Bump mongoose from 4.13.14 to 5.7.0

[dependabot-preview]

Bumps mongoose from 4.13.14 to 5.7.0.

Changelog

Sourced from mongoose's changelog.

5.7.0 / 2019-09-09

• feat(document+query): support conditionally immutable schema paths #8001
• perf(documentarray): refactor to use ES6 classes instead of mixins, ~30% speedup #7895
• feat: use MongoDB driver 3.3.x for MongoDB 4.2 support #8083 #8078
• feat(schema+query): add pre('validate') and post('validate') hooks for update validation #7984
• fix(timestamps): ensure updatedAt gets incremented consistently using update with and without $set #4768
• feat(query): add Query#get() to make writing custom setters that handle both queries and documents easier #7312
• feat(document): run setters on defaults #8012
• feat(document): add aliases: false option to Document#toObject() #7548
• feat(timestamps): support skipping updatedAt and createdAt for individual save() and update() #3934
• docs: fix index creation link in guide #8138 joebowbeer

5.6.13 / 2019-09-04

• fix(parallel): fix parallelLimit when fns is empty #8130 #8128 sibelius
• fix(document): ensure nested mixed validator gets called exactly once #8117
• fix(populate): handle justOne = undefined #8125 taxilian

5.6.12 / 2019-09-03

• fix(schema): handle required validator correctly with clone() #8111
• fix(schema): copy schematype getters and setters when cloning #8124 StphnDamon
• fix(discriminator): avoid unnecessarily cloning schema to avoid leaking memory on repeated discriminator() calls #2874
• docs(schematypes): clarify when Mongoose uses toString() to convert an object to a string #8112 TheTrueRandom
• docs(plugins): fix out of date link to npm docs #8100
• docs(deprecations): fix typo #8109 jgcmarins
• refactor(model): remove dependency on async.parallelLimit() for insertMany() #8073

5.6.11 / 2019-08-25

• fix(model): allow passing options to exists() #8075
• fix(document): make validateUpdatedOnly option handle pre-existing errors #8091
• fix: throw readable error if middleware callback isnt a function #8087
• fix: don't throw error if calling find() on a nested array #8089
• docs(middleware): clarify that you must add middleware before compiling your model #5087
• docs(query): add missing options to setOptions() #8099

5.6.10 / 2019-08-20

• fix(schema): fix require() path to work around yet another bug in Jest #8053
• fix(document): skip casting when initing a populated path #8062
• fix(document): prevent double-calling validators on mixed objects with nested properties #8067
• fix(query): handle schematype with null options when checking immutability #8070 rich-earth
• fix(schema): support Schema#path() to get schema path underneath doc array #8057
• docs(faq): add disable color instruction #8066

5.6.9 / 2019-08-07

• fix(model): delete versionError after saving to prevent memory leak #8048

... (truncated)

Commits

• a4c3e10 chore: release 5.7.0
• e2434ca chore: add moneypug and vpngorilla as opencollective sponsors
• fcf035e Merge pull request #8145 from Automattic/5.7
• e6e3314 fix: be more rigorous about only montoring pool events if useUnifiedTopology ...
• dc23ed1 docs: add useUnifiedTopology to docs re: #8083
• 661f102 fix(connection): handle reconnect, reconnectFailed, timeout events with...
• bc616c8 fix(connection): work around NODE-2155 re: #8083
• 9041fd4 fix: add useUnifiedTopology option analagous to useNewUrlParser
• 037fbe5 refactor(populate): assign using all separate models after all queries are do...
• bc3daf8 chore: remove renovate, unused currently
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[dependabot-preview]

Superseded by #72.