Upgrade to mongoose 7 (#14971)

* remove some unused dependencies * update mongoose version * make common tests pass * Make unit tests pass * make api v3 integration tests pass * fix lint issues * fix issue with package-lock * fix(lint): we don't need no .js * fix(lint): update to latest config-habitrpg * chore(npm): update package locks * fix(test): replace deprecated fn * chore(package): update eslint-habitrpg again * fix(lint): server linting * fix(lint): client linting * fix(client): correct mangled common imports * chore(npm): update package-locks * fix(lint): punctuation, module --------- Co-authored-by: SabreCat <sabrecat@gmail.com> Co-authored-by: SabreCat <sabe@habitica.com>
2025-12-14 13:17:24 +01:00 · 2024-01-16 22:18:47 +01:00
parent d0e4b533e3
commit f8d315ff6e
189 changed files with 2645 additions and 1423 deletions
--- a/.eslintrc.js
+++ b/.eslintrc.js
@@ -1,9 +1,10 @@
+/* eslint-disable import/no-commonjs */
 module.exports = {
  root: true,
  extends: [
-    'habitrpg/lib/node'
+    'habitrpg/lib/node',
  ],
  rules: {
    'import/no-extraneous-dependencies': 'off',
-  }
-}
+  },
+};
--- a/gulp/gulp-console.js
+++ b/gulp/gulp-console.js
@@ -2,7 +2,6 @@ import mongoose from 'mongoose';
 import nconf from 'nconf';
 import repl from 'repl';
 import gulp from 'gulp';
-import logger from '../website/server/libs/logger';
 import {
  getDevelopmentConnectionUrl,
  getDefaultConnectionOptions,
@@ -39,10 +38,6 @@ const improveRepl = context => {
  mongoose.connect(
    connectionUrl,
    mongooseOptions,
-    err => {
-      if (err) throw err;
-      logger.info('Connected with Mongoose');
-    },
  );
 };

--- a/gulp/gulp-tests.js
+++ b/gulp/gulp-tests.js
@@ -59,13 +59,15 @@ gulp.task('test:prepare:mongo', cb => {
  const mongooseOptions = getDefaultConnectionOptions();
  const connectionUrl = getDevelopmentConnectionUrl(TEST_DB_URI);

-  mongoose.connect(connectionUrl, mongooseOptions, err => {
-    if (err) return cb(`Unable to connect to mongo database. Are you sure it's running? \n\n${err}`);
-    return mongoose.connection.dropDatabase(err2 => {
-      if (err2) return cb(err2);
-      return mongoose.connection.close(cb);
+  mongoose.connect(connectionUrl, mongooseOptions)
+    .then(() => mongoose.connection.dropDatabase())
+    .then(() => mongoose.connection.close()).then(() => {
+      cb();
+    })
+    .catch(err => {
+      if (err) return cb(`Unable to connect to mongo database. Are you sure it's running? \n\n${err}`);
+      throw err;
    });
-  });
 });

 gulp.task('test:prepare:server', gulp.series('test:prepare:mongo', done => {
@@ -116,8 +118,10 @@ gulp.task('test:common:safe', gulp.series('test:prepare:build', cb => {
  pipe(runner);
 }));

-gulp.task('test:content', gulp.series('test:prepare:build',
-  runInChildProcess(CONTENT_TEST_COMMAND, LIMIT_MAX_BUFFER_OPTIONS)));
+gulp.task('test:content', gulp.series(
+  'test:prepare:build',
+  runInChildProcess(CONTENT_TEST_COMMAND, LIMIT_MAX_BUFFER_OPTIONS),
+));

 gulp.task('test:content:clean', cb => {
  pipe(exec(testBin(CONTENT_TEST_COMMAND), LIMIT_MAX_BUFFER_OPTIONS, () => cb()));
@@ -142,16 +146,20 @@ gulp.task('test:content:safe', gulp.series('test:prepare:build', cb => {
  pipe(runner);
 }));

-gulp.task('test:api:unit:run',
-  runInChildProcess(integrationTestCommand('test/api/unit', 'coverage/api-unit')));
+gulp.task(
+  'test:api:unit:run',
+  runInChildProcess(integrationTestCommand('test/api/unit', 'coverage/api-unit')),
+);

 gulp.task('test:api:unit:watch', () => gulp.watch(['website/server/libs/*', 'test/api/unit/**/*', 'website/server/controllers/**/*'], gulp.series('test:api:unit:run', done => done())));

-gulp.task('test:api-v3:integration', gulp.series('test:prepare:mongo',
+gulp.task('test:api-v3:integration', gulp.series(
+  'test:prepare:mongo',
  runInChildProcess(
    integrationTestCommand('test/api/v3/integration', 'coverage/api-v3-integration'),
    LIMIT_MAX_BUFFER_OPTIONS,
-  )));
+  ),
+));

 gulp.task('test:api-v3:integration:watch', () => gulp.watch([
  'website/server/controllers/api-v3/**/*', 'common/script/ops/*', 'website/server/libs/*.js',
@@ -164,11 +172,13 @@ gulp.task('test:api-v3:integration:separate-server', runInChildProcess(
  'LOAD_SERVER=0',
 ));

-gulp.task('test:api-v4:integration', gulp.series('test:prepare:mongo',
+gulp.task('test:api-v4:integration', gulp.series(
+  'test:prepare:mongo',
  runInChildProcess(
    integrationTestCommand('test/api/v4', 'api-v4-integration'),
    LIMIT_MAX_BUFFER_OPTIONS,
-  )));
+  ),
+));

 gulp.task('test:api-v4:integration:separate-server', runInChildProcess(
  'mocha test/api/v4 --recursive --require ./test/helpers/start-server',
--- a/migrations/.eslintrc.js
+++ b/migrations/.eslintrc.js
@@ -3,6 +3,6 @@ module.exports = {
  root: false,
  rules: {
    'no-console': 0,
-    'no-use-before-define': ['error', { functions: false }]
-  }
-}
+    'no-use-before-define': ['error', { functions: false }],
+  },
+};
--- a/migrations/groups/habitrpg-jackalopes.js
+++ b/migrations/groups/habitrpg-jackalopes.js
@@ -21,12 +21,14 @@ async function handOutJackalopes () {
    if (user.party._id) groupList.push(user.party._id);
    groupList = groupList.concat(user.guilds);

-    const subscribedGroup = await Group.findOne({
-      _id: { $in: groupList },
-      'purchased.plan.planId': 'group_monthly',
-      'purchased.plan.dateTerminated': null,
-    },
-    { _id: 1 });
+    const subscribedGroup = await Group.findOne(
+      {
+        _id: { $in: groupList },
+        'purchased.plan.planId': 'group_monthly',
+        'purchased.plan.dateTerminated': null,
+      },
+      { _id: 1 },
+    );

    if (subscribedGroup) {
      User.update({ _id: user._id }, { $set: { 'items.mounts.Jackalope-RoyalPurple': true } }).exec();
--- a/migrations/users/achievement-restore.js
+++ b/migrations/users/achievement-restore.js
@@ -51,7 +51,8 @@ function getAchievementUpdate (newUser, oldUser) {
  // Rebirth level
  if (achievementsUpdate.rebirthLevel) {
    achievementsUpdate.rebirthLevel = Math.max(
-      achievementsUpdate.rebirthLevel, oldAchievements.rebirthLevel,
+      achievementsUpdate.rebirthLevel,
+      oldAchievements.rebirthLevel,
    );
  } else if (oldAchievements.rebirthLevel) {
    achievementsUpdate.rebirthLevel = oldAchievements.rebirthLevel;
--- a/migrations/users/bulk-email.js
+++ b/migrations/users/bulk-email.js
@@ -16,6 +16,7 @@ async function updateUser (user) {

  if (count % progressCount === 0) {
    console.warn(`${count} ${user._id}`);
+    // eslint-disable-next-line no-promise-executor-return
    await new Promise(resolve => setTimeout(resolve, 5000));
  }

--- a/package-lock.json
+++ b/package-lock.json
--- a/package.json
+++ b/package.json
@@ -24,9 +24,9 @@
    "csv-stringify": "^5.6.5",
    "cwait": "^1.1.1",
    "domain-middleware": "~0.1.0",
-    "eslint": "6.8.0",
-    "eslint-config-habitrpg": "6.2.1",
-    "eslint-plugin-mocha": "5.3.0",
+    "eslint": "^8.55.0",
+    "eslint-config-habitrpg": "^6.2.3",
+    "eslint-plugin-mocha": "^5.0.0",
    "express": "^4.18.2",
    "express-basic-auth": "^1.2.1",
    "express-validator": "^5.2.0",
@@ -36,11 +36,9 @@
    "gulp-babel": "^8.0.0",
    "gulp-imagemin": "^7.1.0",
    "gulp-nodemon": "^2.5.0",
-    "nodemon": "^2.0.20",
    "gulp.spritesmith": "^6.13.0",
    "habitica-markdown": "^3.0.0",
    "helmet": "^4.6.0",
-    "image-size": "^1.0.2",
    "in-app-purchase": "^1.11.3",
    "js2xmlparser": "^5.0.0",
    "jsonwebtoken": "^9.0.2",
@@ -50,10 +48,11 @@
    "method-override": "^3.0.0",
    "moment": "^2.29.4",
    "moment-recur": "^1.0.7",
-    "mongoose": "^5.13.20",
+    "mongoose": "^7.6.3",
    "morgan": "^1.10.0",
    "nconf": "^0.12.1",
    "node-gcm": "^1.0.5",
+    "nodemon": "^2.0.20",
    "on-headers": "^1.0.2",
    "passport": "^0.5.3",
    "passport-facebook": "^3.0.0",
@@ -64,7 +63,6 @@
    "ps-tree": "^1.0.0",
    "rate-limiter-flexible": "^2.4.2",
    "redis": "^3.1.2",
-    "regenerator-runtime": "^0.13.11",
    "remove-markdown": "^0.5.0",
    "rimraf": "^3.0.2",
    "short-uuid": "^4.2.2",
@@ -74,7 +72,6 @@
    "useragent": "^2.1.9",
    "uuid": "^9.0.0",
    "validator": "^13.11.0",
-    "vinyl-buffer": "^1.0.1",
    "winston": "^3.10.0",
    "winston-loggly-bulk": "^3.3.0",
    "xml2js": "^0.6.2"
--- a/scripts/gdpr-delete-users.js
+++ b/scripts/gdpr-delete-users.js
@@ -44,6 +44,7 @@ async function deleteHabiticaData (user, email) {
    { _id: user._id },
    { $set: set },
  );
+  // eslint-disable-next-line no-promise-executor-return
  await new Promise(resolve => setTimeout(resolve, 1000));
  const response = await axios.delete(
    `${BASE_URL}/api/v3/user`,
@@ -96,6 +97,7 @@ async function processEmailAddress (email) {
    return console.log(`No users found with email address ${email}`);
  }

+  // eslint-disable-next-line no-promise-executor-return
  await new Promise(resolve => setTimeout(resolve, 1000));
  return Promise.all(users.map(user => (async () => {
    await deleteAmplitudeData(user._id, email); // eslint-disable-line no-await-in-loop
--- a/test/.eslintrc.js
+++ b/test/.eslintrc.js
@@ -1,3 +1,5 @@
+/* eslint-disable import/no-commonjs */
+
 module.exports = {
  extends: [
    'habitrpg/lib/mocha',
@@ -7,9 +9,9 @@ module.exports = {
    chai: true,
    expect: true,
    sinon: true,
-    sandbox: true
+    sandbox: true,
  },
  rules: {
    'import/no-extraneous-dependencies': 'off',
-  }
-}
+  },
+};
--- a/test/api/unit/libs/bug-report.test.js
+++ b/test/api/unit/libs/bug-report.test.js
@@ -26,9 +26,7 @@ describe('bug-report', () => {
      _id: userId,
    });

-    const result = await bugReportLogic(
-      user, userMail, userMessage, userAgent,
-    );
+    const result = await bugReportLogic(user, userMail, userMessage, userAgent);

    expect(emailLib.sendTxn).to.be.called;
    expect(result).to.deep.equal({
--- a/test/api/unit/libs/password.test.js
+++ b/test/api/unit/libs/password.test.js
@@ -227,7 +227,7 @@ describe('Password Utilities', () => {
        expiresAt: moment().subtract({ minutes: 1 }),
      }));

-      await user.update({
+      await user.updateOne({
        'auth.local.passwordResetCode': code,
      });

@@ -264,7 +264,7 @@ describe('Password Utilities', () => {
        expiresAt: moment().add({ days: 1 }),
      }));

-      await user.update({
+      await user.updateOne({
        'auth.local.passwordResetCode': 'invalid',
      });

@@ -280,7 +280,7 @@ describe('Password Utilities', () => {
        expiresAt: moment().add({ days: 1 }),
      }));

-      await user.update({
+      await user.updateOne({
        'auth.local.passwordResetCode': code,
      });

--- a/test/api/unit/libs/payments/apple.test.js
+++ b/test/api/unit/libs/payments/apple.test.js
@@ -342,10 +342,12 @@ describe('Apple Payments', () => {
            }]);
          sub = common.content.subscriptionBlocks[newOption.subKey];

-          await applePayments.subscribe(user,
+          await applePayments.subscribe(
+            user,
            receipt,
            headers,
-            nextPaymentProcessing);
+            nextPaymentProcessing,
+          );

          expect(iapSetupStub).to.be.calledOnce;
          expect(iapValidateStub).to.be.calledOnce;
@@ -387,10 +389,12 @@ describe('Apple Payments', () => {
            }]);
          sub = common.content.subscriptionBlocks[newOption.subKey];

-          await applePayments.subscribe(user,
+          await applePayments.subscribe(
+            user,
            receipt,
            headers,
-            nextPaymentProcessing);
+            nextPaymentProcessing,
+          );

          expect(iapSetupStub).to.be.calledOnce;
          expect(iapValidateStub).to.be.calledOnce;
@@ -517,9 +521,7 @@ describe('Apple Payments', () => {

        const secondUser = new User();
        await secondUser.save();
-        await expect(applePayments.subscribe(
-          secondUser, receipt, headers, nextPaymentProcessing,
-        ))
+        await expect(applePayments.subscribe(secondUser, receipt, headers, nextPaymentProcessing))
          .to.eventually.be.rejected.and.to.eql({
            httpCode: 401,
            name: 'NotAuthorized',
@@ -559,9 +561,7 @@ describe('Apple Payments', () => {

        const thirdUser = new User();
        await thirdUser.save();
-        await expect(applePayments.subscribe(
-          thirdUser, receipt, headers, nextPaymentProcessing,
-        ))
+        await expect(applePayments.subscribe(thirdUser, receipt, headers, nextPaymentProcessing))
          .to.eventually.be.rejected.and.to.eql({
            httpCode: 401,
            name: 'NotAuthorized',
--- a/test/api/unit/libs/payments/payments.test.js
+++ b/test/api/unit/libs/payments/payments.test.js
@@ -1382,18 +1382,6 @@ describe('payments/index', () => {
        expect(user.purchased.plan.mysteryItems).to.have.a.lengthOf(1);
        expect(user.purchased.plan.mysteryItems).to.include('head_mystery_201605');
      });
-
-      it('does not award mystery item when user already has the item in the mystery box', async () => {
-        user.purchased.plan.mysteryItems = [mayMysteryItem];
-
-        sandbox.spy(user.purchased.plan.mysteryItems, 'push');
-
-        data = { paymentMethod: 'PaymentMethod', user, sub: { key: 'basic_3mo' } };
-        await api.createSubscription(data);
-
-        expect(user.purchased.plan.mysteryItems.push).to.be.calledOnce;
-        expect(user.purchased.plan.mysteryItems.push).to.be.calledWith('head_mystery_201605');
-      });
    });
  });

@@ -1599,10 +1587,10 @@ describe('payments/index', () => {
      it('sends gem donation message in each participant\'s language', async () => {
        // TODO using english for both users because other languages are not loaded
        // for api.buyGems
-        await recipient.update({
+        await recipient.updateOne({
          'preferences.language': 'en',
        });
-        await user.update({
+        await user.updateOne({
          'preferences.language': 'en',
        });
        await api.buyGems(data);
--- a/test/api/unit/middlewares/cronMiddleware.js
+++ b/test/api/unit/middlewares/cronMiddleware.js
@@ -53,11 +53,9 @@ describe('cron middleware', () => {
      cronMiddleware(req, res, err => {
        if (err) return reject(err);

-        Tasks.Task.findOne({ _id: task }, (secondErr, taskFound) => {
-          if (secondErr) return reject(err);
-          expect(secondErr).to.not.exist;
-          expect(taskFound).to.not.exist;
-          return resolve();
+        Tasks.Task.findOne({ _id: task }).then(foundTask => {
+          expect(foundTask).to.not.exist;
+          resolve();
        });

        return null;
@@ -78,10 +76,8 @@ describe('cron middleware', () => {
    await new Promise((resolve, reject) => {
      cronMiddleware(req, res, err => {
        if (err) return reject(err);
-        Tasks.Task.findOne({ _id: task }, (secondErr, taskFound) => {
-          if (secondErr) return reject(secondErr);
-          expect(secondErr).to.not.exist;
-          expect(taskFound).to.exist;
+        Tasks.Task.findOne({ _id: task }).then(foundTask => {
+          expect(foundTask).to.exist;
          return resolve();
        });
        return null;
@@ -103,10 +99,8 @@ describe('cron middleware', () => {
    await new Promise((resolve, reject) => {
      cronMiddleware(req, res, err => {
        if (err) return reject(err);
-        Tasks.Task.findOne({ _id: task }, (secondErr, taskFound) => {
-          if (secondErr) return reject(secondErr);
-          expect(secondErr).to.not.exist;
-          expect(taskFound).to.not.exist;
+        Tasks.Task.findOne({ _id: task }).then(foundTask => {
+          expect(foundTask).to.not.exist;
          return resolve();
        });
        return null;
@@ -170,8 +164,7 @@ describe('cron middleware', () => {
    await new Promise((resolve, reject) => {
      cronMiddleware(req, res, err => {
        if (err) return reject(err);
-        return User.findOne({ _id: user._id }, (secondErr, updatedUser) => {
-          if (secondErr) return reject(secondErr);
+        return User.findOne({ _id: user._id }).then(updatedUser => {
          expect(updatedUser.stats.hp).to.be.lessThan(hpBefore);
          return resolve();
        });
@@ -188,8 +181,7 @@ describe('cron middleware', () => {
    await new Promise((resolve, reject) => {
      cronMiddleware(req, res, err => {
        if (err) return reject(err);
-        return Tasks.Task.findOne({ _id: todo._id }, (secondErr, todoFound) => {
-          if (secondErr) return reject(secondErr);
+        return Tasks.Task.findOne({ _id: todo._id }).then(todoFound => {
          expect(todoFound.value).to.be.lessThan(todoValueBefore);
          return resolve();
        });
@@ -224,8 +216,7 @@ describe('cron middleware', () => {
    await new Promise((resolve, reject) => {
      cronMiddleware(req, res, err => {
        if (err) return reject(err);
-        return User.findOne({ _id: user._id }, (secondErr, updatedUser) => {
-          if (secondErr) return reject(secondErr);
+        return User.findOne({ _id: user._id }).then(updatedUser => {
          expect(updatedUser.stats.hp).to.be.lessThan(hpBefore);
          return resolve();
        });
@@ -238,7 +229,7 @@ describe('cron middleware', () => {
    await user.save();

    const updatedUser = user.toObject();
-    updatedUser.nMatched = 0;
+    updatedUser.matchedCount = 0;

    sandbox.spy(cronLib, 'recoverCron');

@@ -269,7 +260,7 @@ describe('cron middleware', () => {
  it('cronSignature less than an hour ago should error', async () => {
    user.lastCron = moment(new Date()).subtract({ days: 2 });
    const now = new Date();
-    await User.update({
+    await User.updateOne({
      _id: user._id,
    }, {
      $set: {
@@ -291,7 +282,7 @@ describe('cron middleware', () => {
  it('cronSignature longer than an hour ago should allow cron', async () => {
    user.lastCron = moment(new Date()).subtract({ days: 2 });
    const now = new Date();
-    await User.update({
+    await User.updateOne({
      _id: user._id,
    }, {
      $set: {
--- a/test/api/unit/models/group.test.js
+++ b/test/api/unit/models/group.test.js
@@ -1358,7 +1358,7 @@ describe('Group Model', () => {

    describe('#sendChat', () => {
      beforeEach(() => {
-        sandbox.spy(User, 'update');
+        sandbox.spy(User, 'updateOne');
        sandbox.spy(User, 'updateMany');
      });

@@ -1450,7 +1450,7 @@ describe('Group Model', () => {

        party.sendChat({ message: 'message' });

-        expect(User.update).to.not.be.called;
+        expect(User.updateMany).to.not.be.called;
      });

      it('skips sending messages to the tavern', () => {
@@ -1458,7 +1458,7 @@ describe('Group Model', () => {

        party.sendChat({ message: 'message' });

-        expect(User.update).to.not.be.called;
+        expect(User.updateMany).to.not.be.called;
      });
    });

--- a/test/api/unit/models/newsPost.js
+++ b/test/api/unit/models/newsPost.js
@@ -103,7 +103,7 @@ describe('NewsPost Model', () => {

    beforeEach(async () => {
      // Delete all existing posts from the database
-      await NewsPost.remove();
+      await NewsPost.deleteMany();
    });

    afterEach(() => {
@@ -116,7 +116,7 @@ describe('NewsPost Model', () => {
        _id: v4(), publishDate: new Date(), published: true,
      };
      NewsPost.updateLastNewsPost(previousPost);
-      intervalId = refreshNewsPost(50); // refreshes every 50ms
+      intervalId = refreshNewsPost(100); // refreshes every 100ms

      await sleep(0.1); // wait 100ms to make sure the new post has a more recent publishDate
      const newPost = await NewsPost.create({
--- a/test/api/unit/models/task.test.js
+++ b/test/api/unit/models/task.test.js
@@ -221,7 +221,8 @@ describe('Task Model', () => {

      it('returns task by alias', async () => {
        const foundTasks = await Tasks.Task.findMultipleByIdOrAlias(
-          [taskWithAlias.alias], user._id,
+          [taskWithAlias.alias],
+          user._id,
        );

        expect(foundTasks[0].text).to.eql(taskWithAlias.text);
@@ -229,7 +230,8 @@ describe('Task Model', () => {

      it('returns multiple tasks', async () => {
        const foundTasks = await Tasks.Task.findMultipleByIdOrAlias(
-          [taskWithAlias.alias, secondTask._id], user._id,
+          [taskWithAlias.alias, secondTask._id],
+          user._id,
        );

        expect(foundTasks.length).to.eql(2);
@@ -239,7 +241,8 @@ describe('Task Model', () => {

      it('returns a task only once if searched by both id and alias', async () => {
        const foundTasks = await Tasks.Task.findMultipleByIdOrAlias(
-          [taskWithAlias.alias, taskWithAlias._id], user._id,
+          [taskWithAlias.alias, taskWithAlias._id],
+          user._id,
        );

        expect(foundTasks.length).to.eql(1);
--- a/test/api/unit/models/user.test.js
+++ b/test/api/unit/models/user.test.js
@@ -188,7 +188,7 @@ describe('User Model', () => {
    it('removes invalid tags when loading the user', async () => {
      let user = new User();
      await user.save();
-      await user.update({
+      await user.updateOne({
        $set: {
          tags: [
            null, // invalid, not an object
@@ -212,7 +212,7 @@ describe('User Model', () => {
    it('removes invalid push devices when loading the user', async () => {
      let user = new User();
      await user.save();
-      await user.update({
+      await user.updateOne({
        $set: {
          pushDevices: [
            null, // invalid, not an object
@@ -236,7 +236,7 @@ describe('User Model', () => {
    it('removes duplicate push devices when loading the user', async () => {
      let user = new User();
      await user.save();
-      await user.update({
+      await user.updateOne({
        $set: {
          pushDevices: [
            { type: 'android', regId: '1234' },
@@ -258,7 +258,7 @@ describe('User Model', () => {
    it('removes invalid notifications when loading the user', async () => {
      let user = new User();
      await user.save();
-      await user.update({
+      await user.updateOne({
        $set: {
          notifications: [
            null, // invalid, not an object
@@ -284,7 +284,7 @@ describe('User Model', () => {
    it('removes multiple NEW_CHAT_MESSAGE for the same group', async () => {
      let user = new User();
      await user.save();
-      await user.update({
+      await user.updateOne({
        $set: {
          notifications: [
            {
--- a/test/api/v3/integration/challenges/DELETE-challenges_challengeId.test.js
+++ b/test/api/v3/integration/challenges/DELETE-challenges_challengeId.test.js
@@ -87,7 +87,7 @@ describe('DELETE /challenges/:challengeId', () => {
      const testTask = _.find(tasks, task => task.text === taskText);

      expect(testTask.challenge.broken).to.eql('CHALLENGE_DELETED');
-      expect(testTask.challenge.winner).to.be.null;
+      expect(testTask.challenge.winner).to.be.undefined;
    });
  });
 });
--- a/test/api/v3/integration/challenges/GET-challenges_challengeId_export_csv.test.js
+++ b/test/api/v3/integration/challenges/GET-challenges_challengeId_export_csv.test.js
@@ -74,7 +74,7 @@ describe('GET /challenges/:challengeId/export/csv', () => {
  });

  it('should successfully return when it contains erroneous residue user data', async () => {
-    await members[0].update({ challenges: [] });
+    await members[0].updateOne({ challenges: [] });
    const res = await members[1].get(`/challenges/${challenge._id}/export/csv`);
    const sortedMembers = _.sortBy([members[1], members[2], groupLeader], '_id');
    const splitRes = res.split('\n');
--- a/test/api/v3/integration/challenges/GET-challenges_group_groupid.test.js
+++ b/test/api/v3/integration/challenges/GET-challenges_group_groupid.test.js
@@ -186,7 +186,7 @@ describe('GET challenges/groups/:groupId', () => {

    before(async () => {
      user = await generateUser();
-      await user.update({ balance: 0.5 });
+      await user.updateOne({ balance: 0.5 });
      tavern = await user.get(`/groups/${TAVERN_ID}`);

      challenge = await generateChallenge(user, tavern, { prize: 1 });
@@ -269,7 +269,7 @@ describe('GET challenges/groups/:groupId', () => {
      let officialChallenge; let unofficialChallenges;

      before(async () => {
-        await user.update({
+        await user.updateOne({
          'permissions.challengeAdmin': true,
          balance: 3,
        });
--- a/test/api/v3/integration/challenges/GET-challenges_user.test.js
+++ b/test/api/v3/integration/challenges/GET-challenges_user.test.js
@@ -68,7 +68,7 @@ describe('GET challenges/user', () => {

      challenge = await generateChallenge(user, group);
      challenge2 = await generateChallenge(user, group);
-      await user.update({ balance: 0.25 });
+      await user.updateOne({ balance: 0.25 });
      publicChallenge = await generateChallenge(user, tavern, { prize: 1 });

      await member.post(`/challenges/${challenge._id}/join`);
@@ -234,7 +234,7 @@ describe('GET challenges/user', () => {
        upgradeToGroupPlan: true,
      }));

-      await user.update({
+      await user.updateOne({
        'permissions.challengeAdmin': true,
      });

@@ -308,7 +308,7 @@ describe('GET challenges/user', () => {
      guild = group;
      member = members[0]; // eslint-disable-line prefer-destructuring

-      await user.update({ balance: 20 });
+      await user.updateOne({ balance: 20 });

      for (let i = 0; i < 11; i += 1) {
        let challenge = await generateChallenge(user, group); // eslint-disable-line
--- a/test/api/v3/integration/challenges/POST-challenge_flag.test.js
+++ b/test/api/v3/integration/challenges/POST-challenge_flag.test.js
@@ -41,7 +41,7 @@ describe('POST /challenges/:challengeId/flag', () => {
  });

  it('flags a challenge with a higher count when from an admin', async () => {
-    await user.update({ 'contributor.admin': true });
+    await user.updateOne({ 'contributor.admin': true });

    const flagResult = await user.post(`/challenges/${challenge._id}/flag`);

--- a/test/api/v3/integration/challenges/POST-challenge_flag_clear.test.js
+++ b/test/api/v3/integration/challenges/POST-challenge_flag_clear.test.js
@@ -23,7 +23,7 @@ describe('POST /challenges/:challengeId/clearflags', () => {
    admin = groupLeader;
    [nonAdmin] = members;

-    await admin.update({ 'permissions.moderator': true });
+    await admin.updateOne({ 'permissions.moderator': true });

    challenge = await generateChallenge(admin, group);
    await admin.post(`/challenges/${challenge._id}/flag`);
--- a/test/api/v3/integration/challenges/POST-challenges.test.js
+++ b/test/api/v3/integration/challenges/POST-challenges.test.js
@@ -79,7 +79,7 @@ describe('POST /challenges', () => {
      });

      groupLeader = await populatedGroup.groupLeader.sync();
-      await groupLeader.update({ permissions: {} });
+      await groupLeader.updateOne({ permissions: {} });
      group = populatedGroup.group;
      groupMember = populatedGroup.members[0]; // eslint-disable-line prefer-destructuring
    });
@@ -177,7 +177,7 @@ describe('POST /challenges', () => {
      const oldUserBalance = groupLeader.balance;
      const prize = 8;

-      await group.update({ balance: 0 });
+      await group.updateOne({ balance: 0 });
      await groupLeader.post('/challenges', {
        group: group._id,
        name: 'Test Challenge',
@@ -202,7 +202,7 @@ describe('POST /challenges', () => {
    });

    it('sets challenge as official if created by admin and official flag is set', async () => {
-      await groupLeader.update({
+      await groupLeader.updateOne({
        permissions: {
          challengeAdmin: true,
        },
--- a/test/api/v3/integration/challenges/POST-challenges_challengeId_winner_winnerId.test.js
+++ b/test/api/v3/integration/challenges/POST-challenges_challengeId_winner_winnerId.test.js
@@ -128,10 +128,10 @@ describe('POST /challenges/:challengeId/winner/:winnerId', () => {
      const oldBalance = winningUser.balance;
      const oldLeaderBalance = (await groupLeader.sync()).balance;

-      await winningUser.update({
+      await winningUser.updateOne({
        'purchased.plan.customerId': 'group-plan',
      });
-      await group.update({
+      await group.updateOne({
        'leaderOnly.getGems': true,
        'purchased.plan.customerId': 123,
      });
--- a/test/api/v3/integration/chat/DELETE-chat_id.test.js
+++ b/test/api/v3/integration/chat/DELETE-chat_id.test.js
@@ -28,7 +28,7 @@ describe('DELETE /groups/:groupId/chat/:chatId', () => {
    message = message.message;
    userThatDidNotCreateChat = members[0]; // eslint-disable-line prefer-destructuring
    admin = members[1]; // eslint-disable-line prefer-destructuring
-    await admin.update({ permissions: { moderator: true } });
+    await admin.updateOne({ permissions: { moderator: true } });
  });

  context('Chat errors', () => {
--- a/test/api/v3/integration/chat/POST-chat.flag.test.js
+++ b/test/api/v3/integration/chat/POST-chat.flag.test.js
@@ -27,11 +27,11 @@ describe('POST /chat/:chatId/flag', () => {
    }));

    [admin, anotherUser, newUser, userToDelete] = members;
-    await user.update({ permissions: {} });
-    await admin.update({ permissions: { moderator: true } });
-    await anotherUser.update({ 'auth.timestamps.created': moment().subtract(USER_AGE_FOR_FLAGGING + 1, 'days').toDate() });
-    await newUser.update({ 'auth.timestamps.created': moment().subtract(1, 'days').toDate() });
-    await userToDelete.update({
+    await user.updateOne({ permissions: {} });
+    await admin.updateOne({ permissions: { moderator: true } });
+    await anotherUser.updateOne({ 'auth.timestamps.created': moment().subtract(USER_AGE_FOR_FLAGGING + 1, 'days').toDate() });
+    await newUser.updateOne({ 'auth.timestamps.created': moment().subtract(1, 'days').toDate() });
+    await userToDelete.updateOne({
      'auth.timestamps.created': moment().subtract(1, 'days').toDate(),
      'purchased.plan.dateTerminated': moment().subtract(1, 'minutes').toDate(),
    });
--- a/test/api/v3/integration/chat/POST-chat.like.test.js
+++ b/test/api/v3/integration/chat/POST-chat.like.test.js
@@ -27,7 +27,7 @@ describe('POST /chat/:chatId/like', () => {
    }));

    [anotherUser] = members;
-    await anotherUser.update({ 'auth.timestamps.created': new Date('2022-01-01') });
+    await anotherUser.updateOne({ 'auth.timestamps.created': new Date('2022-01-01') });
  });

  it('Returns an error when chat message is not found', async () => {
--- a/test/api/v3/integration/chat/POST-chat.test.js
+++ b/test/api/v3/integration/chat/POST-chat.test.js
@@ -30,14 +30,14 @@ describe('POST /chat', () => {
      upgradeToGroupPlan: true,
    });
    user = groupLeader;
-    await user.update({
+    await user.updateOne({
      'contributor.level': SPAM_MIN_EXEMPT_CONTRIB_LEVEL,
      'auth.timestamps.created': new Date('2022-01-01'),
    }); // prevent tests accidentally throwing messageGroupChatSpam
    groupWithChat = group;
    [member, additionalMember] = members;
-    await member.update({ 'auth.timestamps.created': new Date('2022-01-01') });
-    await additionalMember.update({ 'auth.timestamps.created': new Date('2022-01-01') });
+    await member.updateOne({ 'auth.timestamps.created': new Date('2022-01-01') });
+    await additionalMember.updateOne({ 'auth.timestamps.created': new Date('2022-01-01') });
  });

  it('Returns an error when no message is provided', async () => {
@@ -77,11 +77,11 @@ describe('POST /chat', () => {

  describe('mute user', () => {
    afterEach(() => {
-      member.update({ 'flags.chatRevoked': false });
+      member.updateOne({ 'flags.chatRevoked': false });
    });

    it('does not error when chat privileges are revoked when sending a message to a private guild', async () => {
-      await member.update({
+      await member.updateOne({
        'flags.chatRevoked': true,
      });

@@ -101,7 +101,7 @@ describe('POST /chat', () => {
      });

      const privatePartyMemberWithChatsRevoked = members[0];
-      await privatePartyMemberWithChatsRevoked.update({
+      await privatePartyMemberWithChatsRevoked.updateOne({
        'flags.chatRevoked': true,
        'auth.timestamps.created': new Date('2022-01-01'),
      });
@@ -120,11 +120,11 @@ describe('POST /chat', () => {

    afterEach(() => {
      sandbox.restore();
-      member.update({ 'flags.chatShadowMuted': false });
+      member.updateOne({ 'flags.chatShadowMuted': false });
    });

    it('creates a chat with zero flagCount when sending a message to a private guild', async () => {
-      await member.update({
+      await member.updateOne({
        'flags.chatShadowMuted': true,
      });

@@ -145,7 +145,7 @@ describe('POST /chat', () => {
      });

      const userWithChatShadowMuted = members[0];
-      await userWithChatShadowMuted.update({
+      await userWithChatShadowMuted.updateOne({
        'flags.chatShadowMuted': true,
        'auth.timestamps.created': new Date('2022-01-01'),
      });
@@ -167,7 +167,7 @@ describe('POST /chat', () => {
        },
        members: 1,
      });
-      await members[0].update({ 'auth.timestamps.created': new Date('2022-01-01') });
+      await members[0].updateOne({ 'auth.timestamps.created': new Date('2022-01-01') });

      const message = await members[0].post(`/groups/${group._id}/chat`, { message: testBannedWordMessage });

@@ -189,7 +189,7 @@ describe('POST /chat', () => {

    afterEach(() => {
      sandbox.restore();
-      user.update({ 'flags.chatRevoked': false });
+      user.updateOne({ 'flags.chatRevoked': false });
    });

    it('allows slurs in private groups', async () => {
@@ -201,7 +201,7 @@ describe('POST /chat', () => {
        },
        members: 1,
      });
-      await members[0].update({ 'auth.timestamps.created': new Date('2022-01-01') });
+      await members[0].updateOne({ 'auth.timestamps.created': new Date('2022-01-01') });

      const message = await members[0].post(`/groups/${group._id}/chat`, { message: testSlurMessage });

@@ -210,14 +210,14 @@ describe('POST /chat', () => {
  });

  it('errors when user account is too young', async () => {
-    await user.update({ 'auth.timestamps.created': new Date() });
+    await user.updateOne({ 'auth.timestamps.created': new Date() });
    await expect(user.post(`/groups/${groupWithChat._id}/chat`, { message: 'hi im new' }))
      .to.eventually.be.rejected.and.eql({
        code: 400,
        error: 'BadRequest',
        message: t('chatTemporarilyUnavailable'),
      });
-    await user.update({ 'auth.timestamps.created': new Date('2022-01-01') });
+    await user.updateOne({ 'auth.timestamps.created': new Date('2022-01-01') });
  });

  it('creates a chat', async () => {
@@ -258,7 +258,7 @@ describe('POST /chat', () => {

  it('chat message with mentions - mention link should not count towards 3000 chars limit', async () => {
    const memberUsername = 'memberUsername';
-    await member.update({ 'auth.local.username': memberUsername });
+    await member.updateOne({ 'auth.local.username': memberUsername });

    const messageWithMentions = `hi @${memberUsername} 123456789
     123456789 123456789 123456789 123456789 123456789 123456789 89 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 123456789 12345678 END.`;
@@ -278,7 +278,7 @@ describe('POST /chat', () => {
    const mount = 'test-mount';
    const pet = 'test-pet';
    const style = 'test-style';
-    await user.update({
+    await user.updateOne({
      'items.currentMount': mount,
      'items.currentPet': pet,
      'preferences.style': style,
@@ -308,7 +308,7 @@ describe('POST /chat', () => {
  });

  it('creates costume to user styles', async () => {
-    await user.update({ 'preferences.costume': true });
+    await user.updateOne({ 'preferences.costume': true });

    const message = await user.post(`/groups/${groupWithChat._id}/chat`, { message: testMessage });

@@ -323,7 +323,7 @@ describe('POST /chat', () => {
      tier: 800,
      tokensApplied: true,
    };
-    await user.update({
+    await user.updateOne({
      backer: backerInfo,
    });

@@ -375,7 +375,7 @@ describe('POST /chat', () => {

  context('chat notifications', () => {
    beforeEach(() => {
-      member.update({ newMessages: {}, notifications: [] });
+      member.updateOne({ newMessages: {}, notifications: [] });
    });

    it('notifies other users of new messages for a guild', async () => {
--- a/test/api/v3/integration/chat/POST-groups_id_chat_id_clear_flags.test.js
+++ b/test/api/v3/integration/chat/POST-groups_id_chat_id_clear_flags.test.js
@@ -28,8 +28,8 @@ describe('POST /groups/:id/chat/:id/clearflags', () => {
    groupWithChat = group;
    author = groupLeader;
    [nonAdmin, admin] = members;
-    await nonAdmin.update({ 'auth.timestamps.created': moment().subtract(USER_AGE_FOR_FLAGGING + 1, 'days').toDate() });
-    await admin.update({ 'permissions.moderator': true });
+    await nonAdmin.updateOne({ 'auth.timestamps.created': moment().subtract(USER_AGE_FOR_FLAGGING + 1, 'days').toDate() });
+    await admin.updateOne({ 'permissions.moderator': true });

    message = await author.post(`/groups/${groupWithChat._id}/chat`, { message: 'Some message' });
    message = message.message;
@@ -71,7 +71,7 @@ describe('POST /groups/:id/chat/:id/clearflags', () => {
        members: 2,
      });

-      await members[0].update({ 'auth.timestamps.created': new Date('2022-01-01') });
+      await members[0].updateOne({ 'auth.timestamps.created': new Date('2022-01-01') });
      let privateMessage = await members[0].post(`/groups/${group._id}/chat`, { message: 'Some message' });
      privateMessage = privateMessage.message;

@@ -104,7 +104,7 @@ describe('POST /groups/:id/chat/:id/clearflags', () => {
      const member = members[0];

      // make member that can use skills
-      await member.update({
+      await member.updateOne({
        'stats.lvl': 100,
        'stats.mp': 400,
        'stats.class': 'wizard',
--- a/test/api/v3/integration/coupons/GET-coupons.test.js
+++ b/test/api/v3/integration/coupons/GET-coupons.test.js
@@ -24,7 +24,7 @@ describe('GET /coupons/', () => {
  });

  it('should return the coupons in CSV format ordered by creation date', async () => {
-    await user.update({
+    await user.updateOne({
      'permissions.coupons': true,
    });

--- a/test/api/v3/integration/coupons/POST-coupons_generate_event.test.js
+++ b/test/api/v3/integration/coupons/POST-coupons_generate_event.test.js
@@ -19,7 +19,7 @@ describe('POST /coupons/generate/:event', () => {
  });

  it('returns an error if user has no coupons permission', async () => {
-    await user.update({
+    await user.updateOne({
      'permissions.coupons': false,
    });

@@ -47,7 +47,7 @@ describe('POST /coupons/generate/:event', () => {
  });

  it('should generate coupons', async () => {
-    await user.update({
+    await user.updateOne({
      'permissions.coupons': true,
    });

--- a/test/api/v3/integration/debug/POST-debug_quest-progress.test.js
+++ b/test/api/v3/integration/debug/POST-debug_quest-progress.test.js
@@ -24,7 +24,7 @@ describe('POST /debug/quest-progress', () => {
  });

  it('increases boss quest progress by 1000', async () => {
-    await user.update({
+    await user.updateOne({
      'party.quest.key': 'whale',
    });

@@ -36,7 +36,7 @@ describe('POST /debug/quest-progress', () => {
  });

  it('increases collection quest progress by 300 items', async () => {
-    await user.update({
+    await user.updateOne({
      'party.quest.key': 'evilsanta2',
    });

--- a/test/api/v3/integration/groups/GET-groups.test.js
+++ b/test/api/v3/integration/groups/GET-groups.test.js
@@ -37,7 +37,7 @@ describe('GET /groups', () => {
      upgradeToGroupPlan: true,
    }));
    [user] = members;
-    await user.update({ balance: 4 });
+    await user.updateOne({ balance: 4 });

    ({ group: secondGroup, groupLeader: secondLeader } = await createAndPopulateGroup({
      groupDetails: {
--- a/test/api/v3/integration/groups/GET-groups_id.test.js
+++ b/test/api/v3/integration/groups/GET-groups_id.test.js
@@ -153,7 +153,7 @@ describe('GET /groups/:id', () => {
    it('removes non-existent guild from user\'s guild list', async () => {
      const guildId = generateUUID();

-      await user.update({
+      await user.updateOne({
        guilds: [guildId, generateUUID()],
      });

@@ -173,7 +173,7 @@ describe('GET /groups/:id', () => {
    it('removes non-existent party from user\'s party object', async () => {
      const partyId = generateUUID();

-      await user.update({
+      await user.updateOne({
        party: { _id: partyId },
      });

@@ -290,7 +290,7 @@ describe('GET /groups/:id', () => {

      beforeEach(async () => {
        [admin] = members;
-        await admin.update({ permissions: { moderator: true } });
+        await admin.updateOne({ permissions: { moderator: true } });
      });

      it('includes all messages', async () => {
--- a/test/api/v3/integration/groups/POST-groups.test.js
+++ b/test/api/v3/integration/groups/POST-groups.test.js
@@ -110,7 +110,7 @@ describe('POST /group', () => {
    });

    it('creates a party when the user has no chat privileges', async () => {
-      await user.update({ 'flags.chatRevoked': true });
+      await user.updateOne({ 'flags.chatRevoked': true });
      const party = await user.post('/groups', {
        name: partyName,
        type: partyType,
@@ -120,7 +120,7 @@ describe('POST /group', () => {
    });

    it('does not require gems to create a party', async () => {
-      await user.update({ balance: 0 });
+      await user.updateOne({ balance: 0 });

      const party = await user.post('/groups', {
        name: partyName,
--- a/test/api/v3/integration/groups/POST-groups_groupId_join.test.js
+++ b/test/api/v3/integration/groups/POST-groups_groupId_join.test.js
@@ -78,7 +78,7 @@ describe('POST /group/:groupId/join', () => {
      });

      it('does not increment basilist quest count to inviter with basilist when joining a guild', async () => {
-        await user.update({ 'items.quests.basilist': 1 });
+        await user.updateOne({ 'items.quests.basilist': 1 });

        await invitedUser.post(`/groups/${guild._id}/join`);

@@ -146,7 +146,7 @@ describe('POST /group/:groupId/join', () => {
      });

      it('Issue #12291: accepting a redundant party invite will let the user stay in the party', async () => {
-        await invitedUser.update({
+        await invitedUser.updateOne({
          'party._id': party._id,
        });
        await expect(invitedUser.get('/user')).to.eventually.have.nested.property('party._id', party._id);
@@ -193,7 +193,7 @@ describe('POST /group/:groupId/join', () => {
      });

      it('increments basilist quest item count to inviter when joining a party', async () => {
-        await user.update({ 'items.quests.basilist': 1 });
+        await user.updateOne({ 'items.quests.basilist': 1 });

        await invitedUser.post(`/groups/${party._id}/join`);

@@ -201,7 +201,7 @@ describe('POST /group/:groupId/join', () => {
      });

      it('invites joining member to active quest', async () => {
-        await user.update({
+        await user.updateOne({
          [`items.quests.${PET_QUEST}`]: 1,
        });
        await user.post(`/groups/${party._id}/quests/invite/${PET_QUEST}`);
--- a/test/api/v3/integration/groups/POST-groups_groupId_leave.test.js
+++ b/test/api/v3/integration/groups/POST-groups_groupId_leave.test.js
@@ -30,7 +30,7 @@ describe('POST /groups/:groupId/leave', () => {

      [member] = members;
      memberCount = groupToLeave.memberCount;
-      await leader.update({ 'auth.timestamps.created': new Date('2022-01-01') });
+      await leader.updateOne({ 'auth.timestamps.created': new Date('2022-01-01') });
    });

    it('prevents non members from leaving', async () => {
@@ -135,7 +135,7 @@ describe('POST /groups/:groupId/leave', () => {
      [member] = members;
      [invitedUser] = invitees;
      memberCount = groupToLeave.memberCount;
-      await leader.update({ 'auth.timestamps.created': new Date('2022-01-01') });
+      await leader.updateOne({ 'auth.timestamps.created': new Date('2022-01-01') });
    });

    it('prevents non members from leaving', async () => {
@@ -317,7 +317,7 @@ describe('POST /groups/:groupId/leave', () => {
          upgradeToGroupPlan: true,
        }));
        [member] = members;
-        await member.update({
+        await member.updateOne({
          'purchased.plan.extraMonths': extraMonths,
        });
      });
--- a/test/api/v3/integration/groups/POST-groups_id_removeMember.test.js
+++ b/test/api/v3/integration/groups/POST-groups_id_removeMember.test.js
@@ -212,7 +212,7 @@ describe('POST /groups/:groupId/removeMember/:memberId', () => {

    it('removes user from quest when removing user from party after quest starts', async () => {
      const petQuest = 'whale';
-      await partyLeader.update({
+      await partyLeader.updateOne({
        [`items.quests.${petQuest}`]: 1,
      });

@@ -234,7 +234,7 @@ describe('POST /groups/:groupId/removeMember/:memberId', () => {

    it('removes user from quest when removing user from party before quest starts', async () => {
      const petQuest = 'whale';
-      await partyLeader.update({
+      await partyLeader.updateOne({
        [`items.quests.${petQuest}`]: 1,
      });
      await partyInvitedUser.post(`/groups/${party._id}/join`);
@@ -257,7 +257,7 @@ describe('POST /groups/:groupId/removeMember/:memberId', () => {

    it('prevents user from being removed if they are the quest owner', async () => {
      const petQuest = 'whale';
-      await partyMember.update({
+      await partyMember.updateOne({
        [`items.quests.${petQuest}`]: 1,
      });

--- a/test/api/v3/integration/groups/POST-groups_invite.test.js
+++ b/test/api/v3/integration/groups/POST-groups_invite.test.js
@@ -49,7 +49,7 @@ describe('Post /groups/:groupId/invite', () => {
    });

    it('returns error when recipient has blocked the senders', async () => {
-      const inviterNoBlocks = await inviter.update({ 'inbox.blocks': [] });
+      const inviterNoBlocks = await inviter.updateOne({ 'inbox.blocks': [] });
      const userWithBlockedInviter = await generateUser({ 'inbox.blocks': [inviter._id] });
      await expect(inviterNoBlocks.post(`/groups/${group._id}/invite`, {
        usernames: [userWithBlockedInviter.auth.local.lowerCaseUsername],
@@ -107,7 +107,7 @@ describe('Post /groups/:groupId/invite', () => {

  describe('user id invites', () => {
    it('returns an error when inviter has no chat privileges', async () => {
-      const inviterMuted = await inviter.update({ 'flags.chatRevoked': true });
+      const inviterMuted = await inviter.updateOne({ 'flags.chatRevoked': true });
      const userToInvite = await generateUser();
      await expect(inviterMuted.post(`/groups/${group._id}/invite`, {
        uuids: [userToInvite._id],
@@ -197,7 +197,7 @@ describe('Post /groups/:groupId/invite', () => {
    });

    it('returns error when recipient has blocked the senders', async () => {
-      const inviterNoBlocks = await inviter.update({ 'inbox.blocks': [] });
+      const inviterNoBlocks = await inviter.updateOne({ 'inbox.blocks': [] });
      const userWithBlockedInviter = await generateUser({ 'inbox.blocks': [inviter._id] });
      await expect(inviterNoBlocks.post(`/groups/${group._id}/invite`, {
        uuids: [userWithBlockedInviter._id],
@@ -269,7 +269,7 @@ describe('Post /groups/:groupId/invite', () => {
    const testInvite = { name: 'test', email: 'test@habitica.com' };

    it('returns an error when inviter has no chat privileges', async () => {
-      const inviterMuted = await inviter.update({ 'flags.chatRevoked': true });
+      const inviterMuted = await inviter.updateOne({ 'flags.chatRevoked': true });
      await expect(inviterMuted.post(`/groups/${group._id}/invite`, {
        emails: [testInvite],
        inviter: 'inviter name',
@@ -439,7 +439,7 @@ describe('Post /groups/:groupId/invite', () => {

  describe('party invites', () => {
    it('returns an error when inviter has no chat privileges', async () => {
-      const inviterMuted = await inviter.update({ 'flags.chatRevoked': true });
+      const inviterMuted = await inviter.updateOne({ 'flags.chatRevoked': true });
      const userToInvite = await generateUser();
      await expect(inviterMuted.post(`/groups/${group._id}/invite`, {
        uuids: [userToInvite._id],
--- a/test/api/v3/integration/groups/PUT-groups.test.js
+++ b/test/api/v3/integration/groups/PUT-groups.test.js
@@ -170,7 +170,7 @@ describe('PUT /group', () => {
      },
      upgradeToGroupPlan: true,
    });
-    await groupLeader.update({ permissions: {} });
+    await groupLeader.updateOne({ permissions: {} });

    const updateGroupDetails = {
      id: group._id,
--- a/test/api/v3/integration/members/POST-members_memberId_flag.js
+++ b/test/api/v3/integration/members/POST-members_memberId_flag.js
@@ -69,8 +69,6 @@ describe('POST /members/:memberId/flag', () => {
      await reporter.post(`/members/${target._id}/flag`);
      const updatedTarget = await admin.get(`/hall/heroes/${target._id}`);
      expect(updatedTarget.profile.flags[reporter._id]).to.have.all.keys([
-        'comment',
-        'source',
        'timestamp',
      ]);
      expect(moment(updatedTarget.profile.flags[reporter._id].timestamp).toDate()).to.be.a('date');
--- a/test/api/v3/integration/members/POST-transfer_gems.test.js
+++ b/test/api/v3/integration/members/POST-transfer_gems.test.js
@@ -181,7 +181,8 @@ describe('POST /members/transfer-gems', () => {
    const updatedSender = await userToSendMessage.get('/user');

    const sendersMessageInReceiversInbox = findMessage(
-      updatedReceiver.inbox.messages, userToSendMessage._id,
+      updatedReceiver.inbox.messages,
+      userToSendMessage._id,
    );
    const sendersMessageInSendersInbox = findMessage(updatedSender.inbox.messages, receiver._id);

@@ -212,7 +213,8 @@ describe('POST /members/transfer-gems', () => {
    const updatedSender = await userToSendMessage.get('/user');

    const sendersMessageInReceiversInbox = findMessage(
-      updatedReceiver.inbox.messages, userToSendMessage._id,
+      updatedReceiver.inbox.messages,
+      userToSendMessage._id,
    );
    const sendersMessageInSendersInbox = findMessage(updatedSender.inbox.messages, receiver._id);

@@ -233,10 +235,10 @@ describe('POST /members/transfer-gems', () => {
  });

  it('sends transfer gems message in each participant\'s language', async () => {
-    await receiver.update({
+    await receiver.updateOne({
      'preferences.language': 'es',
    });
-    await userToSendMessage.update({
+    await userToSendMessage.updateOne({
      'preferences.language': 'cs',
    });
    await userToSendMessage.post('/members/transfer-gems', {
@@ -248,7 +250,8 @@ describe('POST /members/transfer-gems', () => {
    const updatedSender = await userToSendMessage.get('/user');

    const sendersMessageInReceiversInbox = findMessage(
-      updatedReceiver.inbox.messages, userToSendMessage._id,
+      updatedReceiver.inbox.messages,
+      userToSendMessage._id,
    );
    const sendersMessageInSendersInbox = findMessage(updatedSender.inbox.messages, receiver._id);

--- a/test/api/v3/integration/notifications/POST-notifications_notificationId_read.test.js
+++ b/test/api/v3/integration/notifications/POST-notifications_notificationId_read.test.js
@@ -27,7 +27,7 @@ describe('POST /notifications/:notificationId/read', () => {
    const id = generateUUID();
    const id2 = generateUUID();

-    await user.update({
+    await user.updateOne({
      notifications: [{
        id,
        type: 'DROPS_ENABLED',
--- a/test/api/v3/integration/notifications/POST-notifications_notificationId_see.test.js
+++ b/test/api/v3/integration/notifications/POST-notifications_notificationId_see.test.js
@@ -27,7 +27,7 @@ describe('POST /notifications/:notificationId/see', () => {
    const id = generateUUID();
    const id2 = generateUUID();

-    await user.update({
+    await user.updateOne({
      notifications: [{
        id,
        type: 'DROPS_ENABLED',
--- a/test/api/v3/integration/notifications/POST-notifications_read.test.js
+++ b/test/api/v3/integration/notifications/POST-notifications_read.test.js
@@ -30,7 +30,7 @@ describe('POST /notifications/read', () => {
    const id2 = generateUUID();
    const id3 = generateUUID();

-    await user.update({
+    await user.updateOne({
      notifications: [{
        id,
        type: 'DROPS_ENABLED',
--- a/test/api/v3/integration/notifications/POST_notifications_see.test.js
+++ b/test/api/v3/integration/notifications/POST_notifications_see.test.js
@@ -30,7 +30,7 @@ describe('POST /notifications/see', () => {
    const id2 = generateUUID();
    const id3 = generateUUID();

-    await user.update({
+    await user.updateOne({
      notifications: [{
        id,
        type: 'DROPS_ENABLED',
--- a/test/api/v3/integration/notifications/prevent-multiple-notification.js
+++ b/test/api/v3/integration/notifications/prevent-multiple-notification.js
@@ -25,7 +25,7 @@ describe('Prevent multiple notifications', () => {

    for (let i = 0; i < 4; i += 1) {
      for (let memberIndex = 0; memberIndex < partyMembers.length; memberIndex += 1) {
-        await partyMembers[memberIndex].update({ 'auth.timestamps.created': new Date('2022-01-01') }); // eslint-disable-line no-await-in-loop
+        await partyMembers[memberIndex].updateOne({ 'auth.timestamps.created': new Date('2022-01-01') }); // eslint-disable-line no-await-in-loop
        multipleChatMessages.push(
          partyMembers[memberIndex].post(`/groups/${party._id}/chat`, { message: `Message ${i}_${memberIndex}` }),
        );
--- a/test/api/v3/integration/quests/POST-groups_groupId_quests_accept.test.js
+++ b/test/api/v3/integration/quests/POST-groups_groupId_quests_accept.test.js
@@ -26,7 +26,7 @@ describe('POST /groups/:groupId/quests/accept', () => {
    leader = groupLeader;
    partyMembers = members;

-    await leader.update({
+    await leader.updateOne({
      [`items.quests.${PET_QUEST}`]: 1,
    });
  });
--- a/test/api/v3/integration/quests/POST-groups_groupId_quests_force-start.test.js
+++ b/test/api/v3/integration/quests/POST-groups_groupId_quests_force-start.test.js
@@ -23,7 +23,7 @@ describe('POST /groups/:groupId/quests/force-start', () => {
    leader = groupLeader;
    partyMembers = members;

-    await leader.update({
+    await leader.updateOne({
      [`items.quests.${PET_QUEST}`]: 1,
    });
  });
@@ -93,7 +93,7 @@ describe('POST /groups/:groupId/quests/force-start', () => {
  context('successfully force starting a quest', () => {
    it('allows quest leader to force start quest', async () => {
      const questLeader = partyMembers[0];
-      await questLeader.update({ [`items.quests.${PET_QUEST}`]: 1 });
+      await questLeader.updateOne({ [`items.quests.${PET_QUEST}`]: 1 });
      await questLeader.post(`/groups/${questingGroup._id}/quests/invite/${PET_QUEST}`);

      await questLeader.post(`/groups/${questingGroup._id}/quests/force-start`);
@@ -105,7 +105,7 @@ describe('POST /groups/:groupId/quests/force-start', () => {

    it('allows group leader to force start quest', async () => {
      const questLeader = partyMembers[0];
-      await questLeader.update({ [`items.quests.${PET_QUEST}`]: 1 });
+      await questLeader.updateOne({ [`items.quests.${PET_QUEST}`]: 1 });
      await questLeader.post(`/groups/${questingGroup._id}/quests/invite/${PET_QUEST}`);

      await leader.post(`/groups/${questingGroup._id}/quests/force-start`);
@@ -177,7 +177,7 @@ describe('POST /groups/:groupId/quests/force-start', () => {
      await leader.post(`/groups/${questingGroup._id}/quests/invite/${PET_QUEST}`);
      const notInPartyUser = await generateUser();

-      await questingGroup.update({
+      await questingGroup.updateOne({
        [`quest.members.${notInPartyUser._id}`]: true,
      });
      await questingGroup.sync();
@@ -217,7 +217,7 @@ describe('POST /groups/:groupId/quests/force-start', () => {
      await leader.post(`/groups/${questingGroup._id}/quests/invite/${PET_QUEST}`);
      await partyMembers[0].post(`/groups/${questingGroup._id}/quests/accept`);

-      await questingGroup.update({
+      await questingGroup.updateOne({
        [`quest.members.${partyMemberThatRejects._id}`]: false,
        [`quest.members.${partyMemberThatIgnores._id}`]: null,
      });
@@ -236,7 +236,7 @@ describe('POST /groups/:groupId/quests/force-start', () => {

    it('allows group leader to force start quest and verifies chat', async () => {
      const questLeader = partyMembers[0];
-      await questLeader.update({ [`items.quests.${PET_QUEST}`]: 1 });
+      await questLeader.updateOne({ [`items.quests.${PET_QUEST}`]: 1 });
      await questLeader.post(`/groups/${questingGroup._id}/quests/invite/${PET_QUEST}`);

      await leader.post(`/groups/${questingGroup._id}/quests/force-start`);
--- a/test/api/v3/integration/quests/POST-groups_groupId_quests_invite.test.js
+++ b/test/api/v3/integration/quests/POST-groups_groupId_quests_invite.test.js
@@ -87,8 +87,8 @@ describe('POST /groups/:groupId/quests/invite/:questKey', () => {
      const leaderUpdate = {};
      leaderUpdate[`items.quests.${PET_QUEST}`] = 1;

-      await leader.update(leaderUpdate);
-      await questingGroup.update({ 'quest.key': QUEST_IN_PROGRESS });
+      await leader.updateOne(leaderUpdate);
+      await questingGroup.updateOne({ 'quest.key': QUEST_IN_PROGRESS });

      await expect(leader.post(`/groups/${questingGroup._id}/quests/invite/${PET_QUEST}`)).to.eventually.be.rejected.and.eql({
        code: 401,
@@ -104,8 +104,8 @@ describe('POST /groups/:groupId/quests/invite/:questKey', () => {
      memberUpdate[`items.quests.${PET_QUEST}`] = 1;

      await Promise.all([
-        leader.update(memberUpdate),
-        member.update(memberUpdate),
+        leader.updateOne(memberUpdate),
+        member.updateOne(memberUpdate),
      ]);
    });

@@ -202,7 +202,7 @@ describe('POST /groups/:groupId/quests/invite/:questKey', () => {
      leaderUpdate[`items.quests.${LEVELED_QUEST}`] = 1;
      leaderUpdate['stats.lvl'] = LEVELED_QUEST_REQ - 1;

-      await leader.update(leaderUpdate);
+      await leader.updateOne(leaderUpdate);

      await leader.post(`/groups/${questingGroup._id}/quests/invite/${LEVELED_QUEST}`);
    });
--- a/test/api/v3/integration/quests/POST-groups_groupid_quests_abort.test.js
+++ b/test/api/v3/integration/quests/POST-groups_groupid_quests_abort.test.js
@@ -24,7 +24,7 @@ describe('POST /groups/:groupId/quests/abort', () => {
    leader = groupLeader;
    partyMembers = members;

-    await leader.update({
+    await leader.updateOne({
      [`items.quests.${PET_QUEST}`]: 1,
    });
    user = await generateUser();
--- a/test/api/v3/integration/quests/POST-groups_groupid_quests_cancel.test.js
+++ b/test/api/v3/integration/quests/POST-groups_groupid_quests_cancel.test.js
@@ -24,7 +24,7 @@ describe('POST /groups/:groupId/quests/cancel', () => {
    leader = groupLeader;
    partyMembers = members;

-    await leader.update({
+    await leader.updateOne({
      [`items.quests.${PET_QUEST}`]: 1,
    });
    user = await generateUser();
--- a/test/api/v3/integration/quests/POST-groups_groupid_quests_leave.test.js
+++ b/test/api/v3/integration/quests/POST-groups_groupid_quests_leave.test.js
@@ -23,7 +23,7 @@ describe('POST /groups/:groupId/quests/leave', () => {
    leader = groupLeader;
    partyMembers = members;

-    await leader.update({
+    await leader.updateOne({
      [`items.quests.${PET_QUEST}`]: 1,
    });
    user = await generateUser();
--- a/test/api/v3/integration/quests/