[Snyk] Security upgrade mongoose from 7.4.2 to 7.5.0

[wkylin]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • api/package.json
  • api/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Information Exposure SNYK-JS-MONGODB-5871303	No	No Known Exploit

Commit messages

Package name: mongoose

The new version differs by 124 commits.

• 20162c6 chore: release 7.5.0
• 1cd9384 Merge pull request #13796 from Automattic/7.5
• 419c64d docs: add comment about top-level dollar keys re: #13796 code review comments
• a92e8e8 Merge branch 'master' into 7.5
• d9a4bc4 Merge pull request #13793 from Automattic/vkarpov15/gh-13774
• 29de9c4 Merge pull request #13786 from Automattic/vkarpov15/handle-top-level-dollar-keys
• 84e79b9 Merge pull request #13787 from Automattic/vkarpov15/gh-13780
• a9db5ea types: handle Schema.Types.BigInt in schema definition re: #13780
• 90fc4d2 Merge pull request #13792 from mreouven/patch-1
• 41e63bd fix(document): avoid double-calling array getters when using `.get('arr.0')`
• c1d5b76 Merge pull request #13774 from Automattic/vkarpov15/gh-13748
• 0d956ce test: fix tests
• f44e169 Update pipelinestage.d.ts
• 9f1c24c Update pipelinestage.d.ts
• 7ec92a7 types(schematypes): add missing BigInt SchemaType
• fe7f80b test: add tests
• 40146c8 feat: allow top level dollar keys with findOneAndUpdate(), update()
• fafa5d5 Merge branch 'master' into 7.5
• e36fc48 docs: fix link
• 65245a4 style: fix lint
• 069651e Merge branch 'master' into 7.5
• 6eeb875 Merge branch 'master' into vkarpov15/gh-13748
• e12ae3f chore: release 7.4.5
• 13c2ad0 fix(model): fix merge issue

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
pro-react-admin	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Sep 1, 2023 2:16pm

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication