Bump mongoose from 5.3.12 to 5.7.4

[dependabot-preview]

Bumps mongoose from 5.3.12 to 5.7.4.

Changelog

Sourced from mongoose's changelog.

5.7.4 / 2019-10-09

• fix(schema): handle required: null and required: undefined as required: false #8219
• fix(update): support updating array embedded discriminator props if discriminator key in $elemMatch #8063
• fix(populate): allow accessing populate virtual prop underneath array when virtual defined on top level #8198
• fix(model): support passing options to Model.remove() #8211
• fix(document): handle Document#set() merge option when setting underneath single nested schema #8201
• fix: use options constructor class for all schematypes #8012

5.7.3 / 2019-09-30

• fix: make CoreMongooseArray#includes() handle fromIndex parameter #8203
• fix(update): cast right hand side of $pull as a query instead of an update for document arrays #8166
• fix(populate): handle virtual populate of an embedded discriminator nested path #8173
• docs(validation): remove deprecated isAsync from validation docs in favor of emphasizing promises #8184
• docs(documents): add overwriting section #8178
• docs(promises): add note about queries being thenable #8110
• perf: avoid update validators going into Mixed types #8192 birdofpreyru
• refactor: remove async as a prod dependency #8073

5.7.2 / 2019-09-23

• fix(mongoose): support mongoose.set('autoIndex', false) #8158
• fix(discriminator): support tiedValue parameter for embedded discriminators analagous to top-level discriminators #8164
• fix(query): handle toConstructor() with entries-style sort syntax #8159
• fix(populate): avoid converting mixed paths into arrays if populating an object path under Mixed #8157
• fix: use $wrapCallback when using promises for mongoose-async-hooks
• fix: handle queries with setter that converts value to Number instance #8150
• docs: add mongoosejs-cli to readme #8142
• docs: fix example typo for Schema.prototype.plugin() #8175 anaethoss

5.7.1 / 2019-09-13

• fix(query): fix TypeError when calling findOneAndUpdate() with runValidators #8151 fernandolguevara
• fix(document): throw strict mode error if setting an immutable path with strict mode: false #8149
• fix(mongoose): support passing options object to Mongoose constructor #8144
• fix(model): make syncIndexes() handle changes in index key order #8135
• fix(error): export StrictModeError as a static property of MongooseError #8148 ouyuran
• docs(connection+mongoose): add useUnifiedTopology option to connect() and openUri() docs #8146

5.7.0 / 2019-09-09

• feat(document+query): support conditionally immutable schema paths #8001
• perf(documentarray): refactor to use ES6 classes instead of mixins, ~30% speedup #7895
• feat: use MongoDB driver 3.3.x for MongoDB 4.2 support #8083 #8078
• feat(schema+query): add pre('validate') and post('validate') hooks for update validation #7984
• fix(timestamps): ensure updatedAt gets incremented consistently using update with and without $set #4768
• feat(query): add Query#get() to make writing custom setters that handle both queries and documents easier #7312
• feat(document): run setters on defaults #8012
• feat(document): add aliases: false option to Document#toObject() #7548

... (truncated)

Commits

• ede5aef chore: release 5.7.4
• 402db1a fix(model): support passing options to Model.remove()
• 7a20276 fix(schema): handle required: null and required: undefined as `required: ...
• 9b4a323 test(schema): repro #8219
• fb66f3a fix: use options constructor class for all schematypes
• d5e0c73 refactor: use options constructor for array, buffer, date schematypes re: #8012
• 2d0955d refactor: use SchemaNumberOptions class for schematype number re: #8012
• 166cd88 refactor: use SchemaStringOptions class for string schematype options re: #8012
• 523c181 fix(update): support updating array embedded discriminator props if discrimin...
• f277d94 test(update): repro #8063
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #124.