[Snyk] Fix for 1 vulnerabilities

[gvilarino]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	630/1000 Why? Has a fix available, CVSS 8.1	Internal Property Tampering SNYK-JS-BSON-6056525	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mongodb

The new version differs by 250 commits.

• 79da11f 3.1.3
• 337cb79 feat(core): update to mongodb-core 3.1.2
• ff5fafc refactor(topology-base): `getServer` => `selectServer`
• b33fc74 3.1.2
• 78f6977 fix(mongo_client): translate options for connectWithUrl
• 36e92f1 fix(db_ops): call collection.find() with correct parameters (#1795)
• 759dd85 fix(buffer): replace deprecated Buffer constructor
• cb9d915 docs(connect): remove references to MongoClient.connect
• b8d2f1d fix(teardown): properly destroy a topology when initial connect fails
• 64027e8 refactor(export): expose CommandCursor
• 6ef85c4 refactor(export): expose AggregationCursor
• 13d776f fix(cursor): set readPreference for cursor.count
• a5d0f1d feat(deprecation): wrap deprecated functions
• 4f907a0 feat(deprecation): create deprecation function
• 666b8fa refactor(bulk): Unify bulk operations
• a0d84f6 test(evergreen): adding evergreen config to native driver
• b8471f1 fix(collection): isCapped returns false instead of undefined
• 86344f4 fix(collection): ensure findAndModify always use readPreference primary
• c25c519 test(countDocuments): full test coverage for countDocuments
• 25ca557 docs(contributing): fix link to HISTORY.md
• 4395110 chore(MongoClient): add missing legacy option name on warning message
• 297d843 docs(sessions): updating docs for sessions
• 15dc808 fix(db_ops): fix two incorrectly named variables
• fca1185 fix(count-documents): return callback on error case

See the full diff

Package name: monk

The new version differs by 28 commits.

• 9c0e342 version 7.0.0
• 387150d Merge pull request #273 from mpangrazzi/f/mongo-3
• 5165a36 update findOneAndUpdate docs
• 47e376c handle better useNewUrlParser option
• 8487800 remove package-lock.json
• 84545be update node versions on travis CI build
• 65b6892 fix docs
• ff4f914 add a deprecation warning log on collection.group
• 1f3646b add a test for 'fields' options (will be deprecated)
• 39a3997 fix changelog link
• 8022099 update doc for findOneAndUpdate
• f592df4 updated docs for geoNear
• 7481e47 update types for geoNear
• bc7d904 handle deprecated geoNear command
• ae91063 pass always useNewUrlParser options on MongoClient connect()
• c52f595 update mongodb to 3.x
• 39228ea Merge pull request #270 from wolfejw86/master
• 8ac73a7 missed distinct
• 87a3ac3 added callback typings for all of ICollection
• ff99e06 formatting
• 4a478cb removed from original
• 92eea6b Merge branch 'master' of https://github.com/wolfejw86/monk
• 6c8caab added proper overload for findoneandupdate
• 39dbb43 Update index.d.ts

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.