[Snyk] Upgrade mongoose from 5.7.14 to 5.9.4

[snyk-bot]

Snyk has created this PR to upgrade mongoose from 5.7.14 to 5.9.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 18 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2020-03-09.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Deserialization of Untrusted Data SNYK-JS-BSON-561052	No Known Exploit

Release notes

Package name: mongoose

• 5.9.4 - 2020-03-09
  

  chore: release 5.9.4

• 5.9.3 - 2020-03-02
  

  chore: release 5.9.3

• 5.9.2 - 2020-02-21
  

  chore: release 5.9.2

• 5.9.1 - 2020-02-14
  

  chore: release 5.9.1

• 5.9.0 - 2020-02-13
  

  chore: release 5.9.0

• 5.8.13 - 2020-02-13
  

  chore: release 5.8.13

• 5.8.12 - 2020-02-12
  

  chore: release 5.8.12

• 5.8.11 - 2020-01-31
• 5.8.10 - 2020-01-27
• 5.8.9 - 2020-01-17
• 5.8.7 - 2020-01-10
• 5.8.6 - 2020-01-08
• 5.8.5 - 2020-01-06
• 5.8.4 - 2020-01-02
• 5.8.3 - 2019-12-23
• 5.8.2 - 2019-12-20
• 5.8.1 - 2019-12-12
• 5.8.0 - 2019-12-09
• 5.7.14 - 2019-12-06

from mongoose GitHub release notes

Commit messages

Package name: mongoose

• 321995d chore: release 5.9.4
• c9f0ec9 test: fix tests
• 122985d test: fix tests
• f197ac3 test: fix tests
• 5c40f22 test(discriminator): clean up unnecessary collections in model.discriminator.test.js re: #8481
• 3f0b3a5 Merge branch 'master' of github.com:Automattic/mongoose
• dfe41e2 fix(document): allow `new Model(doc)` to set immutable properties when doc is a mongoose document
• 5b19b31 Merge pull request #8651 from dskrvk/master
• c213424 chore: undo unnecessary changes
• 7b0bd36 docs(schema): add a section about the `_id` path in schemas
• f00ae51 fix(array): make sure you can call `unshift()` after `slice()`
• 76de112 Update some vulnerable dev dependencies
• e746c39 Minor JSDoc wording fix for Document
• b5396f6 Correctly set message for ValidationError
• 7178eba fix(model): support passing `background` option to `syncIndexes()`
• 1271ff4 test: repro #8645
• b4b61d3 fix(schema): also propagate `typePojoToMixed` option to schemas implicitly created because of `typePojoToMixed`
• 1cd05dd fix(schema): propagate `typePojoToMixed` to implicitly created arrays
• 63fe55d test(schema): repro #8627
• 059825b docs(virtualtype+populate): document using `match` with virtual populate
• fe3e19e Merge pull request #8648 from sauzy34/patch-1
• 9666924 chore: update opencollective sponsors
• 8ad50c6 docs: clean up mobile layout for built with mongoose page
• db22422 Fix typo

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs