Skip to content

Bump the npm_and_yarn group in /src/website/tests with 3 updates #547

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the npm_and_yarn group in /src/website/tests with 3 updates #547

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 5, 2025

Bumps the npm_and_yarn group in /src/website/tests with 3 updates: axios, mongoose and follow-redirects.

Updates axios from 0.28.0 to 0.30.0

Release notes

Sourced from axios's releases.

Release v0.30.0

Release notes:

Bug Fixes

Contributors to this release

Full Changelog: axios/axios@v0.29.0...v0.30.0

v0.29.0

Release notes:

Bug Fixes

Contributors to this release

Release v0.28.1

Release notes:

Release notes:

Bug Fixes

  • fix(backport): custom params serializer support (#6263)
  • fix(backport): uncaught ReferenceError req is not defined (#6307)
Changelog

Sourced from axios's changelog.

0.30.0 (2025-03-26)

Release notes:

Bug Fixes

  • fix: modify log while request is aborted (#4917)
  • fix: update CHANGELOG.md for v0.x (#6271)
  • fix: modify upgrade guide for 0.28.1's breaking change (#6787)
  • fix: backport allowAbsoluteUrls vulnerability fix to v0.x (#6829)
  • fix: add allowAbsoluteUrls type (#6849)

0.29.0 (2024-11-21)

Release notes:

Bug Fixes

  • fix(backport): backport security fixes in commits #6167 and #6163 (#6402)
  • fix: omit nulls in params (#6394)
  • fix(backport): fix paramsSerializer function validation (#6361)
  • fix: regular expression denial of service (ReDoS) (#6708)

0.28.1 (2024-03-24)

Release notes:

Bug Fixes

  • fix(backport): custom params serializer support (#6263)
  • fix(backport): uncaught ReferenceError req is not defined (#6307)
Commits
  • 6e922e4 chore: added build artifacts
  • a06ed1e chore: added pre-release artifacts
  • c010622 feat: add type for allowAbsoluteUrls (#6849)
  • 02c3c69 fix: backport allowAbsoluteUrls vuln fix to v0.x (#6829)
  • 8603e67 docs: modify upgrade guide for 0.28.1's breaking change (#6787)
  • f0642ee fix(docs): update CHANGELOG.md for v0.x (#6271)
  • 0630c32 fix: modify log while request is aborted (#4917)
  • 7750b8c chore(release): prep release v0.29.0
  • 4840cb2 fix: regular expression denial of service issues (#6708)
  • 2e36cdb fix(backport): fix paramsSerializer function validation (#6361)
  • Additional commits viewable in compare view

Updates mongoose from 7.5.3 to 7.8.4

Release notes

Sourced from mongoose's releases.

7.8.4 / 2025-01-13

  • fix: disallow nested $where in populate match

7.8.3 / 2024-11-26

  • fix: disallow using $where in match
  • fix(projection): avoid setting projection to unknown exclusive/inclusive if elemMatch on a Date, ObjectId, etc. #14894 #14893
  • docs(migrating_to_7): add note about keepAlive to Mongoose 7 migration guide #15032 #13431

7.6.3 / 2023-10-17

  • fix(populate): handle multiple spaces when specifying paths to populate using space-delimited paths #13984 #13951
  • fix(update): avoid applying defaults on query filter when upserting with empty update #13983 #13962
  • fix(model): add versionKey to bulkWrite when inserting or upserting #13981 #13944
  • docs: fix typo in timestamps docs #13976 danielcoker

7.6.2 / 2023-10-13

  • perf: avoid storing a separate entry in schema subpaths for every element in an array #13953 #13874
  • fix(document): avoid triggering setter when initializing Model.prototype.collection to allow defining collection as a schema path name #13968 #13956
  • fix(model): make bulkSave() save changes in discriminator paths if calling bulkSave() on base model #13959 #13907
  • fix(document): allow calling $model() with no args for TypeScript #13963 #13878
  • fix(schema): handle embedded discriminators defined using Schema.prototype.discriminator() #13958 #13898
  • types(model): make InsertManyResult consistent with return type of insertMany #13965 #13904
  • types(models): add cleaner type definitions for insertMany() with no generics to prevent errors when using insertMany() in generic classes #13964 #13957
  • types(schematypes): allow defining map path using type: 'Map' in addition to type: Map #13960 #13755

7.6.1 / 2023-10-09

7.6.0 / 2023-10-06

7.5.4 / 2023-10-04

  • fix: avoid stripping out id property when _id is set #13933 #13892 #13867
  • fix(QueryCursor): avoid double-applying schema paths so you can include select: false fields with + projection using cursors #13932 #13773
  • fix(query): allow deselecting discriminator key using - syntax #13929 #13760
  • fix(query): handle $round in $expr as array #13928 #13881
  • fix(document): call pre('validate') hooks when modifying a path underneath triply nested subdoc #13912 #13876
  • fix(mongoose): correctly handle global applyPluginsToChildSchemas option #13911 #13887
  • types: add insertMany array overload with options #13931 t1bb4r

... (truncated)

Changelog

Sourced from mongoose's changelog.

7.8.4 / 2025-01-13

6.13.6 / 2025-01-13

8.9.4 / 2025-01-09

  • fix(document): fix document not applying manual populate when using a function in schema.options.ref #15138 IchirokuXVI
  • fix(model): make Model.validate() static correctly cast document arrays #15169 #15164
  • fix(model): allow passing validateBeforeSave option to bulkSave() to skip validation #15161 #15156
  • fix(schema): allow multiple self-referencing discriminator schemas using Schema.prototype.discriminator #15142 #15120
  • types: avoid BufferToBinary<> wiping lean types when passed to generic functions #15160 #15158
  • docs: fix <code> in header ids #15159
  • docs: fix header in field-level-encryption.md #15137 damieng

8.9.3 / 2024-12-30

  • fix(schema): make duplicate index error a warning for now to prevent blocking upgrading #15135 #15112 #15109
  • fix(model): handle document array paths set to non-array values in Model.castObject() #15124 #15075
  • fix(document): avoid using childSchemas.path for compatibility with pre-Mongoose-8.8 schemas #15131 #15071
  • fix(model): avoid throwing unnecessary error if updateOne() returns null in save() #15126
  • perf(cursor): clear the stack every time if using populate with batchSize to avoid stack overflows with large docs #15136 #10449
  • types: make BufferToBinary avoid Document instances #15123 #15122
  • types(model+query): avoid stripping out virtuals when calling populate with paths generic #15132 #15111
  • types(schema): add missing removeIndex #15134
  • types: add cleanIndexes() to IndexManager interface #15127
  • docs: move search endpoint to netlify #15119

8.9.2 / 2024-12-19

  • fix(schema): avoid throwing duplicate index error if index spec keys have different order or index has a custom name #15112 #15109
  • fix(map): clean modified subpaths when overwriting values in map of subdocs #15114 #15108
  • fix(aggregate): pull session from transaction local storage for aggregation cursors #15094 IchirokuXVI
  • types: correctly handle union types in BufferToBinary and related helpers #15103 #15102 #15057
  • types: add UUID to RefType #15115 #15101
  • docs: remove link to Mongoose 5.x docs from dropdown #15116
  • docs(connection+document+model): remove remaining references to remove(), clarify that deleteOne() does not execute until then() or exec() #15113 #15107

8.9.1 / 2024-12-16

  • fix(connection): remove heartbeat check in load balanced mode #15089 #15042 #14812
  • fix(discriminator): gather childSchemas when creating discriminator to ensure $getAllSubdocs() can properly get all subdocs #15099 #15088 #15092
  • fix(model): handle discriminators in castObject() #15096 #15075
  • fix(schema): throw error if duplicate index definition using unique in schema path and subsequent .index() call #15093 #15056
  • fix: mark documents that are populated using hydratedPopulatedDocs option as populated in top-level doc #15080 #15048
  • fix(document+schema): improve error message for get() on invalid path #15098 #15071
  • docs: remove more callback doc references & some small other changes #15095

... (truncated)

Commits

Updates follow-redirects from 1.15.5 to 1.15.9

Commits
  • e4e55c7 Release version 1.15.9 of the npm package.
  • 31a1abf Attempt much more gentle detection.
  • d2aaa97 Fix url field.
  • 62558f0 Release version 1.15.8 of the npm package.
  • a8d1cee Return subtlety.
  • 458ca8e Fix native URL test for Node 20.
  • ca49e44 Handle KeepAlive connections in tests.
  • f3711d7 Test on Node 20 and 22.
  • fda0faf Fix typo.
  • 760757f Release version 1.15.7 of the npm package.
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the npm_and_yarn group in /src/website/tests with 3 updates
66d9781 
Bumps the npm_and_yarn group in /src/website/tests with 3 updates: [axios](https://github.com/axios/axios), [mongoose](https://github.com/Automattic/mongoose) and [follow-redirects](https://github.com/follow-redirects/follow-redirects).


Updates `axios` from 0.28.0 to 0.30.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v0.30.0/CHANGELOG.md)
- [Commits](axios/axios@v0.28.0...v0.30.0)

Updates `mongoose` from 7.5.3 to 7.8.4
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@7.5.3...7.8.4)

Updates `follow-redirects` from 1.15.5 to 1.15.9
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.5...v1.15.9)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 0.30.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: mongoose
  dependency-version: 7.8.4
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: follow-redirects
  dependency-version: 1.15.9
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 5, 2025
@dependabot dependabot bot requested a review from JordanChen123 as a code owner April 5, 2025 21:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@JordanChen123 JordanChen123 Awaiting requested review from JordanChen123 JordanChen123 is a code owner

At least 0 approving reviews are required to merge this pull request.

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants