Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade mongoose from 6.12.0 to 8.1.0 #157

Closed

Conversation

lholmquist
Copy link
Member

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade mongoose from 6.12.0 to 8.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 53 versions ahead of your current version.
  • The recommended version was released 21 days ago, on 2024-01-16.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-FASTXMLPARSER-5668858
375/1000
Why? CVSS 7.5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: mongoose
  • 8.1.0 - 2024-01-16

    8.1.0 / 2024-01-16

    • feat: upgrade MongoDB driver -> 6.3.0 #14241 #14189 #14108 #14104
    • feat: add Atlas search index helpers to Models and Schemas #14251 #14232
    • feat(connection): add listCollections() helper to connections #14257
    • feat(schematype): merge rather than overwrite default schematype validators #14124 #14070
    • feat(types): support type hints in InferSchemaType #14008 JavaScriptBach
  • 8.0.4 - 2024-01-09

    8.0.4 / 2024-01-08

    • fix(update): set CastError path to full path if casting update fails #14161 #14114
    • fix: cast error when there is an elemMatch in the and clause #14171 tosaka-n
    • fix: allow defining index on base model that applies to all discriminators #14176 peplin
    • fix(model): deep clone bulkWrite() updateOne arguments to avoid mutating documents in update #14197 #14164
    • fix(populate): handle deselecting _id with array of fields in populate() #14242 #14231
    • types(model+query): use stricter typings for updateX(), replaceOne(),deleteX() Model functions #14228 #14204
    • types: fix return types for findByIdAndDelete overrides #14196 #14190
    • types(schema): add missing omit() method #14235 amitbeck
    • types(model): add missing strict property to bulkWrite() top level options #14239
    • docs(compatibility): add note that Mongoose 5.13 is fully compatible with MongoDB server 5 #14230 #14149
    • docs: add shared schemas guide #14211
    • docs: update TLS/SSL guide for Mongoose v8 - MongoDB v6 driver deprecations #14170 andylwelch
    • docs: update findOneAndUpdate tutorial to use includeResultMetadata #14208 #14207
    • docs: clarify disabling _id on subdocs #14195 #14194
  • 8.0.3 - 2023-12-07

    8.0.3 / 2023-12-07

    • fix(schema): avoid creating unnecessary clone of schematype in nested array so nested document arrays use correct constructor #14128 #14101
    • docs(connections): add example of registering connection event handlers #14150
    • docs(populate): add example of using refPath and ref functions #14133 #13834
    • types: handle using BigInt global class in schema definitions #14160 #14147
    • types: make findOneAndDelete() without options return result doc, not ModifyResult #14153 #14130
    • types(model): add no-generic override for insertMany() with options #14152 #13999
    • types: add missing Type for applyDefaults #14159 jaypea
  • 8.0.2 - 2023-11-28
  • 8.0.1 - 2023-11-15
  • 8.0.0 - 2023-10-31
  • 8.0.0-rc0 - 2023-10-24
  • 7.6.8 - 2024-01-08

    chore: release 7.6.8

  • 7.6.7 - 2023-12-06

    chore: release 7.6.7

  • 7.6.6 - 2023-11-27
  • 7.6.5 - 2023-11-14
  • 7.6.4 - 2023-10-30
  • 7.6.3 - 2023-10-17
  • 7.6.2 - 2023-10-13
  • 7.6.1 - 2023-10-09
  • 7.6.0 - 2023-10-06
  • 7.5.4 - 2023-10-04
  • 7.5.3 - 2023-09-25
  • 7.5.2 - 2023-09-15
  • 7.5.1 - 2023-09-11
  • 7.5.0 - 2023-08-29
  • 7.4.5 - 2023-08-25
  • 7.4.4 - 2023-08-22
  • 7.4.3 - 2023-08-11
  • 7.4.2 - 2023-08-03
  • 7.4.1 - 2023-07-24
  • 7.4.0 - 2023-07-18
  • 7.3.4 - 2023-07-12
  • 7.3.3 - 2023-07-11
  • 7.3.2 - 2023-07-06
  • 7.3.1 - 2023-06-21
  • 7.3.0 - 2023-06-14
  • 7.2.4 - 2023-06-12
  • 7.2.3 - 2023-06-09
  • 7.2.2 - 2023-05-30
  • 7.2.1 - 2023-05-24
  • 7.2.0 - 2023-05-19
  • 7.1.2 - 2023-05-19
  • 7.1.1 - 2023-05-10
  • 7.1.0 - 2023-04-27
  • 7.0.5 - 2023-04-24
  • 7.0.4 - 2023-04-17
  • 7.0.3 - 2023-03-23
  • 7.0.2 - 2023-03-15
  • 7.0.1 - 2023-03-06
  • 7.0.0 - 2023-02-27
  • 7.0.0-rc0 - 2023-02-23
  • 6.12.6 - 2024-01-22

    chore: release 6.12.6

  • 6.12.5 - 2024-01-03

    chore: release 6.12.5

  • 6.12.4 - 2023-12-27

    chore: release 6.12.4

  • 6.12.3 - 2023-11-07
  • 6.12.2 - 2023-10-25
  • 6.12.1 - 2023-10-12
  • 6.12.0 - 2023-08-24
from mongoose GitHub release notes
Commit messages
Package name: mongoose
  • ebf7d07 chore: release 8.1.0
  • 3165a97 Merge pull request #14260 from Automattic/8.1
  • fd80ad3 Merge branch 'master' into 8.1
  • 3393c96 Merge pull request #14251 from Automattic/vkarpov15/gh-14232
  • dad0da9 Merge pull request #14257 from Automattic/vkarpov15/listcollections
  • 33b3bba types: add tsdoc comments re: code review
  • ab28496 Update lib/schema.js
  • d1e3c81 Update lib/model.js
  • 1eaa2d6 Merge pull request #14255 from monkbroc/patch-2
  • 6c21fcc address code review comments
  • 6c6fb8b feat(connection): add listCollections() helper to connections
  • 420c92d Fix markdown typo introduced in #14230
  • 9ed507a Merge pull request #14252 from Automattic/vkarpov15/gh-14238
  • 024c029 docs(model): remove callback example for `ensureIndexes()`
  • 4611ba2 feat: add autoSearchIndex option and Schema.prototype.searchIndex() re: #14232
  • a76a99a feat(model): add updateSearchIndex and dropSearchIndex helpers re: #14232
  • 6bd415b feat(model): add createSearchIndex() function
  • abdac8d fix merge issues from reverting #13993
  • 5337da9 Revert "fix: Strict Projection Object Typing (#13993)"
  • 7dafe5b Merge branch 'master' into 8.1
  • ec4191e chore: release 8.0.4
  • 3bc4482 Merge branch '7.x'
  • 2c2377d Merge pull request #14242 from Automattic/vkarpov15/gh-14231
  • ac9af5b docs: add unnecessary lookahead fix to changelog

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@coveralls
Copy link

Pull Request Test Coverage Report for Build 7809234243

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage increased (+35.1%) to 35.088%

Totals Coverage Status
Change from base Build 7781895734: 35.1%
Covered Lines: 20
Relevant Lines: 51

💛 - Coveralls

@pacostas pacostas closed this Feb 7, 2024
@pacostas pacostas deleted the snyk-upgrade-e05de2c687ae88e738b47cec64c7ec91 branch February 7, 2024 10:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants