[Snyk] Upgrade mongoose from 5.7.14 to 5.9.18

[snyk-bot]

Snyk has created this PR to upgrade mongoose from 5.7.14 to 5.9.18.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 31 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2020-06-05.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Internal Property Tampering SNYK-JS-BSON-561052	No Known Exploit

Release notes

Package name: mongoose

• 5.9.18 - 2020-06-05
  

  chore: release 5.9.18

• 5.9.17 - 2020-06-02
  

  chore: release 5.9.17

• 5.9.16 - 2020-05-25
  

  chore: release 5.9.16

• 5.9.15 - 2020-05-18
  

  chore: release 5.9.15

• 5.9.14 - 2020-05-13
  

  chore: release 5.9.14

• 5.9.13 - 2020-05-08
  

  chore: release 5.9.13

• 5.9.12 - 2020-05-04
  

  chore: release 5.9.12

• 5.9.11 - 2020-04-30
  

  chore: release 5.9.11

• 5.9.10 - 2020-04-20
• 5.9.9 - 2020-04-13
• 5.9.7 - 2020-03-30
• 5.9.6 - 2020-03-23
• 5.9.5 - 2020-03-16
• 5.9.4 - 2020-03-09
• 5.9.3 - 2020-03-02
• 5.9.2 - 2020-02-21
• 5.9.1 - 2020-02-14
• 5.9.0 - 2020-02-13
• 5.8.13 - 2020-02-13
• 5.8.12 - 2020-02-12
• 5.8.11 - 2020-01-31
• 5.8.10 - 2020-01-27
• 5.8.9 - 2020-01-17
• 5.8.7 - 2020-01-10
• 5.8.6 - 2020-01-08
• 5.8.5 - 2020-01-06
• 5.8.4 - 2020-01-02
• 5.8.3 - 2019-12-23
• 5.8.2 - 2019-12-20
• 5.8.1 - 2019-12-12
• 5.8.0 - 2019-12-09
• 5.7.14 - 2019-12-06

from mongoose GitHub release notes

Commit messages

Package name: mongoose

• 2d2e0a8 chore: release 5.9.18
• 8c72e28 Merge pull request #9089 from Elvis-Sarfo/master
• ab25545 fix: improve atlas error in the event of incorrect password
• f9ddbc0 fix(document): allow accessing `$locals` when initializing document
• 6114261 test(document): repro #9098
• aedfbe4 Corrected a typo in the JSDoc
• ca8f5c9 Revert "Corrected a typo in a code snippet."
• 278a13c docs(connection+index): add serverSelectionTimeoutMS and heartbeatFrequencyMS to `connect()` and `openUri()` options
• b73cb61 docs: make active page bold in navbar
• 67a7be1 docs: add edit link for all API docs
• 9798d22 docs: add edit link to acquit-only tutorials
• 01fbdc7 docs: add edit link icon to tutorials
• c2ed8c1 docs: add link to edit on GitHub for top-level tutorials
• b2e623c Corrected a typo in a code snippet.
• f168f17 fix(query): make `setDefaultsOnInsert` a mongoose option so it doesn't end up in debug output
• 09e66ed docs(geojson): add notes about geojson 2dsphere indexes
• e45786f chore: release 5.9.17
• cd9f9a1 Merge pull request #9078 from AbdelrahmanHafez/gh-9070
• b4e9fd3 Merge pull request #9075 from tigransimonyan/patch-1
• 4704f35 Merge pull request #9069 from AbdelrahmanHafez/patch-7
• 6cb1c92 style: fix lint
• ec8e87e fix(populate): make populating a nested path a no-op
• c52ce6c test(populate): repro #9073
• 421776c fix(document): avoid tracking changes like `splice()` on slice()-ed arrays

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs