Bump mongoose from 5.12.7 to 7.3.3 in /backend

[dependabot[bot]]

Bumps mongoose from 5.12.7 to 7.3.3.

Release notes

Sourced from mongoose's releases.

7.3.3 / 2023-07-10

• fix: avoid prototype pollution on init
• fix(document): clean up all array subdocument modified paths on save() #13589 #13582
• types: avoid unnecessary MergeType<> if TOverrides not set, clean up statics and insertMany() type issues #13577 #13529

7.3.2 / 2023-07-06

• fix(model): avoid TypeError if insertMany() fails with error that does not have writeErrors property #13579 #13531
• fix(query): convert findOneAndUpdate to findOneAndReplace when overwrite set for backwards compat with Mongoose 6 #13572 #13550
• fix(query): throw readable error when executing a Query instance without an associated model #13571 #13570
• types: support mongoose.Schema.ObjectId as alias for mongoose.Schema.Types.ObjectId #13543 #13534
• docs(connections): clarify that socketTimeoutMS now defaults to 0 #13576 #13537
• docs(migrating_to_7): add mapReduce() removal to migration guide #13568 #13548
• docs(schemas): fix typo in schemas.md #13540 Metehan-Altuntekin

7.3.1 / 2023-06-21

• fix(query): respect query-level strict option on findOneAndReplace() #13516 #13507
• docs(connections): expand docs on serverSelectionTimeoutMS #13533 #12967
• docs: add example of accessing save options in pre save #13498
• docs(connections+faq): add info on localhost vs 127.0.0.1
• docs(SchemaType): validate members are validator & message (not msg) #13521 lorand-horvath

7.3.0 / 2023-06-14

• feat: upgrade mongodb -> 5.6.0 #13455 lorand-horvath
• feat(aggregate): add Aggregate.prototype.finally() to be consistent with Promise API for TypeScript #13509
• feat(schema): support selecting subset of fields to apply optimistic concurrency to #13506 #10591
• feat(model): add ordered option to Model.create() #13472 #4038
• feat(schema): consistently add .get() function to all SchemaType classes
• feat(populate): pass virtual to match function to allow merging match options #13477 #12443
• types: allow overwriting Paths in select() to tell TypeScript which fields are projected #13478 #13224
• types(schema): add validateModifiedOnly as schema option #13503 #10153
• docs: add note about validateModifiedOnly as a schema option #13503 #10153
• docs(migrating_to_7): update migrating_to_7.md to include Model.countDocuments #13508 Climax777
• docs(further_reading): remove style for "img" hasezoey

7.2.4 / 2023-06-12

• fix(query): handle non-string discriminator key values in query #13496 #13492

7.2.3 / 2023-06-09

• fix(model): ignore falsy last argument to create() for backwards compatibility #13493 #13491 #13487 MohOraby
• types: remove generic param that's causing issues for typegoose #13494 #13482
• types(aggregate): allow object syntax for $mergeObjects #13470 #13060
• docs(connection): clarify how Connection.prototype.destroy() is different from close() #13475
• docs(populate): fix accidental removal of text #13480
• docs: add additional notes for Atlas X.509 authentication #13452 alexbevi

... (truncated)

Changelog

Sourced from mongoose's changelog.

7.3.3 / 2023-07-10

• fix: avoid prototype pollution on init
• fix(document): clean up all array subdocument modified paths on save() #13589 #13582
• types: avoid unnecessary MergeType<> if TOverrides not set, clean up statics and insertMany() type issues #13577 #13529

7.3.2 / 2023-07-06

• fix(model): avoid TypeError if insertMany() fails with error that does not have writeErrors property #13579 #13531
• fix(query): convert findOneAndUpdate to findOneAndReplace when overwrite set for backwards compat with Mongoose 6 #13572 #13550
• fix(query): throw readable error when executing a Query instance without an associated model #13571 #13570
• types: support mongoose.Schema.ObjectId as alias for mongoose.Schema.Types.ObjectId #13543 #13534
• docs(connections): clarify that socketTimeoutMS now defaults to 0 #13576 #13537
• docs(migrating_to_7): add mapReduce() removal to migration guide #13568 #13548
• docs(schemas): fix typo in schemas.md #13540 Metehan-Altuntekin

7.3.1 / 2023-06-21

• fix(query): respect query-level strict option on findOneAndReplace() #13516 #13507
• docs(connections): expand docs on serverSelectionTimeoutMS #13533 #12967
• docs: add example of accessing save options in pre save #13498
• docs(connections+faq): add info on localhost vs 127.0.0.1
• docs(SchemaType): validate members are validator & message (not msg) #13521 lorand-horvath

7.3.0 / 2023-06-14

• feat: upgrade mongodb -> 5.6.0 #13455 lorand-horvath
• feat(aggregate): add Aggregate.prototype.finally() to be consistent with Promise API for TypeScript #13509
• feat(schema): support selecting subset of fields to apply optimistic concurrency to #13506 #10591
• feat(model): add ordered option to Model.create() #13472 #4038
• feat(schema): consistently add .get() function to all SchemaType classes
• feat(populate): pass virtual to match function to allow merging match options #13477 #12443
• types: allow overwriting Paths in select() to tell TypeScript which fields are projected #13478 #13224
• types(schema): add validateModifiedOnly as schema option #13503 #10153
• docs: add note about validateModifiedOnly as a schema option #13503 #10153
• docs(migrating_to_7): update migrating_to_7.md to include Model.countDocuments #13508 Climax777
• docs(further_reading): remove style for "img" hasezoey

7.2.4 / 2023-06-12

• fix(query): handle non-string discriminator key values in query #13496 #13492

7.2.3 / 2023-06-09

• fix(model): ignore falsy last argument to create() for backwards compatibility #13493 #13491 #13487 MohOraby
• types: remove generic param that's causing issues for typegoose #13494 #13482
• types(aggregate): allow object syntax for $mergeObjects #13470 #13060
• docs(connection): clarify how Connection.prototype.destroy() is different from close() #13475
• docs(populate): fix accidental removal of text #13480
• docs: add additional notes for Atlas X.509 authentication #13452 alexbevi

... (truncated)

Commits

• 90d84fd chore: release 7.3.3
• 82b9c3c style: fix lint
• 02699fa Merge branch 'vkarpov15/avoid-prototype-pollution'
• 2188458 Merge pull request #13577 from Automattic/vkarpov15/gh-13529
• e94ca23 Merge pull request #13589 from Automattic/vkarpov15/gh-13582
• 1a998e2 Merge pull request #13588 from Automattic/vkarpov15/gh-13575
• cc722a1 test: add coverage for constructor properties
• e29578d fix: avoid prototype pollution on init
• 422dff4 perf: avoid adding all doc array subpaths when 1 path is modified
• eb9a4f7 fix(document): clean up all array subdocument modified paths on save()
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel[bot]]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
life-after-hate	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jul 12, 2023 11:07am

[codecov[bot]]

Codecov Report

Merging #1380 (d0f3511) into master (18bc5cb) will decrease coverage by 7.97%. The diff coverage is n/a.

@@            Coverage Diff             @@
##           master    #1380      +/-   ##
==========================================
- Coverage   93.58%   85.62%   -7.97%     
==========================================
  Files          92       19      -73     
  Lines        1123      306     -817     
  Branches       65        0      -65     
==========================================
- Hits         1051      262     -789     
+ Misses         62       44      -18     
+ Partials       10        0      -10     

see 80 files with indirect coverage changes

[dependabot[bot]]

Superseded by #1381.