Bump mongoose from 5.13.19 to 5.13.20

[dependabot]

Bumps mongoose from 5.13.19 to 5.13.20.

Changelog

Sourced from mongoose's changelog.

8.0.1 / 2023-11-15

• fix: retain key order with aliases when creating indexes with alias #14042 meabed
• fix: handle nonexistent collection with diffIndexes #14029 #14010
• types(model+query): correctly remove count from TypeScript types to reflect removal of runtime support #14076 #14067 #14062
• types: correct this parameter for methods and statics #14028 #14027 ruxxzebre
• types(model+query): unpack arrays in distinct return type #14047 #14026
• types: add missing Types.UUID typings #14023 #13103 k725
• docs: add mongoose 8 to mongodb server compatibility guide #14064
• docs: fix typo in queries.md #14065 MuhibAhmed

7.6.5 / 2023-11-14

• fix: handle update validators and single nested doc with numeric paths #14066 #13977
• fix: handle recursive schema array in discriminator definition #14068 #14055
• fix: diffIndexes treats namespace error as empty #14048 #14029
• docs(migrating_to_7): add note about requiring new with ObjectId #14021 #14020

6.12.3 / 2023-11-07

• fix(ChangeStream): correctly handle hydrate option when using change stream as stream instead of iterator #14052
• fix(schema): fix dangling reference to virtual in tree after removeVirtual() #14019 #13085
• fix(document): avoid unmarking modified on nested path if no initial value stored and already modified #14053 #14024
• fix(document): consistently avoid marking subpaths of nested paths as modified #14053 #14022

8.0.0 / 2023-10-31

• docs: add version support notes for Mongoose 8, including EOL date for Mongoose 6

7.6.4 / 2023-10-30

• fix(connection): retain modified status for documents created outside a transaction during transaction retries #14017 #13973
• fix(schema): handle recursive schemas in discriminator definitions #14011 #13978
• fix: handle casting $or underneath $elemMatch #14007 #13974
• fix(populate): allow using options: { strictPopulate: false } to disable strict populate #13863
• docs: fix differences between sample codes and documentation #13998 suzuki
• docs: fix missing import and change wrong variable name #13992 suzuki

6.12.2 / 2023-10-25

• fix: add fullPath to ValidatorProps #13995 Freezystem

8.0.0-rc0 / 2023-10-24

• BREAKING CHANGE: use MongoDB node driver 6, drop support for rawResult option and findOneAndRemove() #13753
• BREAKING CHANGE: apply minimize by default when updating document #13843
• BREAKING CHANGE: remove id setter #13784
• BREAKING CHANGE: remove overwrite option for updateOne(), findOneAndUpdate(), etc. #13989 #13578
• BREAKING CHANGE: make model.prototype.deleteOne() return query, not promise #13660 #13369
• BREAKING CHANGE: remove Model.count(), Query.prototype.count() #13618 #13598

... (truncated)

Commits

• 0f3997a chore: release 5.13.20
• f1efabf fix: avoid prototype pollution on init
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.