Changelog
*Sourced from [mongoose's changelog](https://github.com/Automattic/mongoose/blob/master/History.md).*
> 5.3.16 / 2018-12-11
> ===================
> * fix(document): handle `__proto__` in queries [#7290](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7290)
> * fix(document): use Array.isArray() instead of checking constructor name for arrays [#7290](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7290)
> * docs(populate): add section about what happens when no document matches [#7279](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7279)
> * fix(mongoose): avoid crash on `import mongoose, {Schema} from 'mongoose'` [#5648](https://github-redirect.dependabot.com/Automattic/mongoose/issues/5648)
>
> 5.3.15 / 2018-12-05
> ===================
> * fix(query): handle `orFail()` with `findOneAndUpdate()` and `findOneAndDelete()` [#7297](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7297) [#7280](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7280)
> * fix(document): make `save()` succeed if strict: false with a `collection` property [#7276](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7276)
> * fix(document): add `flattenMaps` option for toObject() [#7274](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7274)
> * docs(document): document flattenMaps option [#7274](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7274)
> * fix(populate): support populating individual subdoc path in document array [#7273](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7273)
> * fix(populate): ensure `model` option overrides `refPath` [#7273](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7273)
> * fix(map): don't call subdoc setters on init [#7272](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7272)
> * fix(document): use internal get() helper instead of lodash.get to support `null` projection param [#7271](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7271)
> * fix(document): continue running validateSync() for all elements in doc array after first error [#6746](https://github-redirect.dependabot.com/Automattic/mongoose/issues/6746)
Commits
- [`a384a29`](https://github.com/Automattic/mongoose/commit/a384a29bc7edcd745a095a3f3268b8026d2e566d) chore: release 5.3.16
- [`d2446bd`](https://github.com/Automattic/mongoose/commit/d2446bd6e63f403fdd6dfd7e72a53b8d7abc070a) fix(mongoose): fix quick issue re: [#5648](https://github-redirect.dependabot.com/Automattic/mongoose/issues/5648), only apply logic for default Mongoo...
- [`05356a7`](https://github.com/Automattic/mongoose/commit/05356a704794dbd085ba19c6c8a77f577c6d3d34) fix(mongoose): avoid crash on `import mongoose, {Schema} from 'mongoose'`
- [`515ad81`](https://github.com/Automattic/mongoose/commit/515ad81b10fd9c2c4c72c8c1d804cb649f68fe37) test: add coverage for other ops re: [#7290](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7290)
- [`22ad62a`](https://github.com/Automattic/mongoose/commit/22ad62ada2f2a70f33189ed4fdcd2b46f5e50d57) fix(document): handle `__proto__` in queries
- [`266b546`](https://github.com/Automattic/mongoose/commit/266b5464be583c2361015912dcfdf4952c1b970e) test(document): repro [#7290](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7290) part 2
- [`b0e29e4`](https://github.com/Automattic/mongoose/commit/b0e29e410815070a092f0732f71119f5922a5280) docs(populate): add section about what happens when no document matches
- [`151b667`](https://github.com/Automattic/mongoose/commit/151b667d5fa6b94c42174835d0dfd50831f2436a) fix(document): use Array.isArray() instead of checking constructor name for a...
- [`c82bb15`](https://github.com/Automattic/mongoose/commit/c82bb15b77adc6dc88c3b9fb3e5bdb686c165bc0) test(document): repro [#7290](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7290) part 1
- [`6c67424`](https://github.com/Automattic/mongoose/commit/6c67424468189e54adf4fd064030d2ab7122c2a3) chore: release 5.3.16
- Additional commits viewable in [compare view](https://github.com/Automattic/mongoose/compare/5.3.14...5.3.16)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
Bumps mongoose from 5.3.14 to 5.3.16.
Changelog
*Sourced from [mongoose's changelog](https://github.com/Automattic/mongoose/blob/master/History.md).* > 5.3.16 / 2018-12-11 > =================== > * fix(document): handle `__proto__` in queries [#7290](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7290) > * fix(document): use Array.isArray() instead of checking constructor name for arrays [#7290](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7290) > * docs(populate): add section about what happens when no document matches [#7279](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7279) > * fix(mongoose): avoid crash on `import mongoose, {Schema} from 'mongoose'` [#5648](https://github-redirect.dependabot.com/Automattic/mongoose/issues/5648) > > 5.3.15 / 2018-12-05 > =================== > * fix(query): handle `orFail()` with `findOneAndUpdate()` and `findOneAndDelete()` [#7297](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7297) [#7280](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7280) > * fix(document): make `save()` succeed if strict: false with a `collection` property [#7276](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7276) > * fix(document): add `flattenMaps` option for toObject() [#7274](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7274) > * docs(document): document flattenMaps option [#7274](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7274) > * fix(populate): support populating individual subdoc path in document array [#7273](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7273) > * fix(populate): ensure `model` option overrides `refPath` [#7273](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7273) > * fix(map): don't call subdoc setters on init [#7272](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7272) > * fix(document): use internal get() helper instead of lodash.get to support `null` projection param [#7271](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7271) > * fix(document): continue running validateSync() for all elements in doc array after first error [#6746](https://github-redirect.dependabot.com/Automattic/mongoose/issues/6746)Commits
- [`a384a29`](https://github.com/Automattic/mongoose/commit/a384a29bc7edcd745a095a3f3268b8026d2e566d) chore: release 5.3.16 - [`d2446bd`](https://github.com/Automattic/mongoose/commit/d2446bd6e63f403fdd6dfd7e72a53b8d7abc070a) fix(mongoose): fix quick issue re: [#5648](https://github-redirect.dependabot.com/Automattic/mongoose/issues/5648), only apply logic for default Mongoo... - [`05356a7`](https://github.com/Automattic/mongoose/commit/05356a704794dbd085ba19c6c8a77f577c6d3d34) fix(mongoose): avoid crash on `import mongoose, {Schema} from 'mongoose'` - [`515ad81`](https://github.com/Automattic/mongoose/commit/515ad81b10fd9c2c4c72c8c1d804cb649f68fe37) test: add coverage for other ops re: [#7290](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7290) - [`22ad62a`](https://github.com/Automattic/mongoose/commit/22ad62ada2f2a70f33189ed4fdcd2b46f5e50d57) fix(document): handle `__proto__` in queries - [`266b546`](https://github.com/Automattic/mongoose/commit/266b5464be583c2361015912dcfdf4952c1b970e) test(document): repro [#7290](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7290) part 2 - [`b0e29e4`](https://github.com/Automattic/mongoose/commit/b0e29e410815070a092f0732f71119f5922a5280) docs(populate): add section about what happens when no document matches - [`151b667`](https://github.com/Automattic/mongoose/commit/151b667d5fa6b94c42174835d0dfd50831f2436a) fix(document): use Array.isArray() instead of checking constructor name for a... - [`c82bb15`](https://github.com/Automattic/mongoose/commit/c82bb15b77adc6dc88c3b9fb3e5bdb686c165bc0) test(document): repro [#7290](https://github-redirect.dependabot.com/Automattic/mongoose/issues/7290) part 1 - [`6c67424`](https://github.com/Automattic/mongoose/commit/6c67424468189e54adf4fd064030d2ab7122c2a3) chore: release 5.3.16 - Additional commits viewable in [compare view](https://github.com/Automattic/mongoose/compare/5.3.14...5.3.16)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.