====================

v5.10.16

Compare Source

====================

  • fix(connection): copy config options from connection rather than base connection when calling useDb() #​9569
  • fix(schema): support of for array type definitions to be consistent with maps #​9564
  • docs(dates): fix broken example reference #​9557 kertof
  • docs(virtualtype): remove unintentional h2 tag re: tj/dox#​60 #​9568

v5.10.15

Compare Source

====================

  • fix(array): make sure Array#toObject() returns a vanilla JavaScript array in Node.js 6+ #​9540
  • fix(connection): make disconnect() stop Mongoose if it is trying to reconnect #​9531
  • fix: ensure Document#overwrite() correctly overwrites maps #​9549
  • fix(document): make transform work with nested paths #​9544 #​9543 jonathan-wilkinson
  • fix(query): maxTimeMS in count, countDocuments, distinct #​9552 FlameFractal
  • fix(schema): remove warning re: increment as a schema path name #​9538
  • fix(model): automatically set partialFilterExpression for indexes in discriminator schemas #​9542

v5.10.14

Compare Source

====================

  • fix(update): handle casting immutable object properties with $setOnInsert #​9537
  • fix(discriminator): overwrite instead of merge if discriminator schema specifies a path is single nested but base schema has path as doc array #​9534
  • docs(middleware): clarify that you need to set both document and query on remove hooks to get just document middleware #​9530 mustafaKamal-fe
  • docs(CONTRIBUTING): remove mmapv1 recommendation and clean up a few other details #​9529
  • refactor: remove duplicate function definition #​9527 ksullivan

v5.10.13

Compare Source

====================

v5.10.12

Compare Source

====================

  • fix(connection): catch and report sync errors in connection wrappers like startSession() #​9515
  • fix(document): ignore getters when diffing values for change tracking #​9501
  • fix(connection): avoid executing promise handler unless it's a function #​9507 AbdelrahmanHafez
  • fix(error): throw more helpful error when connecting to a non-SSL MongoDB server with SSL enabled #​9511
  • docs(model+query): clarify that deleteOne and deleteMany trigger middleware #​9504
  • docs(ssl): add note about ssl defaulting to true for srv connection strings #​9511

v5.10.11

Compare Source

====================

  • fix(connection): when calling mongoose.connect() multiple times in parallel, make 2nd call wait for connection before resolving #​9476
  • fix(map): make save() persist Map#clear() #​9493
  • fix(document): avoid overwriting array subdocument when setting dotted path that isn't selected #​9427
  • fix(connection): don't throw Atlas error if server discovery doesn't find any servers #​9470
  • docs: update options for Model.findOneAndUpdate #​9499 radamson

v5.10.10

Compare Source

====================

  • fix(schema): handle merging schemas from separate Mongoose module instances when schema has a virtual #​9471
  • fix(connection): make connection.then(...) resolve to a connection instance #​9497 AbdelrahmanHafez
  • fix(aggregate): when using $search with discriminators, add $match as the 2nd stage in pipeline rather than 1st #​9487
  • fix(query): cast $nor within $elemMatch #​9479
  • docs(connection): add note about 'error' event versus 'disconnected' event #​9488 tareqdayya

v5.10.9

Compare Source

===================

  • fix(update): strip out unused array filters to avoid "filter was not used in the update" error #​9468
  • fix(mongoose): allow setting autoCreate as a global option to be consistent with autoIndex #​9466

v5.10.8

Compare Source

===================

  • fix(schema): handle setting nested paths underneath single nested subdocs #​9459
  • fix(schema+index): allow calling mongoose.model() with schema from a different Mongoose module instance #​9449
  • fix(transaction): fix saving new documents w/ arrays in transactions #​9457 PenguinToast
  • fix(document): track reason on cast errors that occur while init-ing a document #​9448
  • fix(model): make createCollection() not throw error when collection already exists to be consistent with v5.9 #​9447
  • docs(connections): add SSL connections docs #​9443
  • docs(query_casting): fix typo #​9458 craig-davis

v5.10.7

Compare Source

===================

  • fix(schema): set correct path and schema on nested primitive arrays #​9429
  • fix(document): pass document to required validator so required can use arrow functions #​9435 AbdelrahmanHafez
  • fix(document): handle required when schema has property named isSelected #​9438
  • fix(timestamps): allow using timestamps when schema has a property named 'set' #​9428
  • fix(schema): make Schema#clone() use parent Mongoose instance's Schema constructor #​9426

