Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump ms, express and mongoose #116

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump ms, express and mongoose #116

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jan 10, 2023

Bumps ms to 2.0.0 and updates ancestor dependencies ms, express and mongoose. These dependencies need to be updated together.

Updates ms from 0.1.0 to 2.0.0

Release notes

Sourced from ms's releases.

2.0.0

Major Changes

  • Limit str to 100 to avoid ReDoS of 0.3s: #89

Patches

  • Ignored logs coming from npm: b1eaab752203e978492a4d540a7ae1d26e6306b1
  • Bumped dependencies to the latest version: bcf57157678fd5afc691383145a35e116f9704d0
  • Invalidated cache for slack badge: 94b995c1d6d5d13ec976a0c6849a3cca9b277e6b

Credits

Huge thanks to @​karenyavine for their help!

1.0.0

Major Changes

  • Removed component specification: 1fbbe974cdcad96e592dcb65a7b2a8649f690420

Patches

  • Test on LTS version of Node: c9b1fd319f0f9198d85ecf4ba83e46cc1216be04
  • Removed XO: 94068ea6d518387670df277f740b1abada80ed48
  • Use prettier and eslint: 57b3ef8e3423cae6254f94c5564a11b4492cff43
  • Badge for XO removed: 389840b329436117741b2ef13a172725082695b9
  • Removed browser testing: e818c3581aca3119c00d81901bfe8fe653bcfda4
  • More suitable name for file containing tests: ee91f307a8dc3581ebdad614ec0533ddb3d8bf56

0.7.3

Patches

  • Mark "options" param as optional in jsdoc: #77
  • Lowercased text files: 5f0653ab192a30301aed8668b4588a87975b41ab
  • Pinned dependencies: 126d7f094a1836b991c8d0abfeb4d0ce09ac280f
  • Chore(package): update serve to version 5.0.1: #81

Credits

Huge thanks to @​Jokero for their help!

0.7.2

Patches 💅

  • Added license field to package.json file: zeit/ms#42
  • Renamed long and short (reserved keywords): zeit/ms#53
  • Capitalized important files: b2d9f9d
  • Specified version numbers for devDependencies in package.json: abd3616
  • Updated license file to the latest version: 5d53ae8
  • Only upload important files to npm, instead of excluding certain ones: 2b2f02a
  • Adjusted name of repository in package.json: e84f95d

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by leo, a new releaser for ms since your current version.


Updates express from 4.5.1 to 4.18.2

Release notes

Sourced from express's releases.

4.18.2

4.18.1

  • Fix hanging on large stack of sync routes

4.18.0

... (truncated)

Changelog

Sourced from express's changelog.

4.18.2 / 2022-10-08

4.18.1 / 2022-04-29

  • Fix hanging on large stack of sync routes

4.18.0 / 2022-04-25

... (truncated)

Commits

Updates mongoose from 3.8.40 to 6.8.3

Release notes

Sourced from mongoose's releases.

6.8.3 / 2023-01-06

  • perf: improve performance of assignRawDocsToIdStructure for faster populate on large docs #12867 Uzlopak
  • fix(model): ensure consistent ordering of validation errors in insertMany() with ordered: false and rawResult: true #12866
  • fix: avoid passing final callback to pre hook, because calling the callback can mess up hook execution #12836
  • fix(types): avoid inferring timestamps if methods, virtuals, or statics set #12871
  • fix(types): correctly infer string enums on const arrays #12870 JavaScriptBach
  • fix(types): allow virtuals to be invoked in the definition of other virtuals #12874 sffc
  • fix(types): add type def for Aggregate#model without arguments #12864 hasezoey
  • docs(discriminators): add section about changing discriminator key #12861
  • docs(typescript): explain that virtuals inferred from schema only show up on Model, not raw document type #12860 #12684

6.8.2 / 2022-12-28

  • fix(schema): propagate strictQuery to implicitly created schemas for embedded discriminators #12827 #12796
  • fix(model): respect discriminators with Model.validate() #12824 #12621
  • fix(query): fix unexpected validation error when doing findOneAndReplace() with a nullish value #12826 #12821
  • fix(discriminator): apply built-in plugins to discriminator schema even if mergeHooks and mergePlugins are both false #12833 #12696
  • fix(types): add option "overwriteModels" as a schema option #12817 #12816 hasezoey
  • fix(types): add property "defaultOptions" #12818 hasezoey
  • docs: make search bar respect documentation version, so you can search 5.x docs #12548
  • docs(typescript): make note about recommending strict mode when using auto typed schemas #12825 #12420
  • docs: add section on sorting to query docs #12588 IslandRhythms
  • test(query.test): add write-concern option #12829 hasezoey

6.8.1 / 2022-12-19

  • fix(query): avoid throwing circular dependency error if same object is used in multiple properties #12774 orgads
  • fix(map): return value from super.delete() #12777 danbrud
  • fix(populate): handle virtual populate underneath document array with justOne=true and sort set where 1 element has only 1 result #12815 #12730
  • fix(update): handle embedded discriminators when casting array filters #12802 #12565
  • fix(populate): avoid calling transform if there's no populate results and using lean #12804 #12739
  • fix(model): prevent index creation on syncIndexes if not necessary #12785 #12250 lpizzinidev
  • fix(types): correctly infer this when using pre('updateOne') with { document: true, query: false } #12778
  • fix(types): make InferSchemaType: consider { required: boolean } required if it isn't explicitly false #12784 JavaScriptBach
  • docs: replace many occurrences of "localhost" with "127.0.0.1" #12811 #12741 hasezoey SadiqOnGithub
  • docs(mongoose): Added missing options to set #12810 lpizzinidev
  • docs: add info on $locals parameters to getters/setters tutorial #12814 #12550 IslandRhythms
  • docs: make Document.prototype.$clone() public #12803
  • docs(query): updated explanation for slice #12776 #12474 lpizzinidev
  • docs(middleware): fix broken links #12787 lpizzinidev
  • docs(queries): fixed broken links #12790 lpizzinidev

6.8.0 / 2022-12-05

... (truncated)

Changelog

Sourced from mongoose's changelog.

6.8.3 / 2023-01-06

  • perf: improve performance of assignRawDocsToIdStructure for faster populate on large docs #12867 Uzlopak
  • fix(model): ensure consistent ordering of validation errors in insertMany() with ordered: false and rawResult: true #12866
  • fix: avoid passing final callback to pre hook, because calling the callback can mess up hook execution #12836
  • fix(types): avoid inferring timestamps if methods, virtuals, or statics set #12871
  • fix(types): correctly infer string enums on const arrays #12870 JavaScriptBach
  • fix(types): allow virtuals to be invoked in the definition of other virtuals #12874 sffc
  • fix(types): add type def for Aggregate#model without arguments #12864 hasezoey
  • docs(discriminators): add section about changing discriminator key #12861
  • docs(typescript): explain that virtuals inferred from schema only show up on Model, not raw document type #12860 #12684

6.8.2 / 2022-12-28

  • fix(schema): propagate strictQuery to implicitly created schemas for embedded discriminators #12827 #12796
  • fix(model): respect discriminators with Model.validate() #12824 #12621
  • fix(query): fix unexpected validation error when doing findOneAndReplace() with a nullish value #12826 #12821
  • fix(discriminator): apply built-in plugins to discriminator schema even if mergeHooks and mergePlugins are both false #12833 #12696
  • fix(types): add option "overwriteModels" as a schema option #12817 #12816 hasezoey
  • fix(types): add property "defaultOptions" #12818 hasezoey
  • docs: make search bar respect documentation version, so you can search 5.x docs #12548
  • docs(typescript): make note about recommending strict mode when using auto typed schemas #12825 #12420
  • docs: add section on sorting to query docs #12588 IslandRhythms
  • test(query.test): add write-concern option #12829 hasezoey

6.8.1 / 2022-12-19

  • fix(query): avoid throwing circular dependency error if same object is used in multiple properties #12774 orgads
  • fix(map): return value from super.delete() #12777 danbrud
  • fix(populate): handle virtual populate underneath document array with justOne=true and sort set where 1 element has only 1 result #12815 #12730
  • fix(update): handle embedded discriminators when casting array filters #12802 #12565
  • fix(populate): avoid calling transform if there's no populate results and using lean #12804 #12739
  • fix(model): prevent index creation on syncIndexes if not necessary #12785 #12250 lpizzinidev
  • fix(types): correctly infer this when using pre('updateOne') with { document: true, query: false } #12778
  • fix(types): make InferSchemaType: consider { required: boolean } required if it isn't explicitly false #12784 JavaScriptBach
  • docs: replace many occurrences of "localhost" with "127.0.0.1" #12811 #12741 hasezoey SadiqOnGithub
  • docs(mongoose): Added missing options to set #12810 lpizzinidev
  • docs: add info on $locals parameters to getters/setters tutorial #12814 #12550 IslandRhythms
  • docs: make Document.prototype.$clone() public #12803
  • docs(query): updated explanation for slice #12776 #12474 lpizzinidev
  • docs(middleware): fix broken links #12787 lpizzinidev
  • docs(queries): fixed broken links #12790 lpizzinidev

6.8.0 / 2022-12-05

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump ms, express and mongoose
b463c80 
Bumps [ms](https://github.com/vercel/ms) to 2.0.0 and updates ancestor dependencies [ms](https://github.com/vercel/ms), [express](https://github.com/expressjs/express) and [mongoose](https://github.com/Automattic/mongoose). These dependencies need to be updated together.


Updates `ms` from 0.1.0 to 2.0.0
- [Release notes](https://github.com/vercel/ms/releases)
- [Commits](https://github.com/vercel/ms/commits/2.0.0)

Updates `express` from 4.5.1 to 4.18.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@4.5.1...4.18.2)

Updates `mongoose` from 3.8.40 to 6.8.3
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@3.8.40...6.8.3)

---
updated-dependencies:
- dependency-name: ms
  dependency-type: indirect
- dependency-name: express
  dependency-type: direct:production
- dependency-name: mongoose
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 10, 2023
This was referenced Jan 10, 2023
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants