Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade mongoose from 6.12.0 to 8.3.3 #196

Closed
wants to merge 1 commit into from
Closed

[Snyk] Upgrade mongoose from 6.12.0 to 8.3.3 #196

wants to merge 1 commit into from

Conversation

lholmquist
Copy link
Member

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade mongoose from 6.12.0 to 8.3.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 70 versions ahead of your current version.

  • The recommended version was released 21 days ago, on 2024-04-29.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-FASTXMLPARSER-5668858		 375/1000
Why? CVSS 7.5		 No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: mongoose
  • 8.3.3 - 2024-04-29

    8.3.3 / 2024-04-29

    • perf(document): add fast path for applying non-nested virtuals to JSON #14543
    • fix: make hydrate() recursively hydrate virtual populate docs if hydratedPopulatedDocs is set #14533 #14503
    • fix: improve timestamps option handling in bulkWrite #14546 #14536 sderrow
    • fix(model): make recompileSchema() overwrite existing document array discriminators #14527
    • types(schema): correctly infer Array<Schema.Types.*> #14534 #14367
    • types(query+populate): apply populate overrides to doc toObject() result #14525 #14441
    • types: add null to select override return type for findOne #14545 sderrow
  • 8.3.2 - 2024-04-16

    8.3.2 / 2024-04-16

    • fix(populate): avoid match function filtering out null values in populate result #14518 #14494
    • types(query): make FilterQuery props resolve to any for generics support #14510 #14473 #14459
    • types(DocumentArray): pass DocType generic to Document for correct toJSON() and toObject() return types #14526 #14469
    • types(models): fix incorrect bulk write options #14513 emiljanitzek
    • docs: add documentation for calling schema.post() with async function #14514 #14305
  • 8.3.1 - 2024-04-08

    8.3.1 / 2024-04-08

    • fix(document): make update minimization unset property rather than setting to null #14504 #14445
    • fix(model): make Model.recompileSchema() also re-apply discriminators #14500 #14444
    • fix(schema): deduplicate idGetter so creating multiple models with same schema doesn't result in multiple id getters #14492
    • fix: update kareem -> 2.6.3 for index.d.ts #14508 #14497
    • fix(mongoose): make setDriver() update mongoose.model() connections and collections #14505
    • types(validation): support function for validator message property, and add support for accessing validator reason #14499 #14496
    • docs: remove typo #14501 epmartini
  • 8.3.0 - 2024-04-03

    8.3.0 / 2024-04-03

    • feat: use mongodb@6.5.0
    • feat(document): add validateAllPaths option to validate() and validateSync() #14467 #14414
    • feat: pathsToSave option to save() function #14385 #9583
    • feat(query): add options parameter to Query.prototype.sort() #14375 #14365
    • feat: add function SchemaType.prototype.validateAll #14434 #6910
    • fix: handle array schema definitions with of keyword #14447 #14416
    • types: add overwriteMiddlewareResult and skipMiddlewareFunction to types #14328 #14829
  • 8.2.4 - 2024-03-28

    8.2.4 / 2024-03-28

    • types(query): bring "getFilter" and "getQuery" in-line with "find" and other types #14463 hasezoey
    • types(schema): re-export the defintion for SearchIndexDescription #14464 noseworthy
    • docs: removed unused hook from docs #14461 bernardarhia
  • 8.2.3 - 2024-03-21
  • 8.2.2 - 2024-03-15
  • 8.2.1 - 2024-03-04
  • 8.2.0 - 2024-02-22
  • 8.1.3 - 2024-02-16
  • 8.1.2 - 2024-02-11
  • 8.1.1 - 2024-01-24
  • 8.1.0 - 2024-01-16
  • 8.0.4 - 2024-01-09
  • 8.0.3 - 2023-12-07
  • 8.0.2 - 2023-11-28
  • 8.0.1 - 2023-11-15
  • 8.0.0 - 2023-10-31
  • 8.0.0-rc0 - 2023-10-24
  • 7.6.11 - 2024-04-11

    chore: release 7.6.11

  • 7.6.10 - 2024-03-13
  • 7.6.9 - 2024-02-26
  • 7.6.8 - 2024-01-08
  • 7.6.7 - 2023-12-06
  • 7.6.6 - 2023-11-27
  • 7.6.5 - 2023-11-14
  • 7.6.4 - 2023-10-30
  • 7.6.3 - 2023-10-17
  • 7.6.2 - 2023-10-13
  • 7.6.1 - 2023-10-09
  • 7.6.0 - 2023-10-06
  • 7.5.4 - 2023-10-04
  • 7.5.3 - 2023-09-25
  • 7.5.2 - 2023-09-15
  • 7.5.1 - 2023-09-11
  • 7.5.0 - 2023-08-29
  • 7.4.5 - 2023-08-25
  • 7.4.4 - 2023-08-22
  • 7.4.3 - 2023-08-11
  • 7.4.2 - 2023-08-03
  • 7.4.1 - 2023-07-24
  • 7.4.0 - 2023-07-18
  • 7.3.4 - 2023-07-12
  • 7.3.3 - 2023-07-11
  • 7.3.2 - 2023-07-06
  • 7.3.1 - 2023-06-21
  • 7.3.0 - 2023-06-14
  • 7.2.4 - 2023-06-12
  • 7.2.3 - 2023-06-09
  • 7.2.2 - 2023-05-30
  • 7.2.1 - 2023-05-24
  • 7.2.0 - 2023-05-19
  • 7.1.2 - 2023-05-19
  • 7.1.1 - 2023-05-10
  • 7.1.0 - 2023-04-27
  • 7.0.5 - 2023-04-24
  • 7.0.4 - 2023-04-17
  • 7.0.3 - 2023-03-23
  • 7.0.2 - 2023-03-15
  • 7.0.1 - 2023-03-06
  • 7.0.0 - 2023-02-27
  • 7.0.0-rc0 - 2023-02-23
  • 6.12.8 - 2024-04-10

    chore: release 6.12.8

  • 6.12.7 - 2024-03-01
  • 6.12.6 - 2024-01-22
  • 6.12.5 - 2024-01-03
  • 6.12.4 - 2023-12-27
  • 6.12.3 - 2023-11-07
  • 6.12.2 - 2023-10-25
  • 6.12.1 - 2023-10-12
  • 6.12.0 - 2023-08-24
from mongoose GitHub release notes
Commit messages
Package name: mongoose
  • d51173a chore: release 8.3.3
  • b6ffcfd test: lint and test cases for #14545
  • 16e6985 Merge pull request #14545 from sderrow/fix-select-override-return-type
  • 72da808 Merge pull request #14542 from Automattic/vkarpov15/gh-14286
  • 434dac8 Merge pull request #14546 from sderrow/bulk-write-timestamps-fix
  • 286c7d1 Merge pull request #14543 from Automattic/vkarpov15/gh-14394
  • f745033 Merge pull request #14540 from Automattic/IslandRhythms/remove-commands
  • af2afc1 Merge pull request #14534 from Automattic/vkarpov15/gh-14367-2
  • d5bd91d docs: full Schema generics definition re: code review on #14542
  • 72e4957 Update docs/typescript/schemas.md
  • d7d9db4 Update docs/typescript/schemas.md
  • 692117e Update docs/typescript/schemas.md
  • f463240 FIx lint
  • 1111ae2 Improved timestamps option handling in bulkWrite
  • f0dc26f Add `null` to `select` override return type
  • 8ead266 perf(document): add fast path for applying non-nested virtuals to JSON
  • 5c4051a docs: de-emphasize `InferSchemaType<>` in TypeScript docs in favor of automatic inference
  • 3072c41 fix(model): make `recompileSchema()` overwrite existing document array discriminators
  • 168d013 Update package.json
  • 5137eeb Merge pull request #14525 from Automattic/vkarpov15/gh-14441
  • 5b2545e test: add test case covering code review comments from #14525
  • e91fcf4 Merge pull request #14533 from Automattic/vkarpov15/gh-14503
  • 10f2fa7 types(schema): correctly infer Array<Schema.Types.*>
  • fe1ed86 types(populate): more graceful handling of query `populate()` without generics re: #14525

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.

@snyk-bot
feat: upgrade mongoose from 6.12.0 to 8.3.3
8c48983 
Snyk has created this PR to upgrade mongoose from 6.12.0 to 8.3.3.

See this package in npm:
mongoose

See this project in Snyk:
https://app.snyk.io/org/nodeshift-agg/project/0865fbfa-c5be-44cc-ab70-e2f03f8f4eb1?utm_source=github&utm_medium=referral&page=upgrade-pr
@coveralls
Copy link

Pull Request Test Coverage Report for Build 9165180693

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage increased (+35.1%) to 35.088%
Totals Coverage Status
Change from base Build 9155189701: 35.1%
Covered Lines: 20
Relevant Lines: 51
💛 - Coveralls

@pacostas pacostas closed this May 21, 2024
@pacostas pacostas deleted the snyk-upgrade-59f976f42c675a6ace70827aa567ae96 branch May 21, 2024 11:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
4 participants
@lholmquist @coveralls @pacostas @snyk-bot