[Snyk] Upgrade mongoose from 5.4.10 to 5.9.25

[snyk-bot]

Snyk has created this PR to upgrade mongoose from 5.4.10 to 5.9.25.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 95 versions ahead of your current version.
• The recommended version was released a month ago, on 2020-07-17.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Information Exposure SNYK-JS-MONGOOSE-472486	No Known Exploit

Release notes

Package name: mongoose

• 5.9.25 - 2020-07-17
  

  chore: release 5.9.25

• 5.9.24 - 2020-07-13
  

  chore: release 5.9.24

• 5.9.23 - 2020-07-10
  

  chore: release 5.9.23

• 5.9.22 - 2020-07-06
  

  chore: release 5.9.22

• 5.9.21 - 2020-07-01
  

  chore: release 5.9.21

• 5.9.20 - 2020-06-22
  

  chore: release 5.9.20

• 5.9.19 - 2020-06-15
• 5.9.18 - 2020-06-05
• 5.9.17 - 2020-06-02
• 5.9.16 - 2020-05-25
• 5.9.15 - 2020-05-18
• 5.9.14 - 2020-05-13
• 5.9.13 - 2020-05-08
• 5.9.12 - 2020-05-04
• 5.9.11 - 2020-04-30
• 5.9.10 - 2020-04-20
• 5.9.9 - 2020-04-13
• 5.9.7 - 2020-03-30
• 5.9.6 - 2020-03-23
• 5.9.5 - 2020-03-16
• 5.9.4 - 2020-03-09
• 5.9.3 - 2020-03-02
• 5.9.2 - 2020-02-21
• 5.9.1 - 2020-02-14
• 5.9.0 - 2020-02-13
• 5.8.13 - 2020-02-13
• 5.8.12 - 2020-02-12
• 5.8.11 - 2020-01-31
• 5.8.10 - 2020-01-27
• 5.8.9 - 2020-01-17
• 5.8.7 - 2020-01-10
• 5.8.6 - 2020-01-08
• 5.8.5 - 2020-01-06
• 5.8.4 - 2020-01-02
• 5.8.3 - 2019-12-23
• 5.8.2 - 2019-12-20
• 5.8.1 - 2019-12-12
• 5.8.0 - 2019-12-09
• 5.7.14 - 2019-12-06
• 5.7.13 - 2019-11-29
• 5.7.12 - 2019-11-19
• 5.7.11 - 2019-11-14
• 5.7.10 - 2019-11-11
• 5.7.9 - 2019-11-08
• 5.7.8 - 2019-11-05
• 5.7.7 - 2019-10-24
• 5.7.6 - 2019-10-21
• 5.7.5 - 2019-10-14
• 5.7.4 - 2019-10-09
• 5.7.3 - 2019-09-30
• 5.7.1 - 2019-09-13
• 5.7.0 - 2019-09-09
• 5.6.13 - 2019-09-06
• 5.6.12 - 2019-09-03
• 5.6.11 - 2019-08-25
• 5.6.10 - 2019-08-21
• 5.6.9 - 2019-08-07
• 5.6.8 - 2019-08-02
• 5.6.7 - 2019-07-26
• 5.6.6 - 2019-07-22
• 5.6.5 - 2019-07-17
• 5.6.4 - 2019-07-08
• 5.6.3 - 2019-07-03
• 5.6.2 - 2019-06-28
• 5.6.1 - 2019-06-24
• 5.6.0 - 2019-06-14
• 5.5.15 - 2019-06-12
• 5.5.14 - 2019-06-08
• 5.5.13 - 2019-06-05
• 5.5.12 - 2019-05-31
• 5.5.11 - 2019-05-23
• 5.5.10 - 2019-05-20
• 5.5.9 - 2019-05-16
• 5.5.8 - 2019-05-13
• 5.5.7 - 2019-05-09
• 5.5.6 - 2019-05-06
• 5.5.5 - 2019-04-30
• 5.5.4 - 2019-04-25
• 5.5.3 - 2019-04-22
• 5.5.2 - 2019-04-16
• 5.5.1 - 2019-04-11
• 5.5.0 - 2019-04-08
• 5.4.23 - 2019-04-08
• 5.4.22 - 2019-04-04
• 5.4.21 - 2019-04-02
• 5.4.20 - 2019-03-25
• 5.4.19 - 2019-03-11
• 5.4.18 - 2019-03-08
• 5.4.17 - 2019-03-03
• 5.4.16 - 2019-02-26
• 5.4.15 - 2019-02-23
• 5.4.14 - 2019-02-19
• 5.4.13 - 2019-02-15
• 5.4.12 - 2019-02-13
• 5.4.11 - 2019-02-09
• 5.4.10 - 2019-02-05

from mongoose GitHub release notes

Commit messages

Package name: mongoose

• 333b089 chore: release 5.9.25
• 6013a53 Merge pull request #9247 from JNa0/patch-2
• 067e3f1 Merge pull request #9243 from ehpc/patch-1
• dee8a7d test: fix tests
• 933e874 fix(discriminator): allow passing a compiled model's schema as a parameter to `discriminator()`
• af09898 test(discriminator): repro #9238
• 8437620 test: fix tests re: #9244
• ac65c4f fix(collection): fix test re: #9239
• bc5f6de fix(populate): populate single nested discriminator underneath doc array when populated docs have different model but same id
• 5a1d2cb test(populate): repro #9244
• 524ae0a fix(connection): throw more readable error when querying db before initial connection when `bufferCommands = false`
• 996daa3 fix(indexes): don't unnecessarily drop text indexes when running `syncIndexes()`
• dca584e test(indexes): repro #9225
• 62f15b1 correction of typo
• cb71c85 Make Boolean _castNullish respect omitUndefined
• 02bef0e chore: release 5.9.24
• 415ba3d fix(schema+document): support adding `null` to schema boolean's `convertToFalse` set
• 4de0417 docs(model): make `find` and `findOne()` examples use async/await and clarify `find({})` is find all
• 423acb4 fix(connection): dont overwrite user-specified `bufferMaxEntries` when setting `bufferCommands`
• c2801f7 Merge branch '4.x'
• 7b11d70 chore: release 4.13.21
• f88eb25 fix(query): delete top-level `_bsontype` property in queries to prevent silent empty queries
• 9a23c42 fix(connection): respect connection-level `bufferCommands` option if `mongoose.connect()` is called after `mongoose.model()`
• 35869a3 fix(document): clear out `priorDoc` after overwriting single nested subdoc so changes after overwrite get persisted correctly

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs