Azure-Samples / active-directory-node-webapi

A NodeJS web API that is secured using Azure AD and OAuth 2.0 access tokens.
105 stars 64 forks source link

Bump mongoose from 4.4.20 to 5.9.2 in /node-server #33

Closed dependabot[bot] closed 4 years ago

dependabot[bot] commented 4 years ago

Bumps mongoose from 4.4.20 to 5.9.2.

Changelog *Sourced from [mongoose's changelog](https://github.com/Automattic/mongoose/blob/master/History.md).* > 5.9.2 / 2020-02-21 > ================== > * fix(model): add discriminator key to bulkWrite filters [#8590](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8590) > * fix(document): when setting nested array path to non-nested array, wrap values top-down rather than bottom up when possible [#8544](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8544) > * fix(document): dont leave nested key as undefined when setting nested key to empty object with minimize [#8565](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8565) > * fix(document): avoid throwing error if setting path to Mongoose document with nullish `_doc` [#8565](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8565) > * fix(update): handle Binary type correctly with `runValidators` [#8580](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8580) > * fix(query): run `deleteOne` hooks only on `Document#deleteOne()` when setting `options.document = true` for `Schema#pre()` [#8555](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8555) > * fix(document): allow calling `validate()` in post validate hook without causing parallel validation error [#8597](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8597) > * fix(virtualtype): correctly copy options when cloning [#8587](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8587) > * fix(collection): skip creating capped collection if `autoCreate` set to `false` [#8566](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8566) > * docs(middleware): clarify that updateOne and deleteOne hooks are query middleware by default, not document middleware [#8581](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8581) > * docs(aggregate): clarify that `Aggregate#unwind()` can take object parameters as well as strings [#8594](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8594) > > 5.9.1 / 2020-02-14 > ================== > * fix(model): set session when calling `save()` with no changes [#8571](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8571) > * fix(schema): return correct pathType when single nested path is embedded under a nested path with a numeric name [#8583](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8583) > * fix(queryhelpers): remove `Object.values()` for Node.js 4.x-6.x support [#8596](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8596) > * fix(cursor): respect sort order when using `eachAsync()` with `parallel` and a sync callback [#8577](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8577) > * docs: update documentation of custom _id overriding in discriminators [#8591](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8591) [sam-mfb](https://github.com/sam-mfb) > > 5.9.0 / 2020-02-13 > ================== > * fix: upgrade to MongoDB driver 3.5 [#8520](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8520) [#8563](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8563) > * feat(schematype): support setting default options for schema type (`trim` on all strings, etc.) [#8487](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8487) > * feat(populate): add `perDocumentLimit` option that limits per document in `find()` result, rather than across all documents [#7318](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7318) > * feat(schematype): enable setting `transform` option on individual schematypes [#8403](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8403) > * feat(timestamps): allow setting `currentTime` option for setting custom function to get the current time [#3957](https://github-redirect.dependabot.com/Automattic/mongoose/issues/3957) > * feat(connection): add `Connection#watch()` to watch for changes on an entire database [#8425](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8425) > * feat(document): add `Document#$op` property to make it easier to tell what operation is running in middleware [#8439](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8439) > * feat(populate): support `limit` as top-level populate option [#8445](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8445) > > 5.8.13 / 2020-02-13 > =================== > * fix(populate): use safe get to avoid crash if schematype doesn't have options [#8586](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8586) > > 5.8.12 / 2020-02-12 > =================== > * fix(query): correctly cast dbref `$id` with `$elemMatch` [#8577](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8577) > * fix(populate): handle populating when some embedded discriminator schemas have `refPath` but none of the subdocs have `refPath` [#8553](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8553) > * docs: add useUnifiedTopology to homepage example [#8558](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8558) [AbdelrahmanHafez](https://github.com/AbdelrahmanHafez) > * refactor(utils): moving promiseOrCallback to helpers/promiseOrCallback [#8573](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8573) [hugosenari](https://github.com/hugosenari) > > 5.8.11 / 2020-01-31 > =================== > * fix(document): allow calling `validate()` multiple times in parallel on subdocs to avoid errors if Mongoose double-validates [taxilian](https://github.com/taxilian) [#8548](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8548) [#8539](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8539) > * fix(connection): allow calling initial `mongoose.connect()` after connection helpers on the same tick [#8534](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8534) > * fix(connection): throw helpful error when callback param to `mongoose.connect()` or `mongoose.createConnection()` is not a function [#8556](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8556) > * fix(drivers): avoid unnecessary caught error when importing [#8528](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8528) > ... (truncated)
Commits - [`8bc18b7`](https://github.com/Automattic/mongoose/commit/8bc18b7f37c6ae01a70297708b7a179a49182287) chore: release 5.9.2 - [`e0606f3`](https://github.com/Automattic/mongoose/commit/e0606f33fbb78bac32c92e9767c9f8b2742af780) docs(middleware): clarify that updateOne and deleteOne hooks are query middle... - [`bb25b06`](https://github.com/Automattic/mongoose/commit/bb25b0626a7dcedd8050f1177c80c9fb7646b54a) fix(document): allow calling `validate()` in post validate hook without causi... - [`b895e01`](https://github.com/Automattic/mongoose/commit/b895e017b6be282207bb22ad8e669daf546b0092) test(document): repro [#8597](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8597) - [`a8f2020`](https://github.com/Automattic/mongoose/commit/a8f202094301e2101e53f058c23e0385a368e729) fix(model): add discriminator key to bulkWrite filters - [`5d3507d`](https://github.com/Automattic/mongoose/commit/5d3507d90b9ffd11d8091e1caba5bb2f6fd7bea7) test(model): repro [#8590](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8590) - [`b20a45d`](https://github.com/Automattic/mongoose/commit/b20a45d5405a0365d17b4bc8cb913f8d770a5251) fix(virtualtype): correctly copy options when cloning - [`2afec3a`](https://github.com/Automattic/mongoose/commit/2afec3a82a499cd93b09ffb2fb5c419120b16491) fix(array): fix tests re: [#8544](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8544) - [`cf6b45e`](https://github.com/Automattic/mongoose/commit/cf6b45ed3936e74c9f27b4a6e4b59186717841c9) fix(document): avoid throwing error if setting path to Mongoose document with... - [`f4dc5a9`](https://github.com/Automattic/mongoose/commit/f4dc5a94d71bd885979f2e1be45e9ae131b29932) fix(document): dont leave nested key as undefined when setting nested key to ... - Additional commits viewable in [compare view](https://github.com/Automattic/mongoose/compare/4.4.20...5.9.2)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Azure-Samples/active-directory-node-webapi/network/alerts).
dependabot[bot] commented 4 years ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.