forked from snyk-labs/nodejs-goof
-
Notifications
You must be signed in to change notification settings - Fork 0
[Snyk] Upgrade mongoose from 4.2.4 to 6.1.7 #218
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
snyk-bot
wants to merge
29
commits into
master
Choose a base branch
from
snyk-upgrade-f40e0bd2abeb520129ee39bf7551caa7
base: master
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Circleci project setup
Circleci editor/master
Circleci editor/master
Snyk has created this PR to upgrade mongoose from 4.2.4 to 6.1.7. See this package in npm: https://www.npmjs.com/package/mongoose See this project in Snyk: https://app.snyk.io/org/panda-co/project/ebfb2282-581e-4b1b-afb0-8a0e07b1b540?utm_source=github&utm_medium=referral&page=upgrade-pr
This was referenced May 31, 2022
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade mongoose from 4.2.4 to 6.1.7.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Warning: This is a major version upgrade, and may be a breaking change.
The recommended version fixes:
SNYK-JS-MQUERY-1089718
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-MQUERY-1050858
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
npm:mongoose:20160116
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-MONGODB-473855
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-KERBEROS-568900
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-MPATH-1577289
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-MONGOOSE-472486
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
SNYK-JS-MONGOOSE-1086688
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: mongoose
-
6.1.7 - 2022-01-17
- fix(model): correct handling for $push on a nested array #11108
- fix(update): correctly apply timestamps to update pipelines #11151
- fix(document): correctly handle modifying array subdocument after setting array subdocument to itself #11172
- fix(index.d.ts): allow passing options to model() in place of removed
- fix(aggregate): allow passing verbosity to Aggregate.prototype.explain() #11144
- fix(index.d.ts): avoid TypeScript inferring _id as any type with HydratedDocument #11085
- docs: fix Node.js Driver compat link #11214 wesbos
- docs: remove extraneous backquote #11204 joebowbeer
-
6.1.6 - 2022-01-10
- perf(document): delay creating document event emitter until used to improve memory usage, several small improvements to improve initing docs with large arrays #10400
- fix(model): avoid
- fix(model): revert #11079:
- fix(index.d.ts): support strings in deep populate #11181 ivalduan
- fix(index.d.ts): rename map() -> transform() to line up with change in v6.0 #11161
- fix(index.d.ts): allow new Model(obj) for stricter type checks #11148
- fix(index.d.ts): make Schema.prototype.pre() and post() generics default to HydratedDocument #11180
- docs: improve autoCreate docs #11116
- docs(schematype): add missing parameter to example #11185 kerolloz
