[Snyk] Security upgrade mongoose from 4.2.4 to 4.3.6

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	886/1000 Why? Mature exploit, Has a fix available, High severity	Remote Memory Exposure npm:mongoose:20160116	No	Mature

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mongoose

The new version differs by 243 commits.

• e17e233 chore: release 4.3.6
• fb44c50 Merge branch 'master' of github.com:Automattic/mongoose
• 8066b14 fix(types): smarter casting for buffer with number (Fix #3764)
• 7004584 docs: runnable image top border removed
• 95ce489 docs: fix broken image in README take 2
• 42e7ba5 docs: fix broken image in README
• 823d43a chore: upgrade acquit-ignore to match peer
• a07fffb fix: webpack by upgrading to [email protected] (Fix #3713)
• a1f575b fix(document): execPopulate (Fix #3753 #3755)
• 61e8696 refactor(test): common connection for several tests
• 4f98a00 Merge branch 'master' of github.com:Automattic/mongoose
• c2106b5 fix(schema): listeners and removeListener are now reserved words (Fix #3759)
• 5334d03 Merge pull request #3757 from ChristianMurphy/update-uglify-js
• 1111c7c Merge pull request #3756 from ChristianMurphy/update-acquit
• 53888dc update uglify-js
• b92c849 update acquit
• 8e29c5b fix(types): properly fire remove hooks on single nested (Fix #3754)
• 2b12b09 test(document): repro #3754
• e8b8adc Merge pull request #3751 from ChristianMurphy/linting
• e3192b8 comma last test folder
• a005927 general linting
• fd0f098 docs: clarify versionKey is a string (Fix #3747)
• bdb2248 chore: now working on 4.3.6
• 5e6cd11 Merge pull request #3744 from TrejGun/master

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic