Pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
cookie-parser	dependencies	pin	^1.4.7 -> 1.4.7
mongoose (source)	dependencies	minor	8.7.3 -> 8.8.1
winston	dependencies	minor	3.16.0 -> 3.17.0

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Release Notes

Automattic/mongoose (mongoose)

v8.8.1

Compare Source

==================

• perf: make a few micro-optimizations to help speed up findOne() #​15022 #​14906
• fix: apply embedded discriminators to subdoc schemas before compiling top level model so middleware applies correctly #​15001 #​14961
• fix(query): add overwriteImmutable option to allow updating immutable properties without disabling strict mode #​15000 #​8619

v8.8.0

Compare Source

==================

• feat: upgrade mongodb -> ~6.10 #​14991 #​14877
• feat(query): add schemaLevelProjections option to query to disable schema-level select: false #​14986 #​11474
• feat: allow defining virtuals on arrays, not just array elements #​14955 #​2326
• feat(model): add applyTimestamps() function to apply all schema timestamps, including subdocuments, to a given POJO #​14943 #​14698
• feat(model): add hideIndexes option to syncIndexes() and cleanIndexes() #​14987 #​14868
• fix(query): make sanitizeFilter disable implicit $in #​14985 #​14657
• fix(model): avoid unhandled error if createIndex() throws a sync error #​14995
• fix(model): avoid throwing TypeError if bulkSave()'s bulkWrite() fails with a non-BulkWriteError #​14993
• types: added toJSON:flattenObjectIds effect #​14989
• types: add __v to lean() result type and ModifyResult #​14990 #​12959
• types: use globalThis instead of global for NativeDate #​14992 #​14988
• docs(change-streams): fix markdown syntax highlighting for script output example #​14994

winstonjs/winston (winston)

v3.17.0

Compare Source

• Try winston-transport 4.9.0 3e87128
• Revert "Try bumping winston-transport to 4.8.0" 69625fc
• Revert "Try bumping winston-transport to 4.8.0" 876ef7a
• Try bumping winston-transport to 4.8.0 7ef2c1d
• Try bumping winston-transport to 4.8.0 fe4b64e
• Bump logform c9fd9a4
• Revert "Update logform and winston-transport" 14fef0f
• Merge branch 'master' of github.com:winstonjs/winston 545b683
• Update logform and winston-transport cceb265
• Bump mocha from 10.7.3 to 10.8.2 (#​2523) bb529b6
• Bump async from 3.2.5 to 3.2.6 (#​2516) ae847ab

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.