[Snyk] Upgrade mongoose from 5.13.14 to 8.3.3 #280

Gabo-Tech · 2024-05-20T20:39:49Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade mongoose from 5.13.14 to 8.3.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 181 versions ahead of your current version.
The recommended version was released 21 days ago, on 2024-04-29.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-MONGOOSE-2961688	671/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7	Proof of Concept
	Prototype Pollution SNYK-JS-MONGOOSE-5777721	671/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: mongoose

8.3.3 - 2024-04-29
8.3.3 / 2024-04-29
- perf(document): add fast path for applying non-nested virtuals to JSON #14543
- fix: make hydrate() recursively hydrate virtual populate docs if hydratedPopulatedDocs is set #14533 #14503
- fix: improve timestamps option handling in bulkWrite #14546 #14536 sderrow
- fix(model): make recompileSchema() overwrite existing document array discriminators #14527
- types(schema): correctly infer Array<Schema.Types.*> #14534 #14367
- types(query+populate): apply populate overrides to doc toObject() result #14525 #14441
- types: add null to select override return type for findOne #14545 sderrow
8.3.2 - 2024-04-16
8.3.2 / 2024-04-16
- fix(populate): avoid match function filtering out null values in populate result #14518 #14494
- types(query): make FilterQuery props resolve to any for generics support #14510 #14473 #14459
- types(DocumentArray): pass DocType generic to Document for correct toJSON() and toObject() return types #14526 #14469
- types(models): fix incorrect bulk write options #14513 emiljanitzek
- docs: add documentation for calling schema.post() with async function #14514 #14305
8.3.1 - 2024-04-08
8.3.1 / 2024-04-08
- fix(document): make update minimization unset property rather than setting to null #14504 #14445
- fix(model): make Model.recompileSchema() also re-apply discriminators #14500 #14444
- fix(schema): deduplicate idGetter so creating multiple models with same schema doesn't result in multiple id getters #14492
- fix: update kareem -> 2.6.3 for index.d.ts #14508 #14497
- fix(mongoose): make setDriver() update mongoose.model() connections and collections #14505
- types(validation): support function for validator message property, and add support for accessing validator reason #14499 #14496
- docs: remove typo #14501 epmartini
8.3.0 - 2024-04-03
8.3.0 / 2024-04-03
- feat: use mongodb@6.5.0
- feat(document): add validateAllPaths option to validate() and validateSync() #14467 #14414
- feat: pathsToSave option to save() function #14385 #9583
- feat(query): add options parameter to Query.prototype.sort() #14375 #14365
- feat: add function SchemaType.prototype.validateAll #14434 #6910
- fix: handle array schema definitions with of keyword #14447 #14416
- types: add overwriteMiddlewareResult and skipMiddlewareFunction to types #14328 #14829
8.2.4 - 2024-03-28
8.2.4 / 2024-03-28
- types(query): bring "getFilter" and "getQuery" in-line with "find" and other types #14463 hasezoey
- types(schema): re-export the defintion for SearchIndexDescription #14464 noseworthy
- docs: removed unused hook from docs #14461 bernardarhia
8.2.3 - 2024-03-21
8.2.2 - 2024-03-15
8.2.1 - 2024-03-04
8.2.0 - 2024-02-22
8.1.3 - 2024-02-16
8.1.2 - 2024-02-11
8.1.1 - 2024-01-24
8.1.0 - 2024-01-16
8.0.4 - 2024-01-09
8.0.3 - 2023-12-07
8.0.2 - 2023-11-28
8.0.1 - 2023-11-15
8.0.0 - 2023-10-31
8.0.0-rc0 - 2023-10-24
7.6.11 - 2024-04-11
chore: release 7.6.11
7.6.10 - 2024-03-13
7.6.9 - 2024-02-26
7.6.8 - 2024-01-08
7.6.7 - 2023-12-06
7.6.6 - 2023-11-27
7.6.5 - 2023-11-14
7.6.4 - 2023-10-30
7.6.3 - 2023-10-17
7.6.2 - 2023-10-13
7.6.1 - 2023-10-09
7.6.0 - 2023-10-06
7.5.4 - 2023-10-04
7.5.3 - 2023-09-25
7.5.2 - 2023-09-15
7.5.1 - 2023-09-11
7.5.0 - 2023-08-29
7.4.5 - 2023-08-25
7.4.4 - 2023-08-22
7.4.3 - 2023-08-11
7.4.2 - 2023-08-03
7.4.1 - 2023-07-24
7.4.0 - 2023-07-18
7.3.4 - 2023-07-12
7.3.3 - 2023-07-11
7.3.2 - 2023-07-06
7.3.1 - 2023-06-21
7.3.0 - 2023-06-14
7.2.4 - 2023-06-12
7.2.3 - 2023-06-09
7.2.2 - 2023-05-30
7.2.1 - 2023-05-24
7.2.0 - 2023-05-19
7.1.2 - 2023-05-19
7.1.1 - 2023-05-10
7.1.0 - 2023-04-27
7.0.5 - 2023-04-24
7.0.4 - 2023-04-17
7.0.3 - 2023-03-23
7.0.2 - 2023-03-15
7.0.1 - 2023-03-06
7.0.0 - 2023-02-27
7.0.0-rc0 - 2023-02-23
6.12.8 - 2024-04-10
chore: release 6.12.8
6.12.7 - 2024-03-01
6.12.6 - 2024-01-22
6.12.5 - 2024-01-03
6.12.4 - 2023-12-27
6.12.3 - 2023-11-07
6.12.2 - 2023-10-25
6.12.1 - 2023-10-12
6.12.0 - 2023-08-24
6.11.6 - 2023-08-21
6.11.5 - 2023-08-01
6.11.4 - 2023-07-17
6.11.3 - 2023-07-11
6.11.2 - 2023-06-08
6.11.1 - 2023-05-08
6.11.0 - 2023-05-01
6.10.5 - 2023-04-06
6.10.4 - 2023-03-21
6.10.3 - 2023-03-13
6.10.2 - 2023-03-07
6.10.1 - 2023-03-03
6.10.0 - 2023-02-22
6.9.3 - 2023-02-22
6.9.2 - 2023-02-16
6.9.1 - 2023-02-06
6.9.0 - 2023-01-25
6.8.4 - 2023-01-17
6.8.3 - 2023-01-06
6.8.2 - 2022-12-28
6.8.1 - 2022-12-19
6.8.0 - 2022-12-05
6.7.5 - 2022-11-30
6.7.4 - 2022-11-28
6.7.3 - 2022-11-22
6.7.2 - 2022-11-07
6.7.1 - 2022-11-02
6.7.0 - 2022-10-24
6.6.7 - 2022-10-21
6.6.6 - 2022-10-20
6.6.5 - 2022-10-05
6.6.4 - 2022-10-03
6.6.3 - 2022-09-30
6.6.2 - 2022-09-26
6.6.1 - 2022-09-14
6.6.0 - 2022-09-08
6.5.5 - 2022-09-07
6.5.4 - 2022-08-30
6.5.3 - 2022-08-25
6.5.2 - 2022-08-10
6.5.1 - 2022-08-03
6.5.0 - 2022-07-26
6.4.7 - 2022-07-25
6.4.6 - 2022-07-20
6.4.5 - 2022-07-18
6.4.4 - 2022-07-08
6.4.3 - 2022-07-05
6.4.2 - 2022-07-01
6.4.1 - 2022-06-27
6.4.0 - 2022-06-17
6.3.9 - 2022-06-17
6.3.8 - 2022-06-13
6.3.7 - 2022-06-13
6.3.6 - 2022-06-07
6.3.5 - 2022-05-30
6.3.4 - 2022-05-19
6.3.3 - 2022-05-09
6.3.2 - 2022-05-02
6.3.1 - 2022-04-21
6.3.0 - 2022-04-14
6.2.11 - 2022-04-13
6.2.10 - 2022-04-04
6.2.9 - 2022-03-28
6.2.8 - 2022-03-23
6.2.7 - 2022-03-16
6.2.6 - 2022-03-11
6.2.5 - 2022-03-09
6.2.4 - 2022-02-28
6.2.3 - 2022-02-21
6.2.2 - 2022-02-16
6.2.1 - 2022-02-07
6.2.0 - 2022-02-02
6.1.10 - 2022-02-01
6.1.9 - 2022-01-31
6.1.8 - 2022-01-24
6.1.7 - 2022-01-17
6.1.6 - 2022-01-10
6.1.5 - 2022-01-04
6.1.4 - 2021-12-27
6.1.3 - 2021-12-21
6.1.2 - 2021-12-15
6.1.1 - 2021-12-09
6.1.0 - 2021-12-07
6.0.15 - 2021-12-06
6.0.14 - 2021-11-29
6.0.13 - 2021-11-15
6.0.12 - 2021-10-21
6.0.11 - 2021-10-14
6.0.10 - 2021-10-08
6.0.9 - 2021-10-04
6.0.8 - 2021-09-27
6.0.7 - 2021-09-20
6.0.6 - 2021-09-15
6.0.5 - 2021-09-06
6.0.4 - 2021-09-01
6.0.3 - 2021-08-30
6.0.2 - 2021-08-26
6.0.1 - 2021-08-25
6.0.0 - 2021-08-24
6.0.0-rc2 - 2021-08-23
6.0.0-rc1 - 2021-08-12
6.0.0-rc0 - 2021-08-03
5.13.22 - 2024-01-02
5.13.21 - 2023-10-19
5.13.20 - 2023-07-12
5.13.19 - 2023-06-22
5.13.18 - 2023-06-22
5.13.17 - 2023-04-04
5.13.16 - 2023-02-20
5.13.15 - 2022-08-22
5.13.14 - 2021-12-27

