[Snyk] Upgrade mongoose from 5.13.14 to 8.3.2 #279

Gabo-Tech · 2024-05-19T09:38:11Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade mongoose from 5.13.14 to 8.3.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 180 versions ahead of your current version.
The recommended version was released a month ago, on 2024-04-16.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-MONGOOSE-2961688	671/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7	Proof of Concept
	Prototype Pollution SNYK-JS-MONGOOSE-5777721	671/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

8.3.2 - 2024-04-16
8.3.2 / 2024-04-16
- fix(populate): avoid match function filtering out null values in populate result #14518 #14494
- types(query): make FilterQuery props resolve to any for generics support #14510 #14473 #14459
- types(DocumentArray): pass DocType generic to Document for correct toJSON() and toObject() return types #14526 #14469
- types(models): fix incorrect bulk write options #14513 emiljanitzek
- docs: add documentation for calling schema.post() with async function #14514 #14305
8.3.1 - 2024-04-08
8.3.1 / 2024-04-08
- fix(document): make update minimization unset property rather than setting to null #14504 #14445
- fix(model): make Model.recompileSchema() also re-apply discriminators #14500 #14444
- fix(schema): deduplicate idGetter so creating multiple models with same schema doesn't result in multiple id getters #14492
- fix: update kareem -> 2.6.3 for index.d.ts #14508 #14497
- fix(mongoose): make setDriver() update mongoose.model() connections and collections #14505
- types(validation): support function for validator message property, and add support for accessing validator reason #14499 #14496
- docs: remove typo #14501 epmartini
8.3.0 - 2024-04-03
8.3.0 / 2024-04-03
- feat: use mongodb@6.5.0
- feat(document): add validateAllPaths option to validate() and validateSync() #14467 #14414
- feat: pathsToSave option to save() function #14385 #9583
- feat(query): add options parameter to Query.prototype.sort() #14375 #14365
- feat: add function SchemaType.prototype.validateAll #14434 #6910
- fix: handle array schema definitions with of keyword #14447 #14416
- types: add overwriteMiddlewareResult and skipMiddlewareFunction to types #14328 #14829
8.2.4 - 2024-03-28
8.2.4 / 2024-03-28
- types(query): bring "getFilter" and "getQuery" in-line with "find" and other types #14463 hasezoey
- types(schema): re-export the defintion for SearchIndexDescription #14464 noseworthy
- docs: removed unused hook from docs #14461 bernardarhia
8.2.3 - 2024-03-21
8.2.2 - 2024-03-15
8.2.1 - 2024-03-04
8.2.0 - 2024-02-22
8.1.3 - 2024-02-16
8.1.2 - 2024-02-11
8.1.1 - 2024-01-24
8.1.0 - 2024-01-16
8.0.4 - 2024-01-09
8.0.3 - 2023-12-07
8.0.2 - 2023-11-28
8.0.1 - 2023-11-15
8.0.0 - 2023-10-31
8.0.0-rc0 - 2023-10-24
7.6.11 - 2024-04-11
chore: release 7.6.11
7.6.10 - 2024-03-13
7.6.9 - 2024-02-26
7.6.8 - 2024-01-08
7.6.7 - 2023-12-06
7.6.6 - 2023-11-27
7.6.5 - 2023-11-14
7.6.4 - 2023-10-30
7.6.3 - 2023-10-17
7.6.2 - 2023-10-13
7.6.1 - 2023-10-09
7.6.0 - 2023-10-06
7.5.4 - 2023-10-04
7.5.3 - 2023-09-25
7.5.2 - 2023-09-15
7.5.1 - 2023-09-11
7.5.0 - 2023-08-29
7.4.5 - 2023-08-25
7.4.4 - 2023-08-22
7.4.3 - 2023-08-11
7.4.2 - 2023-08-03
7.4.1 - 2023-07-24
7.4.0 - 2023-07-18
7.3.4 - 2023-07-12
7.3.3 - 2023-07-11
7.3.2 - 2023-07-06
7.3.1 - 2023-06-21
7.3.0 - 2023-06-14
7.2.4 - 2023-06-12
7.2.3 - 2023-06-09
7.2.2 - 2023-05-30
7.2.1 - 2023-05-24
7.2.0 - 2023-05-19
7.1.2 - 2023-05-19
7.1.1 - 2023-05-10
7.1.0 - 2023-04-27
7.0.5 - 2023-04-24
7.0.4 - 2023-04-17
7.0.3 - 2023-03-23
7.0.2 - 2023-03-15
7.0.1 - 2023-03-06
7.0.0 - 2023-02-27
7.0.0-rc0 - 2023-02-23
6.12.8 - 2024-04-10
chore: release 6.12.8
6.12.7 - 2024-03-01
6.12.6 - 2024-01-22
6.12.5 - 2024-01-03
6.12.4 - 2023-12-27
6.12.3 - 2023-11-07
6.12.2 - 2023-10-25
6.12.1 - 2023-10-12
6.12.0 - 2023-08-24
6.11.6 - 2023-08-21
6.11.5 - 2023-08-01
6.11.4 - 2023-07-17
6.11.3 - 2023-07-11
6.11.2 - 2023-06-08
6.11.1 - 2023-05-08
6.11.0 - 2023-05-01
6.10.5 - 2023-04-06
6.10.4 - 2023-03-21
6.10.3 - 2023-03-13
6.10.2 - 2023-03-07
6.10.1 - 2023-03-03
6.10.0 - 2023-02-22
6.9.3 - 2023-02-22
6.9.2 - 2023-02-16
6.9.1 - 2023-02-06
6.9.0 - 2023-01-25
6.8.4 - 2023-01-17
6.8.3 - 2023-01-06
6.8.2 - 2022-12-28
6.8.1 - 2022-12-19
6.8.0 - 2022-12-05
6.7.5 - 2022-11-30
6.7.4 - 2022-11-28
6.7.3 - 2022-11-22
6.7.2 - 2022-11-07
6.7.1 - 2022-11-02
6.7.0 - 2022-10-24
6.6.7 - 2022-10-21
6.6.6 - 2022-10-20
6.6.5 - 2022-10-05
6.6.4 - 2022-10-03
6.6.3 - 2022-09-30
6.6.2 - 2022-09-26
6.6.1 - 2022-09-14
6.6.0 - 2022-09-08
6.5.5 - 2022-09-07
6.5.4 - 2022-08-30
6.5.3 - 2022-08-25
6.5.2 - 2022-08-10
6.5.1 - 2022-08-03
6.5.0 - 2022-07-26
6.4.7 - 2022-07-25
6.4.6 - 2022-07-20
6.4.5 - 2022-07-18
6.4.4 - 2022-07-08
6.4.3 - 2022-07-05
6.4.2 - 2022-07-01
6.4.1 - 2022-06-27
6.4.0 - 2022-06-17
6.3.9 - 2022-06-17
6.3.8 - 2022-06-13
6.3.7 - 2022-06-13
6.3.6 - 2022-06-07
6.3.5 - 2022-05-30
6.3.4 - 2022-05-19
6.3.3 - 2022-05-09
6.3.2 - 2022-05-02
6.3.1 - 2022-04-21
6.3.0 - 2022-04-14
6.2.11 - 2022-04-13
6.2.10 - 2022-04-04
6.2.9 - 2022-03-28
6.2.8 - 2022-03-23
6.2.7 - 2022-03-16
6.2.6 - 2022-03-11
6.2.5 - 2022-03-09
6.2.4 - 2022-02-28
6.2.3 - 2022-02-21
6.2.2 - 2022-02-16
6.2.1 - 2022-02-07
6.2.0 - 2022-02-02
6.1.10 - 2022-02-01
6.1.9 - 2022-01-31
6.1.8 - 2022-01-24
6.1.7 - 2022-01-17
6.1.6 - 2022-01-10
6.1.5 - 2022-01-04
6.1.4 - 2021-12-27
6.1.3 - 2021-12-21
6.1.2 - 2021-12-15
6.1.1 - 2021-12-09
6.1.0 - 2021-12-07
6.0.15 - 2021-12-06
6.0.14 - 2021-11-29
6.0.13 - 2021-11-15
6.0.12 - 2021-10-21
6.0.11 - 2021-10-14
6.0.10 - 2021-10-08
6.0.9 - 2021-10-04
6.0.8 - 2021-09-27
6.0.7 - 2021-09-20
6.0.6 - 2021-09-15
6.0.5 - 2021-09-06
6.0.4 - 2021-09-01
6.0.3 - 2021-08-30
6.0.2 - 2021-08-26
6.0.1 - 2021-08-25
6.0.0 - 2021-08-24
6.0.0-rc2 - 2021-08-23
6.0.0-rc1 - 2021-08-12
6.0.0-rc0 - 2021-08-03
5.13.22 - 2024-01-02
5.13.21 - 2023-10-19
5.13.20 - 2023-07-12
5.13.19 - 2023-06-22
5.13.18 - 2023-06-22
5.13.17 - 2023-04-04
5.13.16 - 2023-02-20
5.13.15 - 2022-08-22
5.13.14 - 2021-12-27

from mongoose GitHub release notes

Commit messages

Package name: mongoose

6861d8d chore: release 8.3.2
0c5ec09 Merge pull request #14526 from Automattic/vkarpov15/gh-14469
cc84536 chore: add missing header to changelog
8bffb11 chore: fix dangling merge conflict in CHANGELOG
904c436 types(DocumentArray): pass DocType generic to Document for correct toJSON() and toObject() return types
78bbcb5 Merge pull request #14513 from emiljanitzek/feature/bulk-write-types
480c3f3 Merge branch '7.x'
c97c060 chore: release 7.6.11
247d029 fix(populate): avoid match function filtering out `null` values in populate result
2d4cbb8 Merge pull request #14518 from Automattic/vkarpov15/gh-14494
893b9d6 Merge pull request #14510 from Automattic/vkarpov15/gh-14473
bf70152 Merge branch '6.x' into 7.x
c00a715 chore: release 6.12.8
ae37362 fix(populate): avoid match function filtering out `null` values in populate result
e35fc63 Merge pull request #14514 from Automattic/vkarpov15/gh-14305
f54f9d0 types(models): fix incorrect bulk write options
bac8fb0 docs(middleware): remove archaic reference to node 7.6 in async/await example
f76c7e3 test(types): add test case for using `post(save)` with no `next()` arg
7629c94 docs(middleware): add note about using async functions for post hooks
e359b99 chore: release 8.3.1
68a7f6d Merge pull request #14501 from epmartini/patch-1
9221cc2 Merge pull request #14509 from hasezoey/fixTypo
3dd6edb types(query): make `FilterQuery` props resolve to `any` for generics support
4071fd7 style(model): fix typo in "$__updateConnection" docs