[Snyk] Upgrade mongoose from 5.13.14 to 8.9.5 #336
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade mongoose from 5.13.14 to 8.9.5. See this package in npm: mongoose See this project in Snyk: https://app.snyk.io/org/gabriel19971029/project/5f768f32-8289-42b4-9352-03cb8bdca27b?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade mongoose from 5.13.14 to 8.9.5.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 236 versions ahead of your current version.
The recommended version was released 24 days ago.
Issues fixed by the recommended upgrade:
SNYK-JS-MONGOOSE-2961688
SNYK-JS-MONGOOSE-5777721
SNYK-JS-MONGOOSE-8446504
SNYK-JS-MONGOOSE-8623536
Release notes
Package name: mongoose
-
8.9.5 - 2025-01-13
- fix: disallow nested $where in populate match
- fix(schema): handle bitwise operators on Int32 #15176 #15170
-
8.9.4 - 2025-01-09
- fix(document): fix document not applying manual populate when using a function in schema.options.ref #15138 IchirokuXVI
- fix(model): make Model.validate() static correctly cast document arrays #15169 #15164
- fix(model): allow passing validateBeforeSave option to bulkSave() to skip validation #15161 #15156
- fix(schema): allow multiple self-referencing discriminator schemas using Schema.prototype.discriminator #15142 #15120
- types: avoid BufferToBinary<> wiping lean types when passed to generic functions #15160 #15158
- docs: fix <code> in header ids #15159
- docs: fix header in field-level-encryption.md #15137 damieng
-
8.9.3 - 2024-12-30
- fix(schema): make duplicate index error a warning for now to prevent blocking upgrading #15135 #15112 #15109
- fix(model): handle document array paths set to non-array values in Model.castObject() #15124 #15075
- fix(document): avoid using childSchemas.path for compatibility with pre-Mongoose-8.8 schemas #15131 #15071
- fix(model): avoid throwing unnecessary error if updateOne() returns null in save() #15126
- perf(cursor): clear the stack every time if using populate with batchSize to avoid stack overflows with large docs #15136 #10449
- types: make BufferToBinary avoid Document instances #15123 #15122
- types(model+query): avoid stripping out virtuals when calling populate with paths generic #15132 #15111
- types(schema): add missing removeIndex #15134
- types: add cleanIndexes() to IndexManager interface #15127
- docs: move search endpoint to netlify #15119
-
8.9.2 - 2024-12-19
-
8.9.1 - 2024-12-16
-
8.9.0 - 2024-12-13
-
8.8.4 - 2024-12-05
-
8.8.3 - 2024-11-26
-
8.8.2 - 2024-11-18
-
8.8.1 - 2024-11-08
-
8.8.0 - 2024-10-31
-
8.7.3 - 2024-10-25
-
8.7.2 - 2024-10-17
-
8.7.1 - 2024-10-09