from mongoose GitHub release notes

Commit messages

Package name: mongoose

d51173a chore: release 8.3.3
b6ffcfd test: lint and test cases for #14545
16e6985 Merge pull request #14545 from sderrow/fix-select-override-return-type
72da808 Merge pull request #14542 from Automattic/vkarpov15/gh-14286
434dac8 Merge pull request #14546 from sderrow/bulk-write-timestamps-fix
286c7d1 Merge pull request #14543 from Automattic/vkarpov15/gh-14394
f745033 Merge pull request #14540 from Automattic/IslandRhythms/remove-commands
af2afc1 Merge pull request #14534 from Automattic/vkarpov15/gh-14367-2
d5bd91d docs: full Schema generics definition re: code review on #14542
72e4957 Update docs/typescript/schemas.md
d7d9db4 Update docs/typescript/schemas.md
692117e Update docs/typescript/schemas.md
f463240 FIx lint
1111ae2 Improved timestamps option handling in bulkWrite
f0dc26f Add `null` to `select` override return type
8ead266 perf(document): add fast path for applying non-nested virtuals to JSON
5c4051a docs: de-emphasize `InferSchemaType<>` in TypeScript docs in favor of automatic inference
3072c41 fix(model): make `recompileSchema()` overwrite existing document array discriminators
168d013 Update package.json
5137eeb Merge pull request #14525 from Automattic/vkarpov15/gh-14441
5b2545e test: add test case covering code review comments from #14525
e91fcf4 Merge pull request #14533 from Automattic/vkarpov15/gh-14503
10f2fa7 types(schema): correctly infer Array<Schema.Types.*>
fe1ed86 types(populate): more graceful handling of query `populate()` without generics re: #14525