Bump mongoose from 5.0.9 to 5.7.3

[dependabot-preview]

Bumps mongoose from 5.0.9 to 5.7.3.

Changelog

Sourced from mongoose's changelog.

5.7.3 / 2019-09-30

• fix: make CoreMongooseArray#includes() handle fromIndex parameter #8203
• fix(update): cast right hand side of $pull as a query instead of an update for document arrays #8166
• fix(populate): handle virtual populate of an embedded discriminator nested path #8173
• docs(validation): remove deprecated isAsync from validation docs in favor of emphasizing promises #8184
• docs(documents): add overwriting section #8178
• docs(promises): add note about queries being thenable #8110
• perf: avoid update validators going into Mixed types #8192 birdofpreyru
• refactor: remove async as a prod dependency #8073

5.7.2 / 2019-09-23

• fix(mongoose): support mongoose.set('autoIndex', false) #8158
• fix(discriminator): support tiedValue parameter for embedded discriminators analagous to top-level discriminators #8164
• fix(query): handle toConstructor() with entries-style sort syntax #8159
• fix(populate): avoid converting mixed paths into arrays if populating an object path under Mixed #8157
• fix: use $wrapCallback when using promises for mongoose-async-hooks
• fix: handle queries with setter that converts value to Number instance #8150
• docs: add mongoosejs-cli to readme #8142
• docs: fix example typo for Schema.prototype.plugin() #8175 anaethoss

5.7.1 / 2019-09-13

• fix(query): fix TypeError when calling findOneAndUpdate() with runValidators #8151 fernandolguevara
• fix(document): throw strict mode error if setting an immutable path with strict mode: false #8149
• fix(mongoose): support passing options object to Mongoose constructor #8144
• fix(model): make syncIndexes() handle changes in index key order #8135
• fix(error): export StrictModeError as a static property of MongooseError #8148 ouyuran
• docs(connection+mongoose): add useUnifiedTopology option to connect() and openUri() docs #8146

5.7.0 / 2019-09-09

• feat(document+query): support conditionally immutable schema paths #8001
• perf(documentarray): refactor to use ES6 classes instead of mixins, ~30% speedup #7895
• feat: use MongoDB driver 3.3.x for MongoDB 4.2 support #8083 #8078
• feat(schema+query): add pre('validate') and post('validate') hooks for update validation #7984
• fix(timestamps): ensure updatedAt gets incremented consistently using update with and without $set #4768
• feat(query): add Query#get() to make writing custom setters that handle both queries and documents easier #7312
• feat(document): run setters on defaults #8012
• feat(document): add aliases: false option to Document#toObject() #7548
• feat(timestamps): support skipping updatedAt and createdAt for individual save() and update() #3934
• docs: fix index creation link in guide #8138 joebowbeer

5.6.13 / 2019-09-04

• fix(parallel): fix parallelLimit when fns is empty #8130 #8128 sibelius
• fix(document): ensure nested mixed validator gets called exactly once #8117
• fix(populate): handle justOne = undefined #8125 taxilian

... (truncated)

Commits

• 43b63ae chore: release 5.7.3
• 06112b0 docs(validation): remove deprecated isAsync from validation docs in favor o...
• 7fee719 docs(documents): add overwriting section
• 98b5a73 fix: make CoreMongooseArray#includes() handle fromIndex parameter
• 6c91dea style: fix lint
• 9bb4b03 refactor: remove async as a prod dependency
• 3647292 refactor(cursor): remove async.queue() from eachAsync() re: #8073 #5502
• e60db1b refactor(cursor): remove dependency on async.times()
• c5b2355 docs(promises): add note about queries being thenable
• da77b8d Merge pull request #8192 from birdofpreyru/fix-8093-1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #105.