[dependabot]

Bumps sift from 17.1.3 to 17.1.4.

Changelog

Sourced from sift's changelog.

17.1.4

• Fix crcn/sift.js#276: ignore query keys and options inherited from a polluted Object.prototype, so pollution elsewhere in a process can no longer inject a string $where into queries (code execution) or break them (#277, thanks @​sheanming-agmo). A string $where in the query itself still runs as code: see the README before passing untrusted queries to sift.
• Fix crcn/sift.js#273: $ne, $in, $nin and $exists on paths through arrays. Results change where 17.1.3 was wrong, e.g. { "a.b": { $nin: [2] } } no longer matches { a: [{ b: 1 }, { b: 2 }] }, and { "a.b": { $exists: false } } no longer matches arrays whose elements have b. $exists also treats 1/0 like true/false.
• Fix crcn/sift.js#272: string $where where process isn't defined (browsers).
• Fix crcn/sift.js#275: types for union-typed and readonly array properties.
• crcn/sift.js#274: document the compare option for custom equality.
• Fix $elemMatch only checking the first candidate array, e.g. each a[i].b for "a.b".
• Known issue: null checks ($ne: null, $in: [null], $exists: false) on an index path below an array of documents, e.g. { "orders.items.0": { $ne: null } }, can differ from MongoDB.

17.0.0

• Fix crcn/sift.js#243
• Fix crcn/sift.js#242

16.0.0

• Fix crcn/sift.js#242
• Fix crcn/sift.js#243

15.1.0

• Fix crcn/sift.js#239

15.0.0

• Fix crcn/sift.js#236

14.0.3

• Fix crcn/sift.js#231

14.0.0

• Fix crcn/sift.js#227
• Fix crcn/sift.js#228

13.1.0

• Added stronger types for queries: crcn/sift.js#197

13.0.0

• Fix behavior discrepancy with Mongo: crcn/sift.js#196

12.0.0

• Fix bug where $elemMatch tested objects: e.g: sift({a: {$elemMatch: 1}})({ a: { b: 1}}). $elemMatch now expects arrays based on Mongodb syntax. E.g: sift({a: {$elemMatch: 1}})({ a: { b: 1}})

... (truncated)

Commits

• c79c9fd 17.1.4
• 14aadbd Merge pull request #279 from crcn/fix/open-issues
• 3119527 changelog: 17.1.4
• 63d3f16 review follow-ups: option reads, $nin.next arity, compare docs
• 5147249 fix: $elemMatch checks every candidate array
• 810e6b1 types: accept readonly arrays in queries
• 3042db2 docs: custom equality (#274) and $where with untrusted queries (#276)
• 2331ef3 fix #276: ignore values that only come from a polluted Object.prototype
• 2c860cd fix #275: types for union-typed properties
• d16af62 fix #273: $ne, $in, $nin and $exists on paths through arrays
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)