[Snyk] Upgrade mongoose from 6.2.2 to 6.5.3#11
Open
snyk-bot wants to merge 1 commit into
Open
Conversation
Snyk has created this PR to upgrade mongoose from 6.2.2 to 6.5.3. See this package in npm: https://www.npmjs.com/package/mongoose See this project in Snyk: https://app.snyk.io/org/stefanskiasan/project/66d3d3f6-5165-47a1-8cba-7589d5604369?utm_source=github&utm_medium=referral&page=upgrade-pr
|
Kudos, SonarCloud Quality Gate passed!
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade mongoose from 6.2.2 to 6.5.3.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-MONGOOSE-2961688
Why? Proof of Concept exploit, Has a fix available, CVSS 7
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: mongoose
-
6.5.3 - 2022-08-25
- fix(document): handle maps when applying defaults to nested paths #12322
- fix(schema): make ArraySubdocuments apply _id defaults on init #12264
- fix(populate): handle specifying recursive populate as a string with discriminators #12266
- perf(types): remove extends Query in Schema.pre() and Schema.post(), loosen
- perf(types): some more micro-optimizations re: #10349, remove extra type checking on $ne, etc.
- fix(types): infer schema on
- fix(types): add missing
- fix(types): allow $search in $lookup pipeline stages for MongoDB v6.x support #12278 AbdelrahmanHafez
- fix(types): add parameter "options" to "Model.remove" #12258 hasezoey
- fix(types): sync single-generic-no-constraint "model" between "index.d.ts" and "connection.d.ts" #12299 hasezoey
- fix(types): update isDirectModified typing #12290 gabrielDonnantuoni
- docs: update links on api docs #12293 eatmoarrice
- docs: add note about language_override option #12310 IslandRhythms
- docs(document): add "String[]" to Document.depopulate as jsdoc parameter type #12300 hasezoey
- docs: update Node.js EventEmitter url #12303 rainrisa
-
6.5.2 - 2022-08-10
- fix(aggregate): avoid throwing error when disconnecting with change stream open #12201 ramos-ph
- fix(query): overwrite top-level key if using Query.prototype.set() to set to undefined #12155
- fix(query): shallow clone options before modifying #12176
- fix(types): auto schema type inference on
- fix(types): better typescript support for schema plugins #12139 emiljanitzek
- fix(types): make bulkWrite() type param optional #12221 #12212
- docs: misc cleanup #12199 hasezoey
- docs: highlight current top-most visible header in navbar #12222 hasezoey
- docs(populate): improve examples for Document.prototype.populate() #12111
- docs(middleware): clarify document vs model in middleware docs #12113
-
6.5.1 - 2022-08-03
- fix(timestamps): set timestamps on child schema when child schema has timestamps: true but parent schema does not #12119
- fix(schema+timestamps): handle insertMany() with timestamps and discriminators #12150
- fix(model+query): handle populate with lean transform that deletes _id #12143
- fix(types): allow $pull with _id #12142
- fix(types): add schema plugin option inference #12196 hasezoey
- fix(types): pass type to mongodb bulk write operation #12167 emiljanitzek
- fix(types): map correct generics from model to schema #12125 emiljanitzek
- fix(types): avoid baffling circular reference when using PopulatedDoc with a bidirectional reference #12136
- fix(types): allow using path with $count #12149
- docs(compatibility): change to use a table #12200 hasezoey
- docs(api_split.pug): add "code" to sidebar entries #12153 hasezoey
- docs: add "code" to Headers (and index list) #12152 hasezoey
-
6.5.0 - 2022-07-26
- perf(document): avoid creating unnecessary empty objects when creating a state machine #11988
- feat: upgrade mongodb driver -> 4.8.1 #12103 AbdelrahmanHafez
- feat(model): allow passing timestamps option to Model.bulkSave(...) #12082 AbdelrahmanHafez
- feat(model): add castObject() function that casts a POJO to the model's schema #11945
- feat(document): add $inc() helper that increments numeric paths #12115
- feat(schema): add schema level lean option IslandRhythms
- feat(schema): add global id option to disable id on schemas #12067 IslandRhythms
- fix(connection): re-run Model.init() if re-connecting after explicitly closing a connection #12130
- feat(model): add applyDefaults() helper that allows applying defaults to document or POJO #11945
- feat(model): allow calling hydrate() with { setters: true } #11653
- feat(model): add hydrate option to Model.watch() to automatically hydrate fullDocument #12121
- feat(types): add support for automatically typed virtuals in schemas #11908 mohammad0-0ahmad
-
6.4.7 - 2022-07-25
-
6.4.6 - 2022-07-20
-
6.4.5 - 2022-07-18
-
6.4.4 - 2022-07-08
-
6.4.3 - 2022-07-05
-
6.4.2 - 2022-07-01
-
6.4.1 - 2022-06-27
-
6.4.0 - 2022-06-17
-
6.3.9 - 2022-06-17
-
6.3.8 - 2022-06-13
-
6.3.7 - 2022-06-13
-
6.3.6 - 2022-06-07
-
6.3.5 - 2022-05-30
-
6.3.4 - 2022-05-19
-
6.3.3 - 2022-05-09
-
6.3.2 - 2022-05-02
-
6.3.1 - 2022-04-21
-
6.3.0 - 2022-04-14
-
6.2.11 - 2022-04-13
-
6.2.10 - 2022-04-04
-
6.2.9 - 2022-03-28
-
6.2.8 - 2022-03-23
-
6.2.7 - 2022-03-16
-
6.2.6 - 2022-03-11
-
6.2.5 - 2022-03-09
-
6.2.4 - 2022-02-28
-
6.2.3 - 2022-02-21
-
6.2.2 - 2022-02-16
from mongoose GitHub release notes6.5.3 / 2022-08-24
discriminator()generic #10349connection.model()#12298 #12125 hasezoeyfindById()type definitions #12309 lpizzinidev6.5.2 / 2022-08-09
Connection.prototype.model()#12240 hasezoey6.5.1 / 2022-08-03
6.5.0 / 2022-07-26
Read more
Commit messages
Package name: mongoose
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs