dependabot[bot] created a pull request in webrender/popupvid.io

Bump mongoose from 3.8.40 to 5.7.12

Bumps [mongoose](https://github.com/Automattic/mongoose) from 3.8.40 to 5.7.12.
Changelog *Sourced from [mongoose's changelog](https://github.com/Automattic/mongoose/blob/master/History.md).* > 5.7.12 / 2019-11-19 > =================== > * fix: avoid throwing error if calling `push()` on a doc array with no parent [#8351](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8351) [#8317](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8317) [#8312](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8312) [AbdelrahmanHafez](https://github.com/AbdelrahmanHafez) > * fix(connection): only buffer for "open" events when calling connection helper while connecting [#8319](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8319) > * fix(connection): pull default database from connection string if specified [#8355](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8355) [#8354](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8354) [zachazar](https://github.com/zachazar) > * fix(populate+discriminator): handle populating document whose discriminator value is different from discriminator model name [#8324](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8324) > * fix: add `mongoose.isValidObjectId()` function to test whether Mongoose can cast a value to an objectid [#3823](https://github-redirect.dependabot.com/Automattic/mongoose/issues/3823) > * fix(model): support setting `excludeIndexes` as schema option for subdocs [#8343](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8343) > * fix: add SchemaMapOptions class for options to map schematype [#8318](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8318) > * docs(query): remove duplicate omitUndefined options [#8349](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8349) [mdumandag](https://github.com/mdumandag) > * docs(schema): add Schema#paths docs to public API docs [#8340](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8340) > > 5.7.11 / 2019-11-14 > =================== > * fix: update mongodb driver -> 3.3.4 [#8276](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8276) > * fix(model): throw readable error when casting bulkWrite update without a 'filter' or 'update' [#8332](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8332) [#8331](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8331) [AbdelrahmanHafez](https://github.com/AbdelrahmanHafez) > * fix(connection): bubble up connected/disconnected events with unified topology [#8338](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8338) [#8337](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8337) > * fix(model): delete $versionError after saving [#8326](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8326) [#8048](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8048) [Fonger](https://github.com/Fonger) > * test(model): add test for issue [#8040](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8040) [#8341](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8341) [Fonger](https://github.com/Fonger) > > 5.7.10 / 2019-11-11 > =================== > * perf(cursor): remove unnecessary `setTimeout()` in `eachAsync()`, 4x speedup in basic benchmarks [#8310](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8310) > * docs(README): re-order sections for better readability [#8321](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8321) [dandv](https://github.com/dandv) > * chore: make npm test not hard-code file paths [#8322](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8322) [stieg](https://github.com/stieg) > > 5.7.9 / 2019-11-08 > ================== > * fix(schema): support setting schema path to an instance of SchemaTypeOptions to fix integration with mongoose-i18n-localize [#8297](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8297) [#8292](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8292) > * fix(populate): make `retainNullValues` set array element to `null` if foreign doc with that id was not found [#8293](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8293) > * fix(document): support getter setting virtual on manually populated doc when calling toJSON() [#8295](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8295) > * fix(model): allow objects with `toBSON()` to make it to `save()` [#8299](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8299) > > 5.7.8 / 2019-11-04 > ================== > * fix(document): allow manually populating path within document array [#8273](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8273) > * fix(populate): update top-level `populated()` when updating document array with populated subpaths [#8265](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8265) > * fix(cursor): throw error when using aggregation cursor as async iterator [#8280](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8280) > * fix(schema): retain `_id: false` in schema after nesting in another schema [#8274](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8274) > * fix(document): make Document class an event emitter to support defining documents without models in node [#8272](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8272) > * docs: document return types for `.discriminator()` [#8287](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8287) > * docs(connection): add note about exporting schemas, not models, in multi connection paradigm [#8275](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8275) > * docs: clarify that transforms defined in `toObject()` options are applied to subdocs [#8260](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8260) > > 5.7.7 / 2019-10-24 > ================== > * fix(populate): make populate virtual consistently an empty array if local field is only empty arrays [#8230](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8230) > * fix(query): allow findOne(objectid) and find(objectid) [#8268](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8268) > > 5.7.6 / 2019-10-21 > ... (truncated)
Commits - [`33412d9`](https://github.com/Automattic/mongoose/commit/33412d91d044daade5a135c7f35f607591c75a09) chore: release 5.7.12 - [`b946225`](https://github.com/Automattic/mongoose/commit/b946225a95db9f6298c229dc9b1dbab7ae631679) Merge pull request [#8351](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8351) from AbdelrahmanHafez/[gh-8317](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8317) - [`63c2f1e`](https://github.com/Automattic/mongoose/commit/63c2f1efe21f4a0f0615008440df212d7ceaf9fa) Remove filter test - [`4599877`](https://github.com/Automattic/mongoose/commit/4599877d99b7c8f824acba6e520f4efdf8a1f616) Revert making map return vanilla JS Array - [`9509b47`](https://github.com/Automattic/mongoose/commit/9509b47326c800d71b3e61c3d14b8c0525a3c627) style: fix lint - [`757579d`](https://github.com/Automattic/mongoose/commit/757579d54c285ed438eedf664e1980e70e32658c) fix(connection): only buffer for "open" events when calling connection helper... - [`ff3d36f`](https://github.com/Automattic/mongoose/commit/ff3d36ffd13e5308dd52d54b0b970aa1e63a508d) fix(populate+discriminator): handle populating document whose discriminator v... - [`a32d9a8`](https://github.com/Automattic/mongoose/commit/a32d9a823f9da8d8067c2a4ce8848cf6f0abd833) test(populate): repro [#8324](https://github-redirect.dependabot.com/Automattic/mongoose/issues/8324) - [`ba38d1d`](https://github.com/Automattic/mongoose/commit/ba38d1de8ec94d72d2730d6186fc01301f2258ea) Add test to fiter - [`ba2c353`](https://github.com/Automattic/mongoose/commit/ba2c35377d5f48eca2d338eb10ab66de68ec237c) Make DocumentArray#map return a regular JS array - Additional commits viewable in [compare view](https://github.com/Automattic/mongoose/compare/3.8.40...5.7.12)

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=mongoose&package-manager=npm_and_yarn&previous-version=3.8.40&new-version=5.7.12)](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/webrender/popupvid.io/network/alerts).

11 23, 2019