Bump mongoose from 4.13.7 to 5.0.16

[dependabot-preview]

Bumps mongoose from 4.13.7 to 5.0.16.

Changelog

Sourced from mongoose's changelog.

5.0.16 / 2018-04-23

• docs(api): sort api methods based on their string property #6374 lineus
• docs(connection): fix typo in createCollection() #6370 mattc41190
• docs(document): remove vestigial reference to numAffected #6367 ekulabuhov
• docs(schema): fix typo #6366 dhritzkiv
• docs(schematypes): add missing minlength and maxlength docs #6365 treble-snake
• docs(queries): fix formatting #6360 treble-snake
• docs(api): add cursors to API docs #6353 #6344 lineus
• docs(aggregate): remove reference to non-existent .select() method #6346
• fix(update): handle required array with update validators and $pull #6341
• fix(update): avoid setting __v in findOneAndUpdate if it is $set #5973

5.0.15 / 2018-04-16

• fix: add ability for casting from number to decimal128 #6336 #6331 lineus
• docs(middleware): enumerate the ways to error out in a hook #6315
• fix(document): respect schema-level depopulate option for toObject() #6313
• fix: bump mongodb driver -> 3.0.6 #6310
• fix(number): check for valueOf() function to support Decimal.js #6306 #6299 lineus
• fix(query): run array setters on query if input value is an array #6277
• fix(versioning): don't require matching version when using array.pull() #6190
• fix(document): add toHexString() function so you don't need to check whether a path is populated to get an id #6115

5.0.14 / 2018-04-09

• fix(schema): clone aliases and alternative option syntax correctly
• fix(query): call utils.toObject in query.count like in query.find #6325 lineus
• docs(populate): add middleware examples #6320 BorntraegerMarc
• docs(compatibility): fix dead link #6319 lacivert
• docs(api): fix markdown parsing for parameters #6318 #6314 lineus
• fix(populate): handle space-delimited paths in array populate #6296 #6284 lineus
• fix(populate): support basic virtual populate underneath embedded discriminators #6273

5.0.13 / 2018-04-05

• docs(faq): add middleware to faq arrow function warning #6309 lineus
• docs(schema): add example to loadClass() docs #6308
• docs: clean up misc typos #6304 sfrieson
• fix(document): apply virtuals when calling toJSON() on a nested path #6294
• refactor(connection): use client.db() syntax rather than double-parsing the URI #6292 #6286
• docs: document new behavior of required validator for arrays #6288 daltones
• fix(schema): treat set() options as user-provided options #6274
• fix(schema): clone discriminators correctly #6274
• fix(update): make setDefaultsOnInsert not create subdoc if only default is id #6269
• docs(discriminator): clarify 3rd argument to Model.discriminator() #2596

5.0.12 / 2018-03-27

• docs(query): updating model name in query API docs #6280 lineus

... (truncated)

Commits

• 4703df3 chore: release 5.0.16
• a275a41 docs: fix typo re #6192
• 7bd9cba fix(update): handle required array with update validators and $pull
• 39c8368 test(update): repro #6341
• dfce9df docs(model): fix aggregate function re: #6346
• 61d0c33 Merge pull request #6374 from lineus/order-api-methods
• 00fdfce sort api method links based on their string
• dc7eff4 Merge pull request #6353 from lineus/docs-6344
• 99a471a Merge pull request #6370 from mattc41190/master
• 8426730 Merge pull request #6367 from ekulabuhov/patch-1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot ignore this [minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use [this|these] label[s] will set the current labels as the default for future PRs for this repo and language

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[dependabot-preview]

Superseded by #114.