v5.10.6

Compare Source

===================

  • fix(populate): handle options.perDocumentLimit option same as perDocumentLimit when calling populate() #​9418
  • fix(document): invalidate path if default function throws an error #​9408
  • fix: ensure subdocument defaults run after initial values are set when initing #​9408
  • docs(faq+queries): add more detail about duplicate queries, including an faq entry #​9386
  • docs: replace var with let and const in docs and test files #​9414 jmadankumar
  • docs(model+query): document using array of strings as projection #​9413
  • docs(middleware): add missing backtick #​9425 tphobe9312

v5.10.5

Compare Source

===================

  • fix: bump mongodb -> 3.6.2 #​9411 AbdelrahmanHafez
  • fix(query+aggregate+cursor): support async iteration over a cursor instance as opposed to a Query or Aggregate instance #​9403
  • fix(document): respect child schema minimize if toObject() is called without an explicit minimize #​9405
  • docs(guide): use const instead of var #​9394 nainardev
  • docs(query): link to lean, findOneAndUpdate, query casting tutorials from query docs #​9410

v5.10.4

Compare Source

===================

  • fix(document): allow setting nested path to instance of model #​9392
  • fix: handle findOneAndRemove() with orFail() #​9381
  • fix(schema): support setting _id option to false after instantiating schema #​9390
  • docs(document): fix formatting on getChanges() #​9376

v5.10.3

Compare Source

===================

  • fix: upgrade mongodb -> 3.6.1 #​9380 lamhieu-vk
  • fix(populate): allow populating paths underneath subdocument maps #​9359
  • fix(update): handle casting map paths when map is underneath a single nested subdoc #​9298
  • fix(discriminator): avoid removing nested path if both base and discriminator schema have the same nested path #​9362
  • fix(schema): support Schema#add() with schematype instances with different paths #​9370
  • docs(api): fix typo in Query#get() example #​9372 elainewlin

v5.10.2

Compare Source

===================

  • fix(model): avoid uncaught error if insertMany() fails due to server selection error #​9355
  • fix(aggregate): automatically convert accumulator function options to strings #​9364
  • fix(document): handle pull() on a document array when _id is an alias #​9319
  • fix(queryhelpers): avoid path collision error when projecting in discriminator key with .$ #​9361
  • fix: fix typo in error message thrown by unimplemented createIndex #​9367 timhaley94
  • docs(plugins): note that plugins should be applied before you call mongoose.model() #​7723

v5.10.1

Compare Source

====================

  • fix(query): support passing an array to $type in query filters #​9577
  • perf(schema): avoid creating unnecessary objects when casting to array #​9588
  • docs: make example gender neutral #​9601 rehatkathuria

v5.10.0

Compare Source

===================

  • feat: upgrade to MongoDB driver 3.6 for full MongoDB 4.4 support
  • feat(connection): add Connection#transaction() helper that handles resetting Mongoose document state if the transaction fails #​8380
  • feat(connection): make transaction() helper reset array atomics after failed transaction
  • feat(schema+model): add optimisticConcurrency option to use OCC for save() #​9001 #​5424
  • feat(aggregate): add Aggregate#search() for Atlas Text Search #​9115
  • feat(mongoose): add support for setting setDefaultsOnInsert as a global option #​9036 AbdelrahmanHafez
  • feat(mongoose): add support for setting returnOriginal as a global option #​9189 #​9183 AbdelrahmanHafez
  • feat(mongoose): allow global option mongoose.set('strictQuery', true) #​9016 AbdelrahmanHafez
  • feat(document): add Document#getChanges #​9097 AbdelrahmanHafez
  • feat(document): support defaults option to disable adding defaults to a single document #​8271
  • feat(SingleNestedPath+DocumentArray): add static set() function for global options, support setting _id globally #​8883
  • feat(query): handle casting $or when each clause contains a different discriminator key #​9018
  • feat(query): add overwriteDiscriminatorKey option that allows changing the discriminator key in findOneAndUpdate(), updateOne(), etc. #​6087
  • fix(connection): make calling mongoose.connect() while already connected a no-op #​9203
  • feat(connection): add getClient() and setClient() function for interacting with a connection's underlying MongoClient instance #​9164
  • feat(document+populate): add parent() function that allows you to get the parent document for populated docs #​8092
  • feat(document): add useProjection option to toObject() and toJSON() for hiding deselected fields on newly created documents #​9118

v5.9.29

Compare Source

===================

  • fix(document): support setting nested path to itself when it has nested subpaths #​9313
  • fix(model): make syncIndexes() report error if it can't create an index #​9303
  • fix: handle auth error when Atlas username is incorrect #​9300

v5.9.28

Compare Source

===================

  • fix(connection): consistently stop buffering when "reconnected" is emitted #​9295
  • fix(error): ensure name and message show up on individual ValidatorErrors when calling JSON.stringify() on a ValidationError #​9296
  • fix(document): keeps manually populated paths when setting a nested path to itself #​9293
  • fix(document): allow saving after setting document array to itself #​9266
  • fix(schema): handle match schema validator with /g flag #​9287
  • docs(guide): refactor transactions examples to async/await #​9204