-
8.7.0 - 2024-09-27
-
8.6.4 - 2024-09-26
-
8.6.3 - 2024-09-17
-
8.6.2 - 2024-09-11
-
8.6.1 - 2024-09-03
-
8.6.0 - 2024-08-28
-
8.5.5 - 2024-08-28
-
8.5.4 - 2024-08-23
-
8.5.3 - 2024-08-13
-
8.5.2 - 2024-07-30
-
8.5.1 - 2024-07-12
-
8.5.0 - 2024-07-08
-
8.4.5 - 2024-07-05
-
8.4.4 - 2024-06-25
-
8.4.3 - 2024-06-17
-
8.4.2 - 2024-06-17
-
8.4.1 - 2024-05-31
-
8.4.0 - 2024-05-17
-
8.3.5 - 2024-05-15
-
8.3.4 - 2024-05-06
-
8.3.3 - 2024-04-29
-
8.3.2 - 2024-04-16
-
8.3.1 - 2024-04-08
-
8.3.0 - 2024-04-03
-
8.2.4 - 2024-03-28
-
8.2.3 - 2024-03-21
-
8.2.2 - 2024-03-15
-
8.2.1 - 2024-03-04
-
8.2.0 - 2024-02-22
-
8.1.3 - 2024-02-16
-
8.1.2 - 2024-02-11
-
8.1.1 - 2024-01-24
-
8.1.0 - 2024-01-16
-
8.0.4 - 2024-01-09
-
8.0.3 - 2023-12-07
-
8.0.2 - 2023-11-28
-
8.0.1 - 2023-11-15
-
8.0.0 - 2023-10-31
-
8.0.0-rc0 - 2023-10-24
-
7.8.6 - 2025-01-20
-
7.8.5 - 2025-01-20
-
7.8.4 - 2025-01-13
- fix: disallow nested $where in populate match
-
7.8.3 - 2024-11-26
-
7.8.2 - 2024-09-25
-
7.8.1 - 2024-08-19
-
7.8.0 - 2024-07-23
-
7.7.0 - 2024-06-18
-
7.6.13 - 2024-06-05
-
7.6.12 - 2024-05-21
-
7.6.11 - 2024-04-11
-
7.6.10 - 2024-03-13
-
7.6.9 - 2024-02-26
-
7.6.8 - 2024-01-08
-
7.6.7 - 2023-12-06
-
7.6.6 - 2023-11-27
-
7.6.5 - 2023-11-14
-
7.6.4 - 2023-10-30
-
7.6.3 - 2023-10-17
-
7.6.2 - 2023-10-13
-
7.6.1 - 2023-10-09
-
7.6.0 - 2023-10-06
-
7.5.4 - 2023-10-04
-
7.5.3 - 2023-09-25
-
7.5.2 - 2023-09-15
-
7.5.1 - 2023-09-11
-
7.5.0 - 2023-08-29
-
7.4.5 - 2023-08-25
-
7.4.4 - 2023-08-22
-
7.4.3 - 2023-08-11
-
7.4.2 - 2023-08-03
-
7.4.1 - 2023-07-24
-
7.4.0 - 2023-07-18
-
7.3.4 - 2023-07-12
-
7.3.3 - 2023-07-11
-
7.3.2 - 2023-07-06
-
7.3.1 - 2023-06-21
-
7.3.0 - 2023-06-14
-
7.2.4 - 2023-06-12
-
7.2.3 - 2023-06-09
-
7.2.2 - 2023-05-30
-
7.2.1 - 2023-05-24
-
7.2.0 - 2023-05-19
-
7.1.2 - 2023-05-19
-
7.1.1 - 2023-05-10
-
7.1.0 - 2023-04-27
-
7.0.5 - 2023-04-24
-
7.0.4 - 2023-04-17
-
7.0.3 - 2023-03-23
-
7.0.2 - 2023-03-15
-
7.0.1 - 2023-03-06
-
7.0.0 - 2023-02-27
-
7.0.0-rc0 - 2023-02-23
-
6.13.8 - 2025-01-20
- chore: remove coverage output from bundle
-
6.13.7 - 2025-01-20
- chore: re-release to force npm audit to pick up 6.x fix for CVE-2025-23061
-
6.13.6 - 2025-01-13
- fix: disallow nested $where in populate match
-
6.13.5 - 2024-11-26
-
6.13.4 - 2024-11-15
-
6.13.3 - 2024-09-23
-
6.13.2 - 2024-09-12
-
6.13.1 - 2024-09-06
-
6.13.0 - 2024-06-06
-
6.12.9 - 2024-05-24
-
6.12.8 - 2024-04-10
-
6.12.7 - 2024-03-01
-
6.12.6 - 2024-01-22
-
6.12.5 - 2024-01-03
-
6.12.4 - 2023-12-27
-
6.12.3 - 2023-11-07
-
6.12.2 - 2023-10-25
-
6.12.1 - 2023-10-12
-
6.12.0 - 2023-08-24
-
6.11.6 - 2023-08-21
-
6.11.5 - 2023-08-01
-
6.11.4 - 2023-07-17
-
6.11.3 - 2023-07-11
-
6.11.2 - 2023-06-08
-
6.11.1 - 2023-05-08
-
6.11.0 - 2023-05-01
-
6.10.5 - 2023-04-06
-
6.10.4 - 2023-03-21
-
6.10.3 - 2023-03-13
-
6.10.2 - 2023-03-07
-
6.10.1 - 2023-03-03
-
6.10.0 - 2023-02-22
-
6.9.3 - 2023-02-22
-
6.9.2 - 2023-02-16
-
6.9.1 - 2023-02-06
-
6.9.0 - 2023-01-25
-
6.8.4 - 2023-01-17
-
6.8.3 - 2023-01-06
-
6.8.2 - 2022-12-28
-
6.8.1 - 2022-12-19
-
6.8.0 - 2022-12-05
-
6.7.5 - 2022-11-30
-
6.7.4 - 2022-11-28
-
6.7.3 - 2022-11-22
-
6.7.2 - 2022-11-07
-
6.7.1 - 2022-11-02
-
6.7.0 - 2022-10-24
-
6.6.7 - 2022-10-21
-
6.6.6 - 2022-10-20
-
6.6.5 - 2022-10-05
-
6.6.4 - 2022-10-03
-
6.6.3 - 2022-09-30
-
6.6.2 - 2022-09-26
-
6.6.1 - 2022-09-14
-
6.6.0 - 2022-09-08
-
6.5.5 - 2022-09-07
-
6.5.4 - 2022-08-30
-
6.5.3 - 2022-08-25
-
6.5.2 - 2022-08-10
-
6.5.1 - 2022-08-03
-
6.5.0 - 2022-07-26
-
6.4.7 - 2022-07-25
-
6.4.6 - 2022-07-20
-
6.4.5 - 2022-07-18
-
6.4.4 - 2022-07-08
-
6.4.3 - 2022-07-05
-
6.4.2 - 2022-07-01
-
6.4.1 - 2022-06-27
-
6.4.0 - 2022-06-17
-
6.3.9 - 2022-06-17
-
6.3.8 - 2022-06-13
-
6.3.7 - 2022-06-13
-
6.3.6 - 2022-06-07
-
6.3.5 - 2022-05-30
-
6.3.4 - 2022-05-19
-
6.3.3 - 2022-05-09
-
6.3.2 - 2022-05-02
-
6.3.1 - 2022-04-21
-
6.3.0 - 2022-04-14
-
6.2.11 - 2022-04-13
-
6.2.10 - 2022-04-04
-
6.2.9 - 2022-03-28
-
6.2.8 - 2022-03-23
-
6.2.7 - 2022-03-16
-
6.2.6 - 2022-03-11
-
6.2.5 - 2022-03-09
-
6.2.4 - 2022-02-28
-
6.2.3 - 2022-02-21
-
6.2.2 - 2022-02-16
-
6.2.1 - 2022-02-07
-
6.2.0 - 2022-02-02
-
6.1.10 - 2022-02-01
-
6.1.9 - 2022-01-31
-
6.1.8 - 2022-01-24
-
6.1.7 - 2022-01-17
-
6.1.6 - 2022-01-10
-
6.1.5 - 2022-01-04
-
6.1.4 - 2021-12-27
-
6.1.3 - 2021-12-21
-
6.1.2 - 2021-12-15
-
6.1.1 - 2021-12-09
-
6.1.0 - 2021-12-07
-
6.0.15 - 2021-12-06
-
6.0.14 - 2021-11-29
-
6.0.13 - 2021-11-15
-
6.0.12 - 2021-10-21
-
6.0.11 - 2021-10-14
-
6.0.10 - 2021-10-08
-
6.0.9 - 2021-10-04
-
6.0.8 - 2021-09-27
-
6.0.7 - 2021-09-20
-
6.0.6 - 2021-09-15
-
6.0.5 - 2021-09-06
-
6.0.4 - 2021-09-01
-
6.0.3 - 2021-08-30
-
6.0.2 - 2021-08-26
-
6.0.1 - 2021-08-25
-
6.0.0 - 2021-08-24
-
6.0.0-rc2 - 2021-08-23
-
6.0.0-rc1 - 2021-08-12
-
6.0.0-rc0 - 2021-08-03
-
5.13.23 - 2024-12-17
-
5.13.22 - 2024-01-02
-
5.13.21 - 2023-10-19
-
5.13.20 - 2023-07-12
-
5.13.19 - 2023-06-22
-
5.13.18 - 2023-06-22
-
5.13.17 - 2023-04-04
-
5.13.16 - 2023-02-20
-
5.13.15 - 2022-08-22
-
5.13.14 - 2021-12-27
from mongoose GitHub release notes8.9.5 / 2025-01-13
8.9.4 / 2025-01-09
8.9.3 / 2024-12-30
7.8.4 / 2025-01-13
6.13.8 / 2025-01-20
6.13.7 / 2025-01-20
6.13.6 / 2025-01-13
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: