Merge pull request #5307 from overleaf/jk-web-upgrade-nodemailer

[web] upgrade packages, fix security warnings

GitOrigin-RevId: d2d958bb5b39d879bdbb8b09242bb368cf4ada3e

services/web/package-lock.json

@@ -10600,6 +10600,14 @@
       "integrity": "sha512-TbH79tcyi9FHwbyboOKeRachRq63mSuWYXOflsNO9ZyE5ClQ/JaozNKl+aWUq87qPNsXasXxi2AbgfwIJ+8GQw==",
       "dev": true
     },
+    "@types/bson": {
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/@types/bson/-/bson-4.0.5.tgz",
+      "integrity": "sha512-vVLwMUqhYJSQ/WKcE60eFqcyuWse5fGH+NMAXHuKrUAPoryq3ATxk5o4bgYNtg5aOM4APVg7Hnb3ASqUYG0PKg==",
+      "requires": {
+        "@types/node": "*"
+      }
+    },
     "@types/color-convert": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/@types/color-convert/-/color-convert-2.0.0.tgz",
@@ -10816,6 +10824,15 @@
       "integrity": "sha512-tHq6qdbT9U1IRSGf14CL0pUlULksvY9OZ+5eEgl1N7t+OA3tGvNpxJCzuKQlsNgCVwbAs670L1vcVQi8j9HjnA==",
       "dev": true
     },
+    "@types/mongodb": {
+      "version": "3.6.20",
+      "resolved": "https://registry.npmjs.org/@types/mongodb/-/mongodb-3.6.20.tgz",
+      "integrity": "sha512-WcdpPJCakFzcWWD9juKoZbRtQxKIMYF/JIAM4JrNHrMcnJL6/a2NWjXxW7fo9hxboxxkg+icff8d7+WIEvKgYQ==",
+      "requires": {
+        "@types/bson": "*",
+        "@types/node": "*"
+      }
+    },
     "@types/node": {
       "version": "12.0.8",
       "resolved": "https://registry.npmjs.org/@types/node/-/node-12.0.8.tgz",
@@ -11531,11 +11548,6 @@
       "integrity": "sha512-aT6camzM4xEA54YVJYSqxz1kv4IHnQZRtThJJHhUMRExaU5spC7jX5ugSwTaTgJliIgs4VhZOk7htClvQ/LmRA==",
       "dev": true
     },
-    "addressparser": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/addressparser/-/addressparser-1.0.0.tgz",
-      "integrity": "sha512-saeGoN2FuFHdu3y89eXmk6M05KWluO12NTnxeOyTngNqqlI/zouEBlc/SUhNYiGPFPG3pnILWRSQxTVqt0loxg=="
-    },
     "after": {
       "version": "0.8.2",
       "resolved": "https://registry.npmjs.org/after/-/after-0.8.2.tgz",
@@ -14404,19 +14416,6 @@
       "resolved": "https://registry.npmjs.org/bufferedstream/-/bufferedstream-1.6.0.tgz",
       "integrity": "sha512-OHx+J1eEu0gsbtcRRY/87SslStAwgmeiDnMHz9f4CCKOU0dx/Lq5ztiU7NTJpTT9yAsvJJvWAZ7VPOovslPhfw=="
     },
-    "buildmail": {
-      "version": "3.3.2",
-      "resolved": "https://registry.npmjs.org/buildmail/-/buildmail-3.3.2.tgz",
-      "integrity": "sha512-csS5v/Pbq0PI2pp2+ogF46tQvjeTA9kaLOsOF1VqwwIiqcGhpGh2N9eZBol9YVC0GRWiDmk2COAbPsXTdUsbGw==",
-      "requires": {
-        "addressparser": "1.0.0",
-        "libbase64": "0.1.0",
-        "libmime": "2.0.0",
-        "libqp": "1.1.0",
-        "nodemailer-fetch": "1.2.1",
-        "nodemailer-shared": "1.0.3"
-      }
-    },
     "builtin-modules": {
       "version": "3.2.0",
       "resolved": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-3.2.0.tgz",
@@ -15500,7 +15499,8 @@
     "clone": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/clone/-/clone-1.0.2.tgz",
-      "integrity": "sha512-b2ijK6P2aNZYyFrb1B3a4kdAtaRueI+SpAKYNhR6i+R3xcF32vN1BLq8UoLU+L0NguGAg/9UQauaVOKrEij3sQ=="
+      "integrity": "sha512-b2ijK6P2aNZYyFrb1B3a4kdAtaRueI+SpAKYNhR6i+R3xcF32vN1BLq8UoLU+L0NguGAg/9UQauaVOKrEij3sQ==",
+      "dev": true
     },
     "clone-buffer": {
       "version": "1.0.0",
@@ -21689,9 +21689,9 @@
       "dev": true
     },
     "handlebars": {
-      "version": "4.7.6",
-      "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.6.tgz",
-      "integrity": "sha512-1f2BACcBfiwAfStCKZNrUCgqNZkGsAT7UM3kkYtXuLo0KnaVfjKOyf7PRzB6++aK9STyT1Pd2ZCPe3EGOXleXA==",
+      "version": "4.7.7",
+      "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.7.tgz",
+      "integrity": "sha512-aAcXm5OAfE/8IXkcZvCepKU3VzW1/39Fb5ZuqMtgI/hT8X2YgoMvBY5dLhq/cpOvw7Lk1nK/UF71aLG/ZnVYRA==",
       "requires": {
         "minimist": "^1.2.5",
         "neo-async": "^2.6.0",
@@ -24201,9 +24201,9 @@
       }
     },
     "kareem": {
-      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/kareem/-/kareem-2.3.1.tgz",
-      "integrity": "sha512-l3hLhffs9zqoDe8zjmb/mAN4B8VT3L56EUvKNqLFVs9YlFA+zx7ke1DO8STAdDyYNkeSo1nKmjuvQeI12So8Xw=="
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/kareem/-/kareem-2.3.2.tgz",
+      "integrity": "sha512-STHz9P7X2L4Kwn72fA4rGyqyXdmrMSdxqHx9IXon/FXluXieaFA6KJ2upcHAHxQPQ0LeM/OjLrhFxifHewOALQ=="
     },
     "karma": {
       "version": "5.0.4",
@@ -25089,33 +25089,6 @@
         "type-check": "~0.3.2"
       }
     },
-    "libbase64": {
-      "version": "0.1.0",
-      "resolved": "https://registry.npmjs.org/libbase64/-/libbase64-0.1.0.tgz",
-      "integrity": "sha512-B91jifmFw1DKEqEWstSpg1PbtUbBzR4yQAPT86kCQXBtud1AJVA+Z6RSklSrqmKe4q2eiEufgnhqJKPgozzfIQ=="
-    },
-    "libmime": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/libmime/-/libmime-2.0.0.tgz",
-      "integrity": "sha512-cY1UBYNYBfhoADleot3wBcnyhOUZuZHWBcfqD5x0GI21s0UlQhIkKLCEI4Mb537nSeyw6kAuQKEInUo1HLOUhQ==",
-      "requires": {
-        "iconv-lite": "0.4.13",
-        "libbase64": "0.1.0",
-        "libqp": "1.1.0"
-      },
-      "dependencies": {
-        "iconv-lite": {
-          "version": "0.4.13",
-          "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.13.tgz",
-          "integrity": "sha512-QwVuTNQv7tXC5mMWFX5N5wGjmybjNBBD8P3BReTkPmipoxTUFgWM2gXNvldHQr6T14DH0Dh6qBVg98iJt7u4mQ=="
-        }
-      }
-    },
-    "libqp": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/libqp/-/libqp-1.1.0.tgz",
-      "integrity": "sha512-4Rgfa0hZpG++t1Vi2IiqXG9Ad1ig4QTmtuZF946QJP4bPqOYC78ixUXgz5TW/wE7lNaNKlplSYTxQ+fR2KZ0EA=="
-    },
     "lines-and-columns": {
       "version": "1.1.6",
       "resolved": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.1.6.tgz",
@@ -25526,15 +25499,6 @@
         }
       }
     },
-    "mailcomposer": {
-      "version": "3.3.2",
-      "resolved": "https://registry.npmjs.org/mailcomposer/-/mailcomposer-3.3.2.tgz",
-      "integrity": "sha512-wkL+noKTl+Ty5vlvI04553vRbziXUoYrMQBcAZ4K4QjuIUXjEwkoZrs2OifwBTQypzrh2WQepU7GpruAbi/nnA==",
-      "requires": {
-        "buildmail": "3.3.2",
-        "libmime": "2.0.0"
-      }
-    },
     "make-dir": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz",
@@ -26630,32 +26594,98 @@
       }
     },
     "mongoose": {
-      "version": "5.10.9",
-      "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-5.10.9.tgz",
-      "integrity": "sha512-7dkr1d6Uyk87hELzoc6B7Zo7kkPTx8rKummk51Y0je2V2Ttsw0KFPwTp1G8JIbBta7Wpw8j15PJi0d33Ode2nw==",
+      "version": "5.13.9",
+      "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-5.13.9.tgz",
+      "integrity": "sha512-JbLw5ie0LJxm7V9LoNxRY//6cyFJf0cOpON2TWUWvF9pabil6ArfECL3xHV2N+mwwO4gXiIa+c0pwTzDUVTgqw==",
       "requires": {
+        "@types/bson": "1.x || 4.0.x",
+        "@types/mongodb": "^3.5.27",
         "bson": "^1.1.4",
-        "kareem": "2.3.1",
-        "mongodb": "3.6.2",
+        "kareem": "2.3.2",
+        "mongodb": "3.6.11",
         "mongoose-legacy-pluralize": "1.0.2",
-        "mpath": "0.7.0",
-        "mquery": "3.2.2",
+        "mpath": "0.8.4",
+        "mquery": "3.2.5",
         "ms": "2.1.2",
+        "optional-require": "1.0.x",
         "regexp-clone": "1.0.0",
         "safe-buffer": "5.2.1",
-        "sift": "7.0.1",
+        "sift": "13.5.2",
         "sliced": "1.0.1"
       },
       "dependencies": {
+        "bl": {
+          "version": "2.2.1",
+          "resolved": "https://registry.npmjs.org/bl/-/bl-2.2.1.tgz",
+          "integrity": "sha512-6Pesp1w0DEX1N550i/uGV/TqucVL4AM/pgThFSN/Qq9si1/DF9aIHs1BxD8V/QU0HoeHO6cQRTAuYnLPKq1e4g==",
+          "requires": {
+            "readable-stream": "^2.3.5",
+            "safe-buffer": "^5.1.1"
+          }
+        },
+        "isarray": {
+          "version": "1.0.0",
+          "resolved": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
+          "integrity": "sha1-u5NdSFgsuhaMBoNJV6VKPgcSTxE="
+        },
+        "mongodb": {
+          "version": "3.6.11",
+          "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-3.6.11.tgz",
+          "integrity": "sha512-4Y4lTFHDHZZdgMaHmojtNAlqkvddX2QQBEN0K//GzxhGwlI9tZ9R0vhbjr1Decw+TF7qK0ZLjQT292XgHRRQgw==",
+          "requires": {
+            "bl": "^2.2.1",
+            "bson": "^1.1.4",
+            "denque": "^1.4.1",
+            "optional-require": "^1.0.3",
+            "safe-buffer": "^5.1.2",
+            "saslprep": "^1.0.0"
+          }
+        },
         "ms": {
           "version": "2.1.2",
           "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
           "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
         },
+        "readable-stream": {
+          "version": "2.3.7",
+          "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.7.tgz",
+          "integrity": "sha512-Ebho8K4jIbHAxnuxi7o42OrZgF/ZTNcsZj6nRKyUmkhLFq8CHItp/fy6hQZuZmP/n3yZ9VBUbp4zz/mX8hmYPw==",
+          "requires": {
+            "core-util-is": "~1.0.0",
+            "inherits": "~2.0.3",
+            "isarray": "~1.0.0",
+            "process-nextick-args": "~2.0.0",
+            "safe-buffer": "~5.1.1",
+            "string_decoder": "~1.1.1",
+            "util-deprecate": "~1.0.1"
+          },
+          "dependencies": {
+            "safe-buffer": {
+              "version": "5.1.2",
+              "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
+              "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g=="
+            }
+          }
+        },
         "safe-buffer": {
           "version": "5.2.1",
           "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
           "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ=="
+        },
+        "string_decoder": {
+          "version": "1.1.1",
+          "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
+          "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==",
+          "requires": {
+            "safe-buffer": "~5.1.0"
+          },
+          "dependencies": {
+            "safe-buffer": {
+              "version": "5.1.2",
+              "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
+              "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g=="
+            }
+          }
         }
       }
     },
@@ -26717,14 +26747,14 @@
       }
     },
     "mpath": {
-      "version": "0.7.0",
-      "resolved": "https://registry.npmjs.org/mpath/-/mpath-0.7.0.tgz",
-      "integrity": "sha512-Aiq04hILxhz1L+f7sjGyn7IxYzWm1zLNNXcfhDtx04kZ2Gk7uvFdgZ8ts1cWa/6d0TQmag2yR8zSGZUmp0tFNg=="
+      "version": "0.8.4",
+      "resolved": "https://registry.npmjs.org/mpath/-/mpath-0.8.4.tgz",
+      "integrity": "sha512-DTxNZomBcTWlrMW76jy1wvV37X/cNNxPW1y2Jzd4DZkAaC5ZGsm8bfGfNOthcDuRJujXLqiuS6o3Tpy0JEoh7g=="
     },
     "mquery": {
-      "version": "3.2.2",
-      "resolved": "https://registry.npmjs.org/mquery/-/mquery-3.2.2.tgz",
-      "integrity": "sha512-XB52992COp0KP230I3qloVUbkLUxJIu328HBP2t2EsxSFtf4W1HPSOBWOXf1bqxK4Xbb66lfMJ+Bpfd9/yZE1Q==",
+      "version": "3.2.5",
+      "resolved": "https://registry.npmjs.org/mquery/-/mquery-3.2.5.tgz",
+      "integrity": "sha512-VjOKHHgU84wij7IUoZzFRU07IAxd5kWJaDmyUzQlbjHjyoeK5TNeeo8ZsFDtTYnSgpW6n/nMNIHvE3u8Lbrf4A==",
       "requires": {
         "bluebird": "3.5.1",
         "debug": "3.1.0",
@@ -27201,31 +27231,9 @@
       "integrity": "sha512-uW7fodD6pyW2FZNZnp/Z3hvWKeEW1Y8R1+1CnErE8cXFXzl5blBOoVB41CvMer6P6Q0S5FXDwcHgFd1Wj0U9zg=="
     },
     "nodemailer": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-2.1.0.tgz",
-      "integrity": "sha512-hj7/X2U9kebbDlZnWMO3qPC7wtw+pOBsdAteIsNXU8KDHFx2q1YYL1yYBtobD3R1j1i49zaaw72KlJ2/kwx9Cw==",
-      "requires": {
-        "libmime": "2.0.0",
-        "mailcomposer": "3.3.2",
-        "nodemailer-direct-transport": "2.0.1",
-        "nodemailer-shared": "1.0.3",
-        "nodemailer-smtp-pool": "2.1.0",
-        "nodemailer-smtp-transport": "2.0.1"
-      }
-    },
-    "nodemailer-direct-transport": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/nodemailer-direct-transport/-/nodemailer-direct-transport-2.0.1.tgz",
-      "integrity": "sha512-XfUpwbJVzrwLp/pzu5p/uEwrEhR2VWK7fwPORZjUFSfjdZfBwEZF2mjqq3I4G/CHKtWvP4WbErGgAIT6H67vZA==",
-      "requires": {
-        "nodemailer-shared": "1.0.3",
-        "smtp-connection": "2.0.1"
-      }
-    },
-    "nodemailer-fetch": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/nodemailer-fetch/-/nodemailer-fetch-1.2.1.tgz",
-      "integrity": "sha512-AEzZo7PfmeqbP2+rEbwOSFK6d/FI/ONwNc/1oeLCAsUcc9O/IzlOXen52oP7GzBCsxc2sHV3OsrCJxFdsHe+WQ=="
+      "version": "6.6.5",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.6.5.tgz",
+      "integrity": "sha512-C/v856DBijUzHcHIgGpQoTrfsH3suKIRAGliIzCstatM2cAa+MYX3LuyCrABiO/cdJTxgBBHXxV1ztiqUwst5A=="
     },
     "nodemailer-mandrill-transport": {
       "version": "1.2.0",
@@ -27252,41 +27260,6 @@
         "aws-sdk": "^2.2.36"
       }
     },
-    "nodemailer-shared": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/nodemailer-shared/-/nodemailer-shared-1.0.3.tgz",
-      "integrity": "sha512-LOZRxXzJ1yjiBJ/Wp/r+aCYpqwGOQIib+vd7aBvTWkePbSB1XEgFjRx2ZAfOM69Y9CyUVdlhUaMhknQlK3fbxA==",
-      "requires": {
-        "nodemailer-fetch": "1.2.1"
-      }
-    },
-    "nodemailer-smtp-pool": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/nodemailer-smtp-pool/-/nodemailer-smtp-pool-2.1.0.tgz",
-      "integrity": "sha512-Q2xtPL3XjZYz3O4zV1FeP03YyFUgdcmzj38RVvdcasGQ8Idr0lh+Y9Kd65G0PTeSTAPPvBqTMuDmpOLZBqN12w==",
-      "requires": {
-        "clone": "1.0.2",
-        "nodemailer-shared": "1.0.3",
-        "nodemailer-wellknown": "0.1.7",
-        "smtp-connection": "2.0.1"
-      }
-    },
-    "nodemailer-smtp-transport": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/nodemailer-smtp-transport/-/nodemailer-smtp-transport-2.0.1.tgz",
-      "integrity": "sha512-sm4DzPPimBRfTn7rvP52dqhdS7qFrJhnfZZ4jtc+L60h8leJkKCiwQvci7W885x0awliyhfPRiZfFGSGUmCeGQ==",
-      "requires": {
-        "clone": "1.0.2",
-        "nodemailer-shared": "1.0.3",
-        "nodemailer-wellknown": "0.1.7",
-        "smtp-connection": "2.0.1"
-      }
-    },
-    "nodemailer-wellknown": {
-      "version": "0.1.7",
-      "resolved": "https://registry.npmjs.org/nodemailer-wellknown/-/nodemailer-wellknown-0.1.7.tgz",
-      "integrity": "sha512-dMCMmm51qQCvOkw4QQ5KWUrWWdNgOY92BlfPbBcEnS+G/ZMH/Fd2w+1A11YW3k9EvzyppoKZflouZTG9q4TozQ=="
-    },
     "nodemon": {
       "version": "2.0.6",
       "resolved": "https://registry.npmjs.org/nodemon/-/nodemon-2.0.6.tgz",
@@ -28222,6 +28195,11 @@
         "last-call-webpack-plugin": "^3.0.0"
       }
     },
+    "optional-require": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/optional-require/-/optional-require-1.0.3.tgz",
+      "integrity": "sha512-RV2Zp2MY2aeYK5G+B/Sps8lW5NHAzE5QClbFP15j+PWmP+T9PxlJXBOOLoSAdgwFvS4t0aMR4vpedMkbHfh0nA=="
+    },
     "optionator": {
       "version": "0.8.2",
       "resolved": "https://registry.npmjs.org/optionator/-/optionator-0.8.2.tgz",
@@ -33524,9 +33502,9 @@
       }
     },
     "sift": {
-      "version": "7.0.1",
-      "resolved": "https://registry.npmjs.org/sift/-/sift-7.0.1.tgz",
-      "integrity": "sha512-oqD7PMJ+uO6jV9EQCl0LrRw1OwsiPsiFQR5AR30heR+4Dl7jBBbDLnNvWiak20tzZlSE1H7RB30SX/1j/YYT7g=="
+      "version": "13.5.2",
+      "resolved": "https://registry.npmjs.org/sift/-/sift-13.5.2.tgz",
+      "integrity": "sha512-+gxdEOMA2J+AI+fVsCqeNn7Tgx3M9ZN9jdi95939l1IJ8cZsqS8sqpJyOkic2SJk+1+98Uwryt/gL6XDaV+UZA=="
     },
     "signal-exit": {
       "version": "3.0.2",
@@ -33616,21 +33594,13 @@
     "sliced": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/sliced/-/sliced-1.0.1.tgz",
-      "integrity": "sha512-VZBmZP8WU3sMOZm1bdgTadsQbcscK0UM8oKxKVBs4XAhUo2Xxzm/OFMGBkPusxw9xL3Uy8LrzEqGqJhclsr0yA=="
+      "integrity": "sha1-CzpmK10Ewxd7GSa+qCsD+Dei70E="
     },
     "slugify": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/slugify/-/slugify-1.4.0.tgz",
       "integrity": "sha512-FtLNsMGBSRB/0JOE2A0fxlqjI6fJsgHGS13iTuVT28kViI4JjUiNqp/vyis0ZXYcMnpR3fzGNkv+6vRlI2GwdQ=="
     },
-    "smtp-connection": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/smtp-connection/-/smtp-connection-2.0.1.tgz",
-      "integrity": "sha512-9Ppzrl/pGJ43Ew46bClJyfcqCsiuwhsak0QTy53cGuGBJ8vIaXLPEYmurI4FgOVXvLyIVMQzl7lrHJruDHZifg==",
-      "requires": {
-        "nodemailer-shared": "1.0.3"
-      }
-    },
     "snakeize": {
       "version": "0.1.0",
       "resolved": "https://registry.npmjs.org/snakeize/-/snakeize-0.1.0.tgz",
@@ -36497,13 +36467,10 @@
       "integrity": "sha512-8Y75pvTYkLJW2hWQHXxoqRgV7qb9B+9vFEtidML+7koHUFapnVJAZ6cKs+Qjz5Aw3aZWHMC6u0wJE3At+nSGwA=="
     },
     "uglify-js": {
-      "version": "3.9.1",
-      "resolved": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.9.1.tgz",
-      "integrity": "sha512-JUPoL1jHsc9fOjVFHdQIhqEEJsQvfKDjlubcCilu8U26uZ73qOg8VsN8O1jbuei44ZPlwL7kmbAdM4tzaUvqnA==",
-      "optional": true,
-      "requires": {
-        "commander": "~2.20.3"
-      }
+      "version": "3.14.2",
+      "resolved": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.14.2.tgz",
+      "integrity": "sha512-rtPMlmcO4agTUfz10CbgJ1k6UAoXM2gWb3GoMPPZB/+/Ackf8lNWk11K4rYi2D0apgoFRLtQOZhb+/iGNJq26A==",
+      "optional": true
     },
     "uid-safe": {
       "version": "2.1.4",

services/web/package.json

@@ -101,7 +101,7 @@
     "fs-extra": "^4.0.2",
     "fuse.js": "^3.0.0",
     "globby": "^5.0.0",
-    "handlebars": "^4.7.6",
+    "handlebars": "^4.7.7",
     "helmet": "^3.22.0",
     "http-proxy": "^1.18.1",
     "i18next": "^19.6.3",
@@ -124,10 +124,10 @@
     "mmmagic": "^0.5.3",
     "moment": "^2.24.0",
     "mongodb": "^3.6.0",
-    "mongoose": "^5.10.7",
+    "mongoose": "^5.13.9",
     "multer": "https://github.com/overleaf/multer/archive/7a2928d7ea2da02dd92888ea1c9ba5704e07aeeb.tar.gz",
     "nocache": "^2.1.0",
-    "nodemailer": "2.1.0",
+    "nodemailer": "^6.6.5",
     "nodemailer-mandrill-transport": "^1.2.0",
     "nodemailer-ses-transport": "^1.5.1",
     "nvd3": "^1.8.6",

services/web/test/unit/src/Collaborators/CollaboratorsHandlerTests.js

@@ -285,13 +285,24 @@ describe('CollaboratorsHandler', function () {
     })
 
     describe('with null addingUserId', function () {
-      beforeEach(function () {
-        this.CollaboratorsHandler.promises.addUserIdToProject(
+      beforeEach(async function () {
+        this.project.collaberator_refs = []
+        this.ProjectMock.expects('updateOne')
+          .withArgs(
+            {
+              _id: this.project._id,
+            },
+            {
+              $addToSet: { collaberator_refs: this.userId },
+            }
+          )
+          .chain('exec')
+          .resolves()
+        await this.CollaboratorsHandler.promises.addUserIdToProject(
           this.project._id,
           null,
           this.userId,
-          'readAndWrite',
-          this.callback
+          'readAndWrite'
         )
       })