Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Upgrade mongoose from 8.1.3 to 8.5.1 #576

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

Erenkrs
Copy link
Owner

@Erenkrs Erenkrs commented Aug 19, 2024

snyk-top-banner

Snyk has created this PR to upgrade mongoose from 8.1.3 to 8.5.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 19 versions ahead of your current version.

  • The recommended version was released on a month ago.

Release notes
Package name: mongoose
  • 8.5.1 - 2024-07-12

    8.5.1 / 2024-07-12

    • perf(model): performance improvements for insertMany() #14724
    • fix(model): avoid leaving subdoc defaults on top-level doc when setting subdocument to same value #14728 #14722
    • fix(model): handle transactionAsyncLocalStorage option with insertMany() #14743
    • types: make _id required on Document type #14735 #14660
    • types: fix ChangeStream.close to return a Promise like the driver #14740 orgads
  • 8.5.0 - 2024-07-08

    8.5.0 / 2024-07-08

    • perf: memoize toJSON / toObject default options #14672
    • feat(document): add $createModifiedPathsSnapshot(), $restoreModifiedPathsSnapshot(), $clearModifiedPaths() #14699 #14268
    • feat(query): make sanitizeProjection prevent projecting in paths deselected in the schema #14691
    • feat: allow setting array default value to null #14717 #6691
    • feat(mongoose): allow drivers to set global plugins #14682
    • feat(connection): bubble up monitorCommands events to Mongoose connection if monitorCommands option set #14681 #14611
    • fix(document): ensure post('deleteOne') hooks are called when calling save() after subdoc.deleteOne() #14732 #9885
    • fix(query): remove count() and findOneAndRemove() from query chaining #14692 #14689
    • fix: remove default connection if setting createInitialConnection to false after Mongoose instance created #14679 #8302
    • types(models+query): infer return type from schema for 1-level deep nested paths #14632
    • types(connection): make transaction() return type match the executor function #14661 #14656
    • docs: fix docs links in index.md mirasayon
  • 8.4.5 - 2024-07-05

    8.4.5 / 2024-07-05

    • types: correct this for validate.validator schematype option #14720 #14696
    • docs(model): note that insertMany() with lean skips applying defaults #14723 #14698
  • 8.4.4 - 2024-06-25

    8.4.4 / 2024-06-25

    • perf: avoid unnecesary get() call and use faster approach for converting to string #14673 #14394
    • fix(projection): handle projections on arrays in Model.hydrate() projection option #14686 #14680
    • fix(document): avoid passing validateModifiedOnly to subdocs so subdocs get fully validating if they're directly modified #14685 #14677
    • fix: handle casting primitive array with $elemMatch in bulkWrite() #14687 #14678
    • fix(query): cast $pull using embedded discriminator schema when discriminator key is set in filter #14676 #14675
    • types(connection): fix return type of withSession() #14690 tt-public
    • types: add $documents pipeline stage and fix $unionWith type #14666 nick-statsig
    • docs(findoneandupdate): improve example that shows findOneAndUpdate() returning doc before updates were applied #14671 #14670
  • 8.4.3 - 2024-06-17

    8.4.3 / 2024-06-17

    • fix: remove 0x flamegraph files from release
  • 8.4.2 - 2024-06-17

    8.4.2 / 2024-06-17

    • perf: more toObject() perf improvements #14623 #14606 #14394
    • fix(model): check the value of overwriteModels in options when calling discriminator() #14646 uditha-g
    • fix: avoid throwing TypeError when deleting an null entry on a populated Map #14654 futurliberta
    • fix(connection): fix up some inconsistencies in operation-end event and add to docs #14659 #14648
    • types: avoid inferring Boolean, Buffer, ObjectId as Date in schema definitions under certain circumstances #14667 #14630
    • docs: add note about parallelism in transations #14647 fiws
  • 8.4.1 - 2024-05-31
  • 8.4.0 - 2024-05-17
  • 8.3.5 - 2024-05-15
  • 8.3.4 - 2024-05-06
  • 8.3.3 - 2024-04-29
  • 8.3.2 - 2024-04-16
  • 8.3.1 - 2024-04-08
  • 8.3.0 - 2024-04-03
  • 8.2.4 - 2024-03-28
  • 8.2.3 - 2024-03-21
  • 8.2.2 - 2024-03-15
  • 8.2.1 - 2024-03-04
  • 8.2.0 - 2024-02-22
  • 8.1.3 - 2024-02-16
from mongoose GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade mongoose from 8.1.3 to 8.5.1.

See this package in npm:
mongoose

See this project in Snyk:
https://app.snyk.io/org/dalgagaplay/project/16bc3a8b-4f43-4086-924b-17ad735bcc7b?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

vercel bot commented Aug 19, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
uptime-site ✅ Ready (Inspect) Visit Preview 💬 Add feedback Aug 19, 2024 11:33am
uptime-site-lesm ✅ Ready (Inspect) Visit Preview 💬 Add feedback Aug 19, 2024 11:33am
uptime-site-wpox ✅ Ready (Inspect) Visit Preview 💬 Add feedback Aug 19, 2024 11:33am

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants