Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade mongoose from 6.12.0 to 8.0.4 #153

Closed

Conversation

lholmquist
Copy link
Member

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade mongoose from 6.12.0 to 8.0.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 52 versions ahead of your current version.
  • The recommended version was released 21 days ago, on 2024-01-09.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-FASTXMLPARSER-5668858
375/1000
Why? CVSS 7.5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: mongoose
  • 8.0.4 - 2024-01-09

    8.0.4 / 2024-01-08

    • fix(update): set CastError path to full path if casting update fails #14161 #14114
    • fix: cast error when there is an elemMatch in the and clause #14171 tosaka-n
    • fix: allow defining index on base model that applies to all discriminators #14176 peplin
    • fix(model): deep clone bulkWrite() updateOne arguments to avoid mutating documents in update #14197 #14164
    • fix(populate): handle deselecting _id with array of fields in populate() #14242 #14231
    • types(model+query): use stricter typings for updateX(), replaceOne(),deleteX() Model functions #14228 #14204
    • types: fix return types for findByIdAndDelete overrides #14196 #14190
    • types(schema): add missing omit() method #14235 amitbeck
    • types(model): add missing strict property to bulkWrite() top level options #14239
    • docs(compatibility): add note that Mongoose 5.13 is fully compatible with MongoDB server 5 #14230 #14149
    • docs: add shared schemas guide #14211
    • docs: update TLS/SSL guide for Mongoose v8 - MongoDB v6 driver deprecations #14170 andylwelch
    • docs: update findOneAndUpdate tutorial to use includeResultMetadata #14208 #14207
    • docs: clarify disabling _id on subdocs #14195 #14194
  • 8.0.3 - 2023-12-07

    8.0.3 / 2023-12-07

    • fix(schema): avoid creating unnecessary clone of schematype in nested array so nested document arrays use correct constructor #14128 #14101
    • docs(connections): add example of registering connection event handlers #14150
    • docs(populate): add example of using refPath and ref functions #14133 #13834
    • types: handle using BigInt global class in schema definitions #14160 #14147
    • types: make findOneAndDelete() without options return result doc, not ModifyResult #14153 #14130
    • types(model): add no-generic override for insertMany() with options #14152 #13999
    • types: add missing Type for applyDefaults #14159 jaypea
  • 8.0.2 - 2023-11-28
  • 8.0.1 - 2023-11-15
  • 8.0.0 - 2023-10-31
  • 8.0.0-rc0 - 2023-10-24
  • 7.6.8 - 2024-01-08

    chore: release 7.6.8

  • 7.6.7 - 2023-12-06

    chore: release 7.6.7

  • 7.6.6 - 2023-11-27
  • 7.6.5 - 2023-11-14
  • 7.6.4 - 2023-10-30
  • 7.6.3 - 2023-10-17
  • 7.6.2 - 2023-10-13
  • 7.6.1 - 2023-10-09
  • 7.6.0 - 2023-10-06
  • 7.5.4 - 2023-10-04
  • 7.5.3 - 2023-09-25
  • 7.5.2 - 2023-09-15
  • 7.5.1 - 2023-09-11
  • 7.5.0 - 2023-08-29
  • 7.4.5 - 2023-08-25
  • 7.4.4 - 2023-08-22
  • 7.4.3 - 2023-08-11
  • 7.4.2 - 2023-08-03
  • 7.4.1 - 2023-07-24
  • 7.4.0 - 2023-07-18
  • 7.3.4 - 2023-07-12
  • 7.3.3 - 2023-07-11
  • 7.3.2 - 2023-07-06
  • 7.3.1 - 2023-06-21
  • 7.3.0 - 2023-06-14
  • 7.2.4 - 2023-06-12
  • 7.2.3 - 2023-06-09
  • 7.2.2 - 2023-05-30
  • 7.2.1 - 2023-05-24
  • 7.2.0 - 2023-05-19
  • 7.1.2 - 2023-05-19
  • 7.1.1 - 2023-05-10
  • 7.1.0 - 2023-04-27
  • 7.0.5 - 2023-04-24
  • 7.0.4 - 2023-04-17
  • 7.0.3 - 2023-03-23
  • 7.0.2 - 2023-03-15
  • 7.0.1 - 2023-03-06
  • 7.0.0 - 2023-02-27
  • 7.0.0-rc0 - 2023-02-23
  • 6.12.6 - 2024-01-22

    chore: release 6.12.6

  • 6.12.5 - 2024-01-03

    chore: release 6.12.5

  • 6.12.4 - 2023-12-27

    chore: release 6.12.4

  • 6.12.3 - 2023-11-07
  • 6.12.2 - 2023-10-25
  • 6.12.1 - 2023-10-12
  • 6.12.0 - 2023-08-24
from mongoose GitHub release notes
Commit messages
Package name: mongoose
  • ec4191e chore: release 8.0.4
  • 3bc4482 Merge branch '7.x'
  • 2c2377d Merge pull request #14242 from Automattic/vkarpov15/gh-14231
  • ac9af5b docs: add unnecessary lookahead fix to changelog
  • 6ffb123 chore: release 7.6.8
  • 9b759bc fix(populate): handle deselecting `_id` with array of fields in `populate()`
  • 889a41d Merge pull request #14240 from Automattic/vkarpov15/gh-14236
  • 3d4274e Merge pull request #14239 from Automattic/vkarpov15/gh-14234
  • 62223bf Merge pull request #14235 from amitbeck/types/schema_omit
  • 3b2a138 fix(query): avoid double-calling query `transform()` with `findOne()`
  • ad5f8a1 test: repro #14236
  • 2f599b9 types(model): add missing `strict` property to `bulkWrite()` top level options
  • 9c823cd types(schema): add missing omit() method
  • 2657417 Merge pull request #14230 from Automattic/vkarpov15/gh-14149
  • 006d3cb docs(compatibility): add note that Mongoose 5.13 is fully compatible with MongoDB server 5
  • 7248bdf Merge branch '6.x' into 7.x
  • 2d68983 chore: release 6.12.5
  • b4e3b2f Merge pull request #14213 from Automattic/vkarpov15/gh-14024
  • 0960fae types(document): add ignoreAtomics option to isModified typedefs re: #14024
  • f7e9816 docs(document): add ignoreAtomics option to docs
  • 8a06572 Merge pull request #14228 from Automattic/vkarpov15/gh-14204
  • b52ec17 Merge pull request #14221 from Automattic/dependabot/npm_and_yarn/master/tsd-0.30.1
  • 3b5d8ab chore: use tsd@0.30.3
  • 86c0a16 upgrade to tsd 0.30.2

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@coveralls
Copy link

Pull Request Test Coverage Report for Build 7716017755

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage increased (+35.1%) to 35.088%

Totals Coverage Status
Change from base Build 7694017326: 35.1%
Covered Lines: 20
Relevant Lines: 51

💛 - Coveralls

@pacostas pacostas closed this Jan 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants