Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 21, 2021

Bumps mongoose from 5.13.9 to 6.0.7.

Changelog

Sourced from mongoose's changelog.

6.0.7 / 2021-09-20

  • fix(populate): wrap populate filters in trusted() so they work with sanitizeFilter #10740
  • fix(aggregate): handle calling aggregate() before initial connection succeeds #10722
  • fix(query): avoid throwing error when using $not with $size #10716 IslandRhythms
  • fix(discriminator): handle setting nested discriminator paths #10702
  • fix(documentarray): don't throw TypeError on DocumentArray#create() when top-level doc has populated paths #10749
  • fix(update): avoid setting single nested subdoc defaults if subdoc isn't set #10660
  • fix: delay creating id virtual until right before model compilation to allow plugins to disable the id option #10701
  • fix(connection): correct auth object when using user option to connect() #10727 #10726 saveman71
  • fix(timestamps): avoid calling getters when checking whether createdAt is set #10742 kaishu16
  • fix(index.d.ts): allow using strings for ObjectIds with $in #10735
  • fix(index.d.ts): add TVirtuals generic to Model to make it easier to separate virtuals from DocType #10689
  • fix(index.d.ts): add Model.bulkSave() definition #10745
  • fix(index.d.ts): allow RegExp for match in schema definition #10744 easen-amp
  • fix(index.d.ts): allow arbitrary additional keys in QueryOptions #10688
  • docs: correct TypeScript schema generic params in docs #10739 minifjurt123
  • docs: fix h2 header links #10682 IslandRhythms

6.0.6 / 2021-09-15

  • perf(index.d.ts): streamline SchemaDefinitionType and SchemaTypeOptions to reduce number of instantiations and speed up lib checking #10349
  • perf(document): make $locals a getter/setter, avoid creating unnecessary undefined properties in Document constructor, remove unnecessary event listeners #10400
  • fix(connection): use username parameter for MongoDB driver instead of user #10727 saveman71
  • fix(update): handle casting $or and $and in array filters #10696
  • fix(connection): allow calling connection helpers before calling mongoose.connect() #10706
  • fix(document): correctly handle subpaths of arrays that contain non-alphanumeric chars like - #10709
  • fix(index.d.ts): correct return value for findOneAndUpdate(), findByIdAndUpdate() to support query helpers #10658
  • fix(index.d.ts): add missing methods to ValidationError & ValidatorError classes #10725 medfreeman
  • perf(subdocument): make internal $isSingleNested and $isDocumentArrayElement properties constants on the prototype rather than setting them on every instance #10400
  • docs: improve Document#populate documentation, tests #10728 saveman71

6.0.5 / 2021-09-06

  • fix(model): allow calling Model.validate() static with POJO array #10669
  • fix(cast): let $expr through in query filters if strict mode enabled #10662
  • fix(map): propagate flattenMaps option down to nested maps #10653
  • fix(setDefaultsOnInsert): avoid adding unnecessary auto _id to $setOnInsert #10646
  • fix(schema): support object with values and message syntax for Number enums #10648
  • fix(index.d.ts): fix Document#populate() type #10651 thiagokisaki
  • fix(index.d.ts): allow using $in and $nin on array paths #10605
  • fix(index.d.ts): make _id required in query results and return value from create() #10657
  • docs: update deprecations.md to reflect version 6 #10673 multiwebinc
  • docs: fix typo in queries.md #10681 yogabonito
  • docs: fix typo in models.md #10680 yogabonito
  • ci: add test for ubuntu-20.04 #10679 YC
Commits
  • 3c4f4bb chore: release 6.0.7
  • ae5d06a Merge pull request #10748 from Automattic/doc-subsection-linking
  • 0d92245 Merge branch 'master' into doc-subsection-linking
  • 44612a9 fix(index.d.ts): add Model.bulkSave() definition
  • 0802662 fix(index.d.ts): allow using strings for ObjectIds with $in
  • b98b89a fix(index.d.ts): add TVirtuals generic to Model to make it easier to sepa...
  • 25e4ac3 fix(update): avoid setting single nested subdoc defaults if subdoc isn't set
  • e5b3d5c test(update): repro #10660
  • 7d7d9c0 fix(populate): wrap populate filters in trusted() so they work with `saniti...
  • f5be4c8 style: fix lint
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [mongoose](https://github.com/Automattic/mongoose) from 5.13.9 to 6.0.7.
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@5.13.9...6.0.7)

---
updated-dependencies:
- dependency-name: mongoose
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 21, 2021
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 28, 2021

Superseded by #16.

@dependabot dependabot bot closed this Sep 28, 2021
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/mongoose-6.0.7 branch September 28, 2021 03:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant