[Security] Bump mongoose from 5.6.11 to 5.7.6

[dependabot-preview[bot]]

Bumps mongoose from 5.6.11 to 5.7.6.

Changelog

Sourced from mongoose's changelog.

5.7.6 / 2019-10-21

• fix: upgrade mongodb driver -> 3.3.3 to fix issue with failing to connect to a replica set if one member is down #8209
• fix(document): fix TypeError when setting a single nested subdoc with timestamps #8251
• fix(cursor): fix issue with long-running eachAsync() cursor #8249 #8235
• fix(connection): ensure repeated close events from useUnifiedTopology don't disconnect Mongoose from replica set #8224
• fix(document): support calling Document constructor directly in Node.js #8237
• fix(populate): add document array subpaths to parent doc populated() when calling DocumentArray#push() #8247
• fix(options): add missing minlength and maxlength to SchemaStringOptions #8256
• docs: add documentarraypath to API docs, including DocumentArrayPath#discriminator() #8164
• docs(schematypes): add a section about the type property #8227
• docs(api): fix Connection.close return param #8258 gosuhiman
• docs: update link to broken image on home page #8253 krosenk729

5.7.5 / 2019-10-14

• fix(query): delete top-level _bsontype property in queries to prevent silent empty queries #8222
• fix(update): handle subdocument pre('validate') errors in update validation #7187
• fix(subdocument): make subdocument#isModified use parent document's isModified #8223
• docs(index): add favicon to home page #8226
• docs: add schema options to API docs #8012
• docs(middleware): add note about accessing the document being updated in pre('findOneAndUpdate') #8218
• refactor: remove redundant code in ValidationError #8244 AbdelrahmanHafez

5.7.4 / 2019-10-09

• fix(schema): handle required: null and required: undefined as required: false #8219
• fix(update): support updating array embedded discriminator props if discriminator key in $elemMatch #8063
• fix(populate): allow accessing populate virtual prop underneath array when virtual defined on top level #8198
• fix(model): support passing options to Model.remove() #8211
• fix(document): handle Document#set() merge option when setting underneath single nested schema #8201
• fix: use options constructor class for all schematypes #8012

5.7.3 / 2019-09-30

• fix: make CoreMongooseArray#includes() handle fromIndex parameter #8203
• fix(update): cast right hand side of $pull as a query instead of an update for document arrays #8166
• fix(populate): handle virtual populate of an embedded discriminator nested path #8173
• docs(validation): remove deprecated isAsync from validation docs in favor of emphasizing promises #8184
• docs(documents): add overwriting section #8178
• docs(promises): add note about queries being thenable #8110
• perf: avoid update validators going into Mixed types #8192 birdofpreyru
• refactor: remove async as a prod dependency #8073

5.7.2 / 2019-09-23

• fix(mongoose): support mongoose.set('autoIndex', false) #8158
• fix(discriminator): support tiedValue parameter for embedded discriminators analagous to top-level discriminators #8164
• fix(query): handle toConstructor() with entries-style sort syntax #8159
• fix(populate): avoid converting mixed paths into arrays if populating an object path under Mixed #8157

... (truncated)

Commits

• 5656b4e chore: release 5.7.6
• fab4f5d test(schema): fix tests on node v4 and v5
• 29c5f1a fix(options): add missing minlength and maxlength to SchemaStringOptions
• a81211d fix(populate): add document array subpaths to parent doc populated() when c...
• 4e900eb test(populate): repro #8247
• d69ab22 fix(document): support calling Document constructor directly in Node.js
• 9b986f5 test(document): repro #8237
• e5f8875 chore: add bonus.ca to opencollective sponsors
• 25b6798 fix(populate): make ArraySubdocument#populated() return a value when the pa...
• 8ddfc0a test(populate): repro #8247
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)