Bump mongoose from 4.13.14 to 5.7.1

[dependabot-preview]

Bumps mongoose from 4.13.14 to 5.7.1.

Changelog

Sourced from mongoose's changelog.

5.7.1 / 2019-09-13

• fix(query): fix TypeError when calling findOneAndUpdate() with runValidators #8151 fernandolguevara
• fix(document): throw strict mode error if setting an immutable path with strict mode: false #8149
• fix(mongoose): support passing options object to Mongoose constructor #8144
• fix(model): make syncIndexes() handle changes in index key order #8135
• fix(error): export StrictModeError as a static property of MongooseError #8148 ouyuran
• docs(connection+mongoose): add useUnifiedTopology option to connect() and openUri() docs #8146

5.7.0 / 2019-09-09

• feat(document+query): support conditionally immutable schema paths #8001
• perf(documentarray): refactor to use ES6 classes instead of mixins, ~30% speedup #7895
• feat: use MongoDB driver 3.3.x for MongoDB 4.2 support #8083 #8078
• feat(schema+query): add pre('validate') and post('validate') hooks for update validation #7984
• fix(timestamps): ensure updatedAt gets incremented consistently using update with and without $set #4768
• feat(query): add Query#get() to make writing custom setters that handle both queries and documents easier #7312
• feat(document): run setters on defaults #8012
• feat(document): add aliases: false option to Document#toObject() #7548
• feat(timestamps): support skipping updatedAt and createdAt for individual save() and update() #3934
• docs: fix index creation link in guide #8138 joebowbeer

5.6.13 / 2019-09-04

• fix(parallel): fix parallelLimit when fns is empty #8130 #8128 sibelius
• fix(document): ensure nested mixed validator gets called exactly once #8117
• fix(populate): handle justOne = undefined #8125 taxilian

5.6.12 / 2019-09-03

• fix(schema): handle required validator correctly with clone() #8111
• fix(schema): copy schematype getters and setters when cloning #8124 StphnDamon
• fix(discriminator): avoid unnecessarily cloning schema to avoid leaking memory on repeated discriminator() calls #2874
• docs(schematypes): clarify when Mongoose uses toString() to convert an object to a string #8112 TheTrueRandom
• docs(plugins): fix out of date link to npm docs #8100
• docs(deprecations): fix typo #8109 jgcmarins
• refactor(model): remove dependency on async.parallelLimit() for insertMany() #8073

5.6.11 / 2019-08-25

• fix(model): allow passing options to exists() #8075
• fix(document): make validateUpdatedOnly option handle pre-existing errors #8091
• fix: throw readable error if middleware callback isnt a function #8087
• fix: don't throw error if calling find() on a nested array #8089
• docs(middleware): clarify that you must add middleware before compiling your model #5087
• docs(query): add missing options to setOptions() #8099

5.6.10 / 2019-08-20

• fix(schema): fix require() path to work around yet another bug in Jest #8053

... (truncated)

Commits

• 32c4e3c chore: release 5.7.1
• 0aec7ad fix(document): fix test failures from fix for #8149
• b4d0303 Merge branch 'master' of github.com:Automattic/mongoose
• 8d86802 fix(document): throw strict mode error if setting an immutable path with stri...
• 74f558c test(document): repro #8149
• 3f9c9b8 Merge pull request #8151 from fernandolguevara/patch-2
• 6e86500 fix(model): make syncIndexes() handle changes in index key order
• ce9d8d0 test(model): repro #8135
• b8cf292 chore: remove paperleaf and papersowl as sponsors
• 691aabb fix(mongoose): support passing options object to Mongoose constructor
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[dependabot-preview]

Superseded by #74.