Bump mongoose from 4.13.14 to 5.2.1

[dependabot-preview]

Bumps mongoose from 4.13.14 to 5.2.1.

Changelog

Sourced from mongoose's changelog.

5.2.1 / 2018-07-03

• fix(connection): allow setting the mongodb driver's useNewUrlParser option, default to false #6656 #6648 #6647
• fix(model): only warn on custom _id index if index only has _id key #6650

5.2.0 / 2018-07-02

• feat(model): add countDocuments() #6643
• feat(model): make ensureIndexes() fail if specifying an index on _id #6605
• feat(mongoose): add objectIdGetter option to remove ObjectId.prototype._id #6588
• feat: upgrade mongodb -> 3.1.0 for full MongoDB 4.0 support #6579
• feat(query): support runValidators as a global option #6578
• perf(schema): use WeakMap instead of array for schema stack #6503
• feat(model): decorate unique discriminator indexes with partialFilterExpressions #6347
• feat(model): add syncIndexes(), drops indexes that aren't in schema #6281
• feat(document): add default getter/setter if virtual doesn't have one #6262
• feat(discriminator): support discriminators on nested doc arrays #6202
• feat(update): add Query.prototype.set() #5770

5.1.8 / 2018-07-02

• fix: don't throw TypeError if calling save() after original save() failed with push() #6638 evanhenke
• fix(query): add explain() helper and don't hydrate explain output #6625
• docs(query): fix setOptions() lists #6624
• docs: add geojson docs #6607
• fix: bump mongodb -> 3.0.11 to avoid cyclic dependency error with retryWrites #6109

5.1.7 / 2018-06-26

• docs: add npm badge to readme #6623 VFedyk
• fix(document): don't throw parallel save error if post save hooks in parallel #6614 #6611 lineus
• fix(populate): allow dynamic ref to handle >1 model getModelsMapForPopulate #6613 #6612 jimmytsao
• fix(document): handle push() on triple nested document array #6602
• docs(validation): improve update validator doc headers #6577 joeytwiddle
• fix(document): handle document arrays in modifiedPaths() with includeChildren option #5904

5.1.6 / 2018-06-19

• fix: upgrade mongodb -> 3.0.10
• docs(model+document): clarify that save() returns undefined if passed a callback #6604 lineus
• fix(schema): apply alias when adding fields with .add() #6593
• docs: add full list of guides and streamline nav #6592
• docs(model): add projection option to findOneAndUpdate() #6590 lineus
• docs: support static JSDoc declaration #6584
• fix(query): use boolean casting logic for $exists #6581
• fix(query): cast all $text options to correct values #6581
• fix(model): add support synchronous pre hooks for createModel #6552 profbiss
• docs: add note about the applyPluginsToDiscriminators option #4965

5.1.5 / 2018-06-11

... (truncated)

Commits

• f7f55b0 chore: release 5.2.1
• ff08b9c fix(model): only warn on custom _id index if index only has _id key
• 2decc5b fix(connection): allow setting the mongodb driver's useNewUrlParser option, d...
• b2c1c6d chore: now working on 5.2.1
• d90ef00 Merge pull request #6652 from lineus/temp-fix-conn-issues
• a016a2f docs(model): add session to startSession() example
• 727eda4 dont use newUrlParser until next driver update
• d457cbe chore: release 5.2.0
• 5d730d4 Merge pull request #6600 from Automattic/5.2
• 985a845 feat(model): make ensureIndexes() fail if specifying an index on _id
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[dependabot-preview]

Superseded by #100.