[Snyk] Upgrade mongoose from 5.6.6 to 5.8.7

[snyk-bot]

Snyk has created this PR to upgrade mongoose from 5.6.6 to 5.8.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 29 versions ahead of your current version.
• The recommended version was released 25 days ago, on 2020-01-10.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Information Exposure SNYK-JS-MONGOOSE-472486	No Known Exploit

Release notes

Package name: mongoose

• 5.8.7 - 2020-01-10
  

  chore: release 5.8.7

• 5.8.6 - 2020-01-08
  

  chore: release 5.8.6

• 5.8.5 - 2020-01-06
  

  chore: release 5.8.5

• 5.8.4 - 2020-01-02
  

  chore: release 5.8.4

• 5.8.3 - 2019-12-23
  

  chore: release 5.8.3

• 5.8.2 - 2019-12-20
• 5.8.1 - 2019-12-12
• 5.8.0 - 2019-12-09
• 5.7.14 - 2019-12-06
• 5.7.13 - 2019-11-29
• 5.7.12 - 2019-11-19
• 5.7.11 - 2019-11-14
• 5.7.10 - 2019-11-11
• 5.7.9 - 2019-11-08
• 5.7.8 - 2019-11-05
• 5.7.7 - 2019-10-24
• 5.7.6 - 2019-10-21
• 5.7.5 - 2019-10-14
• 5.7.4 - 2019-10-09
• 5.7.3 - 2019-09-30
• 5.7.1 - 2019-09-13
• 5.7.0 - 2019-09-09
• 5.6.13 - 2019-09-06
• 5.6.12 - 2019-09-03
• 5.6.11 - 2019-08-25
• 5.6.10 - 2019-08-21
• 5.6.9 - 2019-08-07
• 5.6.8 - 2019-08-02
• 5.6.7 - 2019-07-26
• 5.6.6 - 2019-07-22

from mongoose GitHub release notes

Commit messages

Package name: mongoose

• a4d623e chore: release 5.8.7
• c866866 chore: update opencollective sponsors
• 2a18b0f test: fix tests re: #8481
• b3d5faa Actually fix #8479
• d938e9a fix(documentarray): modify ownerDocument when setting doc array to a doc array thats part of another document
• b2f2bdf test(documentarray): repro #8479
• a041b44 fix(document): ensure that you can call `splice()` after `slice()` on an array
• a3ab3a6 test(document): repro #8482
• b4b6486 docs(populate): improve cross-db populate docs to include model refs
• 56bbac4 chore: now working on 5.8.7
• abb47f1 chore: release 5.8.6
• 713ec2d Merge branch '4.x'
• 1db031c test(schema): clean up messy tests re: #8459
• 8fa8012 test: test cleanup re: #8459
• 4a55040 chore: remove problematic mongoose-long dep and use mongodb 3.4 in tests
• 91f95da chore: run consistent mongod version in tests
• 0e65e6e chore: release 4.13.20
• 803090d fix(schema): make aliases handle mongoose-lean-virtuals
• 6a8b381 chore: add .config.js to gitignore and npmignore
• a076c88 chore: release 5.8.5
• 24f0b9d test: fix more tests re: #8481
• 613142e style: fix lint
• d58e38d test: fix a couple tests re: #8481
• e8d3756 refactor: reuse model collections where possible for populate tests re: #8481

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs