[Snyk] Security upgrade mongojs from 2.5.0 to 3.0.0

[scottie]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	630/1000 Why? Has a fix available, CVSS 8.1	Internal Property Tampering SNYK-JS-BSON-561052	Yes	No Known Exploit
	630/1000 Why? Has a fix available, CVSS 8.1	Internal Property Tampering SNYK-JS-BSON-6056525	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mongojs

The new version differs by 29 commits.

• b2ad375 3.0.0
• 0552311 Add auto-changelog to dependencies and to release workflow
• 2664828 Reflect the move to the mongo-js organization in URLs
• 9a39edd Generate a new changelog with auto-changelog
• d0f139b Fix release script
• 106af3e Fix connection string extension with mongodb+srv protocol
• c516e92 Switch to nyc for coverage reports
• 9deab34 Merge branch 'master' of github.com:mafintosh/mongojs
• d23f0ee Implement updateOne, insertOne and updateMany, insertMany
• 9c3218b Publicly expose mongo BSON Map (ES5 polyfill) (#364)
• f9763da Replaces xtend dependency by Object.assign (#380)
• 0bd8f71 removes shelljs dependency (#379)
• 6ca5c55 Expose Decimal128 BSON type (#362)
• af9776f Publicly expose mongo BSON Int32 type (#363)
• c576f60 update var to const (#361)
• a432765 Update dependencies (#377)
• 747f270 Remove package-lock.json as it breaks builds due to a bug in npm with bundleDependencies and shoe
• a318000 Add mongodb 4 to build matrix
• e0ab473 Remove support for node v0.10, v0.12 from travis build matrix and add v9 and v10 to build matrix
• 3be25ef Add package lock file
• 781d7ac Merge pull request #353 from mafintosh/mongodb3
• 109eec6 Upgrade mongodb to version ^3.
• 238c32a 2.6.0
• d531aa0 update changelog

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.