v5.9.27

Compare Source

===================

  • fix: upgrade mongodb driver -> 3.5.10 AbdelrahmanHafez
  • docs(transactions): make transactions docs use async/await for readability #​9204

v5.9.26

Compare Source

===================

  • fix(document): allow unsetting boolean field by setting the field to undefined #​9275
  • fix(document): throw error when overwriting a single nested subdoc changes an immutable path within the subdoc #​9281
  • fix(timestamps): apply timestamps to bulkWrite() updates when not using $set #​9268
  • fix(browser): upgrade babel to v7 to work around an issue with extends Error #​9273
  • fix: make subdocument's invalidate() methods have the same return value as top-level document #​9271
  • docs(model): make create() docs use async/await, and add another warning about how create() with options requires array syntax #​9280
  • docs(connections): clarify that Mongoose can emit 'connected' when reconnecting after losing connectivity #​9240
  • docs(populate): clarify that you can't filter based on foreign document properties when populating #​9279
  • docs(document+model): clarify how validateModifiedOnly option works #​9263
  • docs: remove extra poolSize option in comment #​9270 shahvicky
  • docs: point bulkWrite() link to mongoose docs instead of localhost #​9284

v5.9.25

Compare Source

===================

  • fix(discriminator): allow passing a compiled model's schema as a parameter to discriminator() #​9238
  • fix(connection): throw more readable error when querying db before initial connection when bufferCommands = false #​9239
  • fix(indexes): don't unnecessarily drop text indexes when running syncIndexes() #​9225
  • fix: make Boolean _castNullish respect omitUndefined #​9242 ehpc
  • fix(populate): populate single nested discriminator underneath doc array when populated docs have different model but same id #​9244
  • docs(mongoose): correct formatting typo #​9247 JNa0

v5.9.24

Compare Source

===================

  • fix(connection): respect connection-level bufferCommands option if mongoose.connect() is called after mongoose.model() #​9179
  • fix(document): clear out priorDoc after overwriting single nested subdoc so changes after overwrite get persisted correctly #​9208
  • fix(connection): dont overwrite user-specified bufferMaxEntries when setting bufferCommands #​9218
  • fix(model): allow passing projection to Model.hydrate() #​9209
  • fix(schema+document): support adding null to schema boolean's convertToFalse set #​9223
  • docs(model): make find and findOne() examples use async/await and clarify find({}) is find all #​9210

v5.9.23

Compare Source

===================

  • fix(model): fix syncIndexes() error when db index has a collation but Mongoose index does not #​9224 clhuang
  • fix(array): only cast array to proper depth if it contains an non-array value #​9217 #​9215 cyrilgandon
  • docs(schematype): document the transform option #​9211
  • docs(mongoose): fix typo #​9212 JNa0

v5.9.22

Compare Source

===================

  • fix(schema): treat { type: mongoose.Schema.Types.Array } as equivalent to { type: Array } #​9194
  • fix: revert fix for #​9107 to avoid issues when calling connect() multiple times #​9167
  • fix(update): respect storeSubdocValidationError option with update validators #​9172
  • fix: upgrade to safe-buffer 5.2 #​9198
  • docs: add a note about SSL validation to migration guide #​9147
  • docs(schemas): fix inconsistent header #​9196 samtsai15

v5.9.21

Compare Source

===================

  • fix: propagate typeKey option to implicitly created schemas from typePojoToMixed #​9185 joaoritter
  • fix(populate): handle embedded discriminator refPath with multiple documents #​9153
  • fix(populate): handle deselected foreign field with perDocumentLimit and multiple documents #​9175
  • fix(document): disallow transform functions that return promises #​9176 #​9163 AbdelrahmanHafez
  • fix(document): use strict equality when checking mixed paths for modifications #​9165
  • docs: add target="_blank" to all edit links #​9058

v5.9.20

Compare Source

===================

  • fix(populate): handle populating primitive array under document array discriminator #​9148
  • fix(connection): make sure to close previous connection when calling openUri() on an already open connection #​9107
  • fix(model): fix conflicting $setOnInsert default values with update values in bulkWrite #​9160 #​9157 AbdelrahmanHafez
  • docs(validation): add note about validateBeforeSave and invalidate #​9144 dandv
  • docs: specify the array field syntax for invalidate #​9137 dandv
  • docs: fix several typos and broken references #​9024 AbdelrahmanHafez
  • docs: fix minor typo #​9143 dandv

v5.9.19

Compare Source

===================

  • fix: upgrade mongodb driver -> 3.5.9 #​9124 AbdelrahmanHafez
  • fix: copy required validator on single nested subdoc correctly when calling Schema#clone() #​8819
  • fix(discriminator): handle tiedValue when casting update on nested paths #​9108
  • fix(model): allow empty arrays for bulkWrite #​9132 #​9131 AbdelrahmanHafez
  • fix(schema): correctly set partialFilterExpression for nested schema indexes #​9091
  • fix(castArrayFilters): handle casting on all fields of array filter #​9122 lafeuil
  • fix(update): handle nested path createdAt when overwriting parent path #​9105
  • docs(subdocs): add some notes on the difference between single nested subdocs and nested paths #​9085
  • docs(subdocs): improve docs on typePojoToMixed #​9085
  • docs: add note about connections in globalSetup with Jest #​9063
  • docs: add schema and how to set default sub-schema to schematype options #​9111 dfle
  • docs(index): use const instead of var in examples #​9125 dmcgrouther
  • docs: corrected markdown typo #​9117

v5.9.18

Compare Source

===================

  • fix: improve atlas error in the event of incorrect password #​9095
  • docs: add edit link for all docs pages #​9058
  • fix(document): allow accessing $locals when initializing document #​9099 #​9098 AbdelrahmanHafez
  • fix(query): make setDefaultsOnInsert a mongoose option so it doesn't end up in debug output #​9086
  • docs(connection+index): add serverSelectionTimeoutMS and heartbeatFrequencyMS to connect() and openUri() options #​9071
  • docs(geojson): add notes about geojson 2dsphere indexes #​9044
  • docs: make active page bold in navbar #​9062
  • docs: correct a typo in a code snippet #​9089 Elvis-Sarfo

v5.9.17

Compare Source

===================

v5.9.16

Compare Source

===================

  • perf(error): convert errors to classes extending Error for lower CPU overhead #​9021 zbjornson
  • fix(query): throw CastError if filter $and, $or, $nor contain non-object values #​8948
  • fix(bulkwrite): cast filter & update to schema after applying timestamps #​9030 AbdelrahmanHafez
  • fix(document): don't overwrite defaults with undefined keys in nested documents #​9039 vitorhnn
  • fix(discriminator): remove discriminator schema nested paths pulled from base schema underneath a mixed path in discriminator schema #​9042
  • fix(model): make syncIndexes() not drop index if all user-specified collation options are the same #​8994
  • fix(document): make internal $__.scope property a symbol instead to work around a bug with fast-safe-stringify #​8955
  • docs: model.findByIdAndUpdate() 'new' param fix #​9026 dandv

v5.9.15

Compare Source

===================

  • fix(schema): treat creating dotted path with no parent as creating a nested path #​9020
  • fix(documentarray): make sure you can call unshift() after map() #​9012 philippejer
  • fix(model): cast bulkwrite according to discriminator schema if discriminator key is present #​8982 AbdelrahmanHafez
  • fix(schema): remove db from reserved keywords #​8940
  • fix(populate): treat populating a doc array that doesn't have a ref as a no-op #​8946
  • fix(timestamps): set createdAt and updatedAt on doubly nested subdocs when upserting #​8894
  • fix(model): allow POJOs as schemas for model.discriminator(...) #​8991 AbdelrahmanHafez
  • fix(model): report insertedDocs on insertMany() errors #​8938
  • fix(model): ensure consistent writeErrors property on insertMany error with ordered: false, even if only one op failed #​8938
  • docs: add anchor tag to strictQuery and strict #​9014 AbdelrahmanHafez
  • docs(faq): remove faq ipv6 #​9004
  • docs: add note about throwing error only after validation and fix broken reference to api/CastError #​8993 AbdelrahmanHafez
  • docs: fix typos in documents.pug #​9005 dandv

v5.9.14

Compare Source

===================

  • fix(cursor): add index as second parameter to eachAsync callback #​8972 AbdelrahmanHafez
  • fix(query): cast filter according to discriminator schema if discriminator key in filter #​8881
  • fix(model): fix throwing error when populating virtual path defined on child discriminator #​8924 AbdelrahmanHafez
  • fix(errors): handle case when user has make Error.prototype.toJSON read only #​8986 osher
  • fix(model): add kind to cast errors thrown by query execution #​8953 AbdelrahmanHafez
  • fix(update): use child schema strict on single nested updates if useNestedStrict not set #​8922
  • docs(mod

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Jun 19, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mongoose-5.x branch from 16be4a0 to a41d4e1 Compare June 22, 2022 16:39
@mend-for-github-com mend-for-github-com bot changed the title Update dependency mongoose to v5 Update dependency mongoose to v5 - autoclosed Aug 7, 2022
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/mongoose-5.x branch August 7, 2022 13:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants