ci(deps): bump mongoose from 6.13.0 to 6.13.5

[dependabot]

Bumps mongoose from 6.13.0 to 6.13.5.

Changelog

Sourced from mongoose's changelog.

6.13.5 / 2024-11-26

• fix: disallow using $where in match

8.8.2 / 2024-11-18

• fix(model): handle array filters when casting bulkWrite #15036 #14978
• fix(model): make diffIndexes() avoid trying to drop default timeseries collection index #15035 #14984
• fix: save execution stack in query as string #15039 durran
• types(cursor): correct asyncIterator and asyncDispose for TypeScript with lib: 'esnext' #15038
• docs(migrating_to_8): add note about removing findByIdAndRemove #15024 dragontaek-lee

6.13.4 / 2024-11-15

• fix: save execution stack in query as string #15043 #15039
• docs: clarify strictQuery default will flip-flop in "Migrating to 6.x" #14998 markstos

8.8.1 / 2024-11-08

• perf: make a few micro-optimizations to help speed up findOne() #15022 #14906
• fix: apply embedded discriminators to subdoc schemas before compiling top level model so middleware applies correctly #15001 #14961
• fix(query): add overwriteImmutable option to allow updating immutable properties without disabling strict mode #15000 #8619

8.8.0 / 2024-10-31

• feat: upgrade mongodb -> ~6.10 #14991 #14877
• feat(query): add schemaLevelProjections option to query to disable schema-level select: false #14986 #11474
• feat: allow defining virtuals on arrays, not just array elements #14955 #2326
• feat(model): add applyTimestamps() function to apply all schema timestamps, including subdocuments, to a given POJO #14943 #14698
• feat(model): add hideIndexes option to syncIndexes() and cleanIndexes() #14987 #14868
• fix(query): make sanitizeFilter disable implicit $in #14985 #14657
• fix(model): avoid unhandled error if createIndex() throws a sync error #14995
• fix(model): avoid throwing TypeError if bulkSave()'s bulkWrite() fails with a non-BulkWriteError #14993
• types: added toJSON:flattenObjectIds effect #14989
• types: add __v to lean() result type and ModifyResult #14990 #12959
• types: use globalThis instead of global for NativeDate #14992 #14988
• docs(change-streams): fix markdown syntax highlighting for script output example #14994

8.7.3 / 2024-10-25

• fix(cursor): close underlying query cursor when calling destroy() #14982 #14966
• types: add JSONSerialized helper that can convert HydratedDocument to JSON output type #14981 #14451
• types(model): convert InsertManyResult to interface and remove unnecessary insertedIds override #14977
• types(connection): add missing sanitizeFilter option #14975
• types: improve goto definition for inferred schema definitions #14968 forivall
• docs(migration-guide-v7): correct link to the section "Id Setter" #14973 rb-ntnx

8.7.2 / 2024-10-17

• fix(document): recursively clear modified subpaths when setting deeply nested subdoc to null #14963 #14952

... (truncated)

Commits

• 15bdccf chore: release 6.13.5
• 33679bc fix: disallow using $where in match
• 22210b1 chore: release 6.13.4
• d21a239 Merge pull request #15043 from Automattic/vkarpov15/gh-15039
• 68377ff fix: save execution stack in query as string
• 6fbe9f0 Merge pull request #14998 from markstos/UT-8434-doc-strict-query-flipflop
• 3e3dc2e docs: clarify strictQuery default will flip-flop in "Migrating to 6.x"
• d98b2e7 docs: Add missing closing tag for Lodash entry.
• c068e2f Merge pull request #14919 from markstos/task/document-modelSchema-removal
• fd2081c Update migrating_to_6.md about mongoose.modelSchemas
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 5f5fd05

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[mergify]

This pull request has been removed from the queue for the following reason: checks failed.

The merge conditions cannot be satisfied due to failing checks:

• ❌ test-prod-node20 / run-playwright (webkit, 1/2)
• ☑️ approve-updating-patch-version
• ☑️ auto-labeling
• ☑️ check-title
• ☑️ ci-slackbot-proxy-launch-prod
• ☑️ test-prod-node18 / report-playwright
• ☑️ test-prod-node18 / run-playwright

You should look at the reason for the failure and decide if the pull request needs to be fixed or if you want to requeue it.

If you want to requeue this pull request, you need to post a comment with the text: @mergifyio requeue