Title: Bump mongoose from 4.13.6 to 6.13.6 in /node.js/express+Mongoose in the npm_and_yarn group across 1 directory by dependabot[bot] · Pull Request #2 · bagefly/MyCode · GitHub
Open Graph Title: Bump mongoose from 4.13.6 to 6.13.6 in /node.js/express+Mongoose in the npm_and_yarn group across 1 directory by dependabot[bot] · Pull Request #2 · bagefly/MyCode
X Title: Bump mongoose from 4.13.6 to 6.13.6 in /node.js/express+Mongoose in the npm_and_yarn group across 1 directory by dependabot[bot] · Pull Request #2 · bagefly/MyCode
Description: Bumps the npm_and_yarn group with 1 update in the /node.js/express+Mongoose directory: mongoose.
Updates mongoose from 4.13.6 to 6.13.6
Release notes
Sourced from mongoose's releases.
6.13.6 / 2025-01-13
fix: disallow nested $where in populate match
Changelog
Sourced from mongoose's changelog.
6.13.6 / 2025-01-13
fix: disallow nested $where in populate match CVE-2025-23061
8.9.4 / 2025-01-09
fix(document): fix document not applying manual populate when using a function in schema.options.ref #15138 IchirokuXVI
fix(model): make Model.validate() static correctly cast document arrays #15169 #15164
fix(model): allow passing validateBeforeSave option to bulkSave() to skip validation #15161 #15156
fix(schema): allow multiple self-referencing discriminator schemas using Schema.prototype.discriminator #15142 #15120
types: avoid BufferToBinary<> wiping lean types when passed to generic functions #15160 #15158
docs: fix in header ids #15159
docs: fix header in field-level-encryption.md #15137 damieng
8.9.3 / 2024-12-30
fix(schema): make duplicate index error a warning for now to prevent blocking upgrading #15135 #15112 #15109
fix(model): handle document array paths set to non-array values in Model.castObject() #15124 #15075
fix(document): avoid using childSchemas.path for compatibility with pre-Mongoose-8.8 schemas #15131 #15071
fix(model): avoid throwing unnecessary error if updateOne() returns null in save() #15126
perf(cursor): clear the stack every time if using populate with batchSize to avoid stack overflows with large docs #15136 #10449
types: make BufferToBinary avoid Document instances #15123 #15122
types(model+query): avoid stripping out virtuals when calling populate with paths generic #15132 #15111
types(schema): add missing removeIndex #15134
types: add cleanIndexes() to IndexManager interface #15127
docs: move search endpoint to netlify #15119
8.9.2 / 2024-12-19
fix(schema): avoid throwing duplicate index error if index spec keys have different order or index has a custom name #15112 #15109
fix(map): clean modified subpaths when overwriting values in map of subdocs #15114 #15108
fix(aggregate): pull session from transaction local storage for aggregation cursors #15094 IchirokuXVI
types: correctly handle union types in BufferToBinary and related helpers #15103 #15102 #15057
types: add UUID to RefType #15115 #15101
docs: remove link to Mongoose 5.x docs from dropdown #15116
docs(connection+document+model): remove remaining references to remove(), clarify that deleteOne() does not execute until then() or exec() #15113 #15107
8.9.1 / 2024-12-16
fix(connection): remove heartbeat check in load balanced mode #15089 #15042 #14812
fix(discriminator): gather childSchemas when creating discriminator to ensure $getAllSubdocs() can properly get all subdocs #15099 #15088 #15092
fix(model): handle discriminators in castObject() #15096 #15075
fix(schema): throw error if duplicate index definition using unique in schema path and subsequent .index() call #15093 #15056
fix: mark documents that are populated using hydratedPopulatedDocs option as populated in top-level doc #15080 #15048
fix(document+schema): improve error message for get() on invalid path #15098 #15071
docs: remove more callback doc references & some small other changes #15095
8.9.0 / 2024-12-13
feat: upgrade mongodb -> 6.12
... (truncated)
Commits
e59e342 chore: release 6.13.6
64a9f97 fix: disallow nested $where in populate match
15bdccf chore: release 6.13.5
33679bc fix: disallow using $where in match
22210b1 chore: release 6.13.4
d21a239 Merge pull request #15043 from Automattic/vkarpov15/gh-15039
68377ff fix: save execution stack in query as string
6fbe9f0 Merge pull request #14998 from markstos/UT-8434-doc-strict-query-flipflop
3e3dc2e docs: clarify strictQuery default will flip-flop in "Migrating to 6.x"
d98b2e7 docs: Add missing closing tag for Lodash entry.
Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show
Open Graph Description: Bumps the npm_and_yarn group with 1 update in the /node.js/express+Mongoose directory: mongoose. Updates mongoose from 4.13.6 to 6.13.6 Release notes Sourced from mongoose's releases. 6.13.6 ...
X Description: Bumps the npm_and_yarn group with 1 update in the /node.js/express+Mongoose directory: mongoose. Updates mongoose from 4.13.6 to 6.13.6 Release notes Sourced from mongoose's releases. 6.1...
Opengraph URL: https://github.com/bagefly/MyCode/pull/2
X: @github
Domain: github.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:d06ee2cb-fdb4-21f8-0755-216ce338c44a |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 8FD8:225DC1:192E472:2096E64:6A5C671A |
| html-safe-nonce | 9a9b8d0d1b44ba5bf8ed404fa8dff2f83a9f37e43132fb81950ea28fb6d39eb1 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4RkQ4OjIyNURDMToxOTJFNDcyOjIwOTZFNjQ6NkE1QzY3MUEiLCJ2aXNpdG9yX2lkIjoiNzkwNTM1ODA2NDI1Nzg4NTk3OCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | b759579b7fa7a2c39e0aa11d307b99c6cc7ce0f82a60de03729c348721710fb5 |
| hovercard-subject-tag | pull_request:2375647452 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/bagefly/MyCode/pull/2/files |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Bumps the npm_and_yarn group with 1 update in the /node.js/express+Mongoose directory: mongoose. Updates mongoose from 4.13.6 to 6.13.6 Release notes Sourced from mongoose's releases. 6.13.6 ... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 5290d7e14309ad1e76106a9c4237bd1041517e83ea182c8ab756752cb0c6940b |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/bagefly/MyCode git https://github.com/bagefly/MyCode.git |
| octolytics-dimension-user_id | 29301035 |
| octolytics-dimension-user_login | bagefly |
| octolytics-dimension-repository_id | 99526784 |
| octolytics-dimension-repository_nwo | bagefly/MyCode |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 99526784 |
| octolytics-dimension-repository_network_root_nwo | bagefly/MyCode |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 9c975978430e9ad293956f2bbdaf153b1bd84a99 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width