- docs(connections): use updated link to list of MongoDB Node driver
- docs(aggregate): fix formatting #11191 enieber
- docs: fix broken link #11179 khairnarsaurabh23
-
6.1.5 - 2022-01-04
- perf(index.d.ts): simplify Schema typedef for query helpers and methods to significantly reduce TS compiler overhead #10349
- fix(document): allow populating deeply nested models as strings #11168 #11160 AbdelrahmanHafez
- fix(query): allow calling limit() and skip() with a string #11017
- fix(cursor): propery apply selected fields when loading discriminator docs with query cursor #11130
- fix(mongoose+connection): clone schema correctly when passing instance of another Mongoose instance's Schema to Connection.prototype.model() #11047
- fix(index.d.ts): handle primitives with FlattenMaps #11117
- fix(index.d.ts): enforce id on lean query result type #11118
- fix(index.d.ts): export facet stage type #11150 mhoc
- fix(index.d.ts): correct return type of projection method #11176 EugeneKorshenko
- fix(index.d.ts): additional fix for
- docs: update CONTRIBUTING.md for TS tests #11164 ahmedelshenawy25
- docs: use es6 object destructuring instead of regular dot operator for accessing value in object #11147 Shivaansh-Agarwal
-
6.1.4 - 2021-12-27
- fix(document): handle save with undefined nested doc under subdoc #11110
- fix(document): allow manually populating subdocument refs with
- fix(populate): handles refPath underneath map of subdocuments #9359
- fix(update): throw error when calling findByIdAndUpdate with undefined id #11079 gramliu
- fix(mongoose): export ConnectionStates #11133 orgads
- fix(index.d.ts): unpack array when using generic type override with
- fix(index.d.ts): fix typings in Merge stage #11132
- fix(index.d.ts): PipelineStage.Merge interface definition is wrong #11109
- docs(typescript): add note about Schema.Types.ObjectId vs Types.ObjectId in document definition #10949
- docs(connection): clarify that "connected" and "open" are different #10886
- docs(populate): correct refPath example to not use on as a schema path name #11113
- docs: fix
-
6.1.3 - 2021-12-21
-
6.1.2 - 2021-12-15
-
6.1.1 - 2021-12-09
-
6.1.0 - 2021-12-07
-
6.0.15 - 2021-12-06
-
6.0.14 - 2021-11-29
-
6.0.13 - 2021-11-15
-
6.0.12 - 2021-10-21
-
6.0.11 - 2021-10-14
-
6.0.10 - 2021-10-08
-
6.0.9 - 2021-10-04
-
6.0.8 - 2021-09-27
-
6.0.7 - 2021-09-20
-
6.0.6 - 2021-09-15
-
6.0.5 - 2021-09-06
-
6.0.4 - 2021-09-01
-
6.0.3 - 2021-08-30
-
6.0.2 - 2021-08-26
-
6.0.1 - 2021-08-25
-
6.0.0 - 2021-08-24
-
6.0.0-rc2 - 2021-08-23
-
6.0.0-rc1 - 2021-08-12
-
6.0.0-rc0 - 2021-08-03
-
5.13.14 - 2021-12-27
-
5.13.13 - 2021-11-02
-
5.13.12 - 2021-10-19
-
5.13.11 - 2021-10-12
-
5.13.10 - 2021-10-05
-
5.13.9 - 2021-09-06
-
5.13.8 - 2021-08-23
-
5.13.7 - 2021-08-11
-
5.13.6 - 2021-08-09
-
5.13.5 - 2021-07-30
-
5.13.4 - 2021-07-28
-
5.13.3 - 2021-07-16
-
5.13.2 - 2021-07-03
-
5.13.1 - 2021-07-02
-
5.13.0 - 2021-06-28
-
5.12.15 - 2021-06-25
-
5.12.14 - 2021-06-15
-
5.12.13 - 2021-06-04
-
5.12.12 - 2021-05-28
-
5.12.11 - 2021-05-24
-
5.12.10 - 2021-05-18
-
5.12.9 - 2021-05-13
-
5.12.8 - 2021-05-10
-
5.12.7 - 2021-04-29
-
5.12.6 - 2021-04-27
-
5.12.5 - 2021-04-19
-
5.12.4 - 2021-04-15
-
5.12.3 - 2021-03-31
-
5.12.2 - 2021-03-22
-
5.12.1 - 2021-03-18
-
5.12.0 - 2021-03-11
-
5.11.20 - 2021-03-11
-
5.11.19 - 2021-03-05
-
5.11.18 - 2021-02-23
-
5.11.17 - 2021-02-17
-
5.11.16 - 2021-02-12
-
5.11.15 - 2021-02-03
-
5.11.14 - 2021-01-28
-
5.11.13 - 2021-01-20
-
5.11.12 - 2021-01-14
-
5.11.11 - 2021-01-08
-
5.11.10 - 2021-01-04
-
5.11.9 - 2020-12-28
-
5.11.8 - 2020-12-14
-
5.11.7 - 2020-12-10
-
5.11.6 - 2020-12-09
-
5.11.5 - 2020-12-07
-
5.11.4 - 2020-12-04
-
5.11.3 - 2020-12-03
-
5.11.2 - 2020-12-02
-
5.11.1 - 2020-12-01
-
5.11.0 - 2020-11-30
-
5.10.19 - 2020-11-30
-
5.10.18 - 2020-11-29
-
5.10.17 - 2020-11-27
-
5.10.16 - 2020-11-25
-
5.10.15 - 2020-11-16
-
5.10.14 - 2020-11-12
-
5.10.13 - 2020-11-06
-
5.10.12 - 2020-11-04
-
5.10.11 - 2020-10-26
-
5.10.10 - 2020-10-23
-
5.10.9 - 2020-10-09
-
5.10.8 - 2020-10-05
-
5.10.7 - 2020-09-24
-
5.10.6 - 2020-09-18
-
5.10.5 - 2020-09-11
-
5.10.4 - 2020-09-09
-
5.10.3 - 2020-09-03
-
5.10.2 - 2020-08-28
-
5.10.1 - 2020-08-26
-
5.10.0 - 2020-08-14
-
5.9.29 - 2020-08-13
-
5.9.28 - 2020-08-07
-
5.9.27 - 2020-07-31
-
5.9.26 - 2020-07-27
-
5.9.25 - 2020-07-17
-
5.9.24 - 2020-07-13
-
5.9.23 - 2020-07-10
-
5.9.22 - 2020-07-06
-
5.9.21 - 2020-07-01
-
5.9.20 - 2020-06-22
-
5.9.19 - 2020-06-15
-
5.9.18 - 2020-06-05
-
5.9.17 - 2020-06-02
-
5.9.16 - 2020-05-25
-
5.9.15 - 2020-05-18
-
5.9.14 - 2020-05-13
-
5.9.13 - 2020-05-08
-
5.9.12 - 2020-05-04
-
5.9.11 - 2020-04-30
-
5.9.10 - 2020-04-20
-
5.9.9 - 2020-04-13
-
5.9.7 - 2020-03-30
-
5.9.6 - 2020-03-23
-
5.9.5 - 2020-03-16
-
5.9.4 - 2020-03-09
-
5.9.3 - 2020-03-02
-
5.9.2 - 2020-02-21
-
5.9.1 - 2020-02-14
-
5.9.0 - 2020-02-13
-
5.8.13 - 2020-02-13
-
5.8.12 - 2020-02-12
-
5.8.11 - 2020-01-31
-
5.8.10 - 2020-01-27
-
5.8.9 - 2020-01-17
-
5.8.7 - 2020-01-10
-
5.8.6 - 2020-01-08
-
5.8.5 - 2020-01-06
-
5.8.4 - 2020-01-02
-
5.8.3 - 2019-12-23
-
5.8.2 - 2019-12-20
-
5.8.1 - 2019-12-12
-
5.8.0 - 2019-12-09
-
5.7.14 - 2019-12-06
-
5.7.13 - 2019-11-29
-
5.7.12 - 2019-11-19
-
5.7.11 - 2019-11-14
-
5.7.10 - 2019-11-11
-
5.7.9 - 2019-11-08
-
5.7.8 - 2019-11-05
-
5.7.7 - 2019-10-24
-
5.7.6 - 2019-10-21
-
5.7.5 - 2019-10-14
-
5.7.4 - 2019-10-09
-
5.7.3 - 2019-09-30
-
5.7.1 - 2019-09-13
-
5.7.0 - 2019-09-09
-
5.6.13 - 2019-09-06
-
5.6.12 - 2019-09-03
-
5.6.11 - 2019-08-25
-
5.6.10 - 2019-08-21
-
5.6.9 - 2019-08-07
-
5.6.8 - 2019-08-02
-
5.6.7 - 2019-07-26
-
5.6.6 - 2019-07-22
-
5.6.5 - 2019-07-17
-
5.6.4 - 2019-07-08
-
5.6.3 - 2019-07-03
-
5.6.2 - 2019-06-28
-
5.6.1 - 2019-06-24
-
5.6.0 - 2019-06-14
-
5.5.15 - 2019-06-12
-
5.5.14 - 2019-06-08
-
5.5.13 - 2019-06-05
-
5.5.12 - 2019-05-31
-
5.5.11 - 2019-05-23
-
5.5.10 - 2019-05-20
-
5.5.9 - 2019-05-16
-
5.5.8 - 2019-05-13
-
5.5.7 - 2019-05-09
-
5.5.6 - 2019-05-06
-
5.5.5 - 2019-04-30
-
5.5.4 - 2019-04-25
-
5.5.3 - 2019-04-22
-
5.5.2 - 2019-04-16
-
5.5.1 - 2019-04-11
-
5.5.0 - 2019-04-08
-
5.4.23 - 2019-04-08
-
5.4.22 - 2019-04-04
-
5.4.21 - 2019-04-02
-
5.4.20 - 2019-03-25
-
5.4.19 - 2019-03-11
-
5.4.18 - 2019-03-08
-
5.4.17 - 2019-03-03
-
5.4.16 - 2019-02-26
-
5.4.15 - 2019-02-23
-
5.4.14 - 2019-02-19
-
5.4.13 - 2019-02-15
-
5.4.12 - 2019-02-13
-
5.4.11 - 2019-02-09
-
5.4.10 - 2019-02-05
-
5.4.9 - 2019-02-01
-
5.4.8 - 2019-01-30
-
5.4.7 - 2019-01-26
-
5.4.6 - 2019-01-22
-
5.4.5 - 2019-01-18
-
5.4.4 - 2019-01-14
-
5.4.3 - 2019-01-09
-
5.4.2 - 2019-01-03
-
5.4.1 - 2018-12-26
-
5.4.0 - 2018-12-14
-
5.3.16 - 2018-12-11
-
5.3.15 - 2018-12-05
-
5.3.14 - 2018-11-27
-
5.3.13 - 2018-11-20
-
5.3.12 - 2018-11-13
-
5.3.11 - 2018-11-09
-
5.3.10 - 2018-11-06
-
5.3.9 - 2018-11-02
-
5.3.8 - 2018-10-30
-
5.3.7 - 2018-10-26
-
5.3.6 - 2018-10-23
-
5.3.5 - 2018-10-22
-
5.3.4 - 2018-10-15
-
5.3.3 - 2018-10-12
-
5.3.2 - 2018-10-07
-
5.3.1 - 2018-10-02
-
5.3.0 - 2018-09-28
-
5.2.18 - 2018-09-27
-
5.2.17 - 2018-09-21
-
5.2.16 - 2018-09-19
-
5.2.15 - 2018-09-15
-
5.2.14 - 2018-09-10
-
5.2.13 - 2018-09-04
-
5.2.12 - 2018-08-30
-
5.2.11 - 2018-08-30
-
5.2.10 - 2018-08-27
-
5.2.9 - 2018-08-17
-
5.2.8 - 2018-08-14
-
5.2.7 - 2018-08-06
-
5.2.6 - 2018-07-30
-
5.2.5 - 2018-07-23
-
5.2.4 - 2018-07-16
-
5.2.3 - 2018-07-11
-
5.2.2 - 2018-07-08
-
5.2.1 - 2018-07-04
-
5.2.0 - 2018-07-03
-
5.1.8 - 2018-07-02
-
5.1.7 - 2018-06-26
-
5.1.6 - 2018-06-19
-
5.1.5 - 2018-06-11
-
5.1.4 - 2018-06-04
-
5.1.3 - 2018-05-29
-
5.1.2 - 2018-05-21
-
5.1.1 - 2018-05-14
-
5.1.0 - 2018-05-10
-
5.0.18 - 2018-05-09
-
5.0.17 - 2018-04-30
-
5.0.16 - 2018-04-23
-
5.0.15 - 2018-04-16
-
5.0.14 - 2018-04-09
-
5.0.13 - 2018-04-05
-
5.0.12 - 2018-03-27
-
5.0.11 - 2018-03-19
-
5.0.10 - 2018-03-13
-
5.0.9 - 2018-03-05
-
5.0.8 - 2018-03-03
-
5.0.7 - 2018-02-23
-
5.0.6 - 2018-02-15
-
5.0.5 - 2018-02-13
-
5.0.4 - 2018-02-08
-
5.0.3 - 2018-02-01
-
5.0.2 - 2018-01-28
-
5.0.1 - 2018-01-20
-
5.0.0 - 2018-01-17
-
5.0.0-rc2 - 2018-01-04
-
5.0.0-rc1 - 2018-01-02
-
5.0.0-rc0 - 2017-12-28
-
4.13.21 - 2020-07-12
-
4.13.20 - 2020-01-08
-
4.13.19 - 2019-07-17
-
4.13.18 - 2019-01-22
-
4.13.17 - 2018-08-30
-
4.13.16 - 2018-08-30
-
4.13.15 - 2018-08-14
-
4.13.14 - 2018-05-25
-
4.13.13 - 2018-05-17
-
4.13.12 - 2018-03-14
-
4.13.11 - 2018-02-08
-
4.13.10 - 2018-01-28
-
4.13.9 - 2018-01-07
-
4.13.8 - 2017-12-27
-
4.13.7 - 2017-12-12
-
4.13.6 - 2017-12-02
-
4.13.5 - 2017-11-24
-
4.13.4 - 2017-11-17
-
4.13.3 - 2017-11-16
-
4.13.2 - 2017-11-13
-
4.13.1 - 2017-11-09
-
4.13.0 - 2017-11-03
-
4.12.6 - 2017-11-01
-
4.12.5 - 2017-10-30
-
4.12.4 - 2017-10-21
-
4.12.3 - 2017-10-16
-
4.12.2 - 2017-10-14
-
4.12.1 - 2017-10-08
-
4.12.0 - 2017-10-03
-
4.11.14 - 2017-09-30
-
4.11.13 - 2017-09-25
-
4.11.12 - 2017-09-18
-
4.11.11 - 2017-09-10
-
4.11.10 - 2017-09-04
-
4.11.9 - 2017-08-28
-
4.11.8 - 2017-08-24
-
4.11.7 - 2017-08-14
-
4.11.6 - 2017-08-07
-
4.11.5 - 2017-07-30
-
4.11.4 - 2017-07-23
-
4.11.3 - 2017-07-14
-
4.11.2 - 2017-07-13
-
4.11.1 - 2017-07-03
-
4.11.0 - 2017-06-25
-
4.10.8 - 2017-06-22
-
4.10.7 - 2017-06-18
-
4.10.6 - 2017-06-13
-
4.10.5 - 2017-06-07
-
4.10.4 - 2017-05-29
-
4.10.3 - 2017-05-27
-
4.10.2 - 2017-05-23
-
4.10.1 - 2017-05-22
-
4.10.0 - 2017-05-18
-
4.9.10 - 2017-05-18
-
4.9.9 - 2017-05-13
-
4.9.8 - 2017-05-07
-
4.9.7 - 2017-05-01
-
4.9.6 - 2017-04-24
-
4.9.5 - 2017-04-17
-
4.9.4 - 2017-04-09
-
4.9.3 - 2017-04-02
-
4.9.2 - 2017-03-26
-
4.9.1 - 2017-03-19
-
4.9.0 - 2017-03-13
-
4.8.7 - 2017-03-12
-
4.8.6 - 2017-03-05
-
4.8.5 - 2017-02-26
-
4.8.4 - 2017-02-20
-
4.8.3 - 2017-02-16
-
4.8.2 - 2017-02-11
-
4.8.1 - 2017-01-31
-
4.8.0 - 2017-01-29
-
4.7.9 - 2017-01-27
-
4.7.8 - 2017-01-24
-
4.7.7 - 2017-01-16
-
4.7.6 - 2017-01-03
-
4.7.5 - 2016-12-26
-
4.7.5-pre - 2016-12-26
-
4.7.4 - 2016-12-20
-
4.7.3 - 2016-12-16
-
4.7.2 - 2016-12-08
-
4.7.1 - 2016-12-01
-
4.7.0 - 2016-11-23
-
4.6.8 - 2016-11-15
-
4.6.7 - 2016-11-10
-
4.6.6 - 2016-11-03
-
4.6.5 - 2016-10-24
-
4.6.4 - 2016-10-17
-
4.6.3 - 2016-10-06
-
4.6.2 - 2016-10-01
-
4.6.1 - 2016-09-20
-
4.6.0 - 2016-09-02
-
4.5.10 - 2016-08-23
-
4.5.9 - 2016-08-14
-
4.5.8 - 2016-08-01
-
4.5.7 - 2016-07-25
-
4.5.6 - 2016-07-23
-
4.5.5 - 2016-07-18
-
4.5.4 - 2016-07-11
-
4.5.3 - 2016-07-01
-
4.5.2 - 2016-06-25
-
4.5.1 - 2016-06-18
-
4.5.0 - 2016-06-13
-
4.4.20 - 2016-06-05
-
4.4.19 - 2016-05-21
-
4.4.18 - 2016-05-21
-
4.4.17 - 2016-05-13
-
4.4.16 - 2016-05-09
-
4.4.15 - 2016-05-06
-
4.4.14 - 2016-04-27
-
4.4.13 - 2016-04-21
-
4.4.12 - 2016-04-08
-
4.4.11 - 2016-04-03
-
4.4.10 - 2016-03-24
-
4.4.9 - 2016-03-23
-
4.4.8 - 2016-03-18
-
4.4.7 - 2016-03-11
-
4.4.6 - 2016-03-03
-
4.4.5 - 2016-02-24
-
4.4.4 - 2016-02-17
-
4.4.3 - 2016-02-09
-
4.4.2 - 2016-02-05
-
4.4.1 - 2016-02-03
-
4.4.0 - 2016-02-02
-
4.3.7 - 2016-01-23
-
4.3.6 - 2016-01-15
-
4.3.5 - 2016-01-09
-
4.3.4 - 2015-12-23
-
4.3.3 - 2015-12-18
-
4.3.2 - 2015-12-17
-
4.3.1 - 2015-12-11
-
4.3.0 - 2015-12-09
-
4.2.10 - 2015-12-08
-
4.2.9 - 2015-12-02
-
4.2.8 - 2015-11-25
-
4.2.7 - 2015-11-20
-
4.2.6 - 2015-11-16
-
4.2.5 - 2015-11-09
-
4.2.4 - 2015-11-02
from mongoose GitHub release notes6.1.7 / 2022-01-17
skipInit#111376.1.6 / 2022-01-10
bulkSave()error whenversionKey: false#11186 #11071 IslandRhythmsfindByIdAndUpdate(undefined)breaking change #11149connect()options #11184 splinter6.1.5 / 2022-01-04
$grouppipeline stage #11140 #11067 EugeneKorshenko6.1.4 / 2021-12-27
create()#10856populate()#11027strictQueryexample #11135 MontgomeryWattschore: release 5.13.14
Commit messages
Package name: mongoose
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs