Bump mongoose from 4.13.14 to 5.2.15

[dependabot-preview]

Bumps mongoose from 4.13.14 to 5.2.15.

Changelog

Sourced from mongoose's changelog.

5.2.15 / 2018-09-15

• fix(populate): handle virtual justOne correctly if it isn't set #6988
• fix(populate): consistently use lowercase model instead of Model so double-populating works with existing docs #6978
• fix(model): allow calling Model.init() again after calling dropDatabase() #6967
• fix(populate): find correct justOne when double-populating underneath an array #6798
• docs(webpack): make webpack docs use es2015 preset for correct libs and use acorn to test output is valid ES5 #6740
• fix(populate): add selectPopulatedPaths option to opt out of auto-adding populate()-ed fields to select() #6546
• fix(model): set timestamps on bulkWrite insertOne and replaceOne #5708

5.2.14 / 2018-09-09

• docs: fix wording on promise docs to not imply queries only return promises #6983 #6982 lineus
• fix(map): throw TypeError if keys are not string #6956
• fix(document): ensure you can validate() a child doc #6931
• fix(populate): avoid cast error if refPath points to localFields with 2 different types #6870
• fix(populate): handle populating already-populated paths #6839
• fix(schematype): make ObjectIds handle refPaths when checking required #6714
• fix(model): set timestamps on bulkWrite() updates #5708

5.2.13 / 2018-09-04

• fix(map): throw TypeError if keys are not string #6968 Fonger
• fix(update): make array op casting work with strict:false and {} #6962 #6952 lineus
• fix(document): add doc.deleteOne(), doc.updateOne(), doc.replaceOne() re: deprecation warnings #6959 #6940 lineus
• docs(faq+schematypes): add note about map keys needing to be strings #6957 #6956 lineus
• fix(schematype): remove unused if statement #6950 #6949 cacothi
• docs: add /docs/deprecations.html for dealing with MongoDB driver deprecation warnings #6922
• fix(populate): handle refPath where first element in array has no refPath #6913
• fix(mongoose): allow setting useCreateIndex option after creating a model but before initial connection succeeds #6890
• fix(updateValidators): ensure $pull validators always get an array #6889

5.2.12 / 2018-08-30

• fix(document): disallow setting constructor and prototype if strict mode false

4.13.17 / 2018-08-30

• fix(document): disallow setting constructor and prototype if strict mode false

5.2.11 / 2018-08-30

• fix(document): disallow setting proto if strict mode false
• fix(document): run document middleware on docs embedded in maps #6945 #6938 Fonger
• fix(query): make castForQuery return a CastError #6943 #6927 lineus
• fix(query): use correct this scope when casting query with legacy 2dsphere pairs defined in schema #6939 #6937 Fonger
• fix(document): avoid crash when calling get() on deeply nested subdocs #6929 #6925 jakemccloskey
• fix(plugins): make saveSubdocs execute child post save hooks after the actual save #6926
• docs: add dbName to api docs for .connect() #6923 p722
• fix(populate): convert to array when schema specifies array, even if doc doesn't have an array #6908

... (truncated)

Commits

• c4a01ec chore: release 5.2.15
• 1ba6ca7 fix(model): allow calling Model.init() again after calling dropDatabase()
• 4108366 test(model): repro #6967
• 8a178ad docs: add selectPopulatedPaths option
• 950d223 fix(populate): add selectPopulatedPaths option to opt out of auto-adding `pop...
• c0fb363 test(populate): repro #6546
• 6dd98c8 style: fix lint
• 8840ffd chore: peg chalk version
• bdd7432 docs(webpack): make webpack docs use es2015 preset for correct libs and use a...
• 25c305d docs(model): add blog post link and example to syncIndexes() docs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[dependabot-preview]

Superseded by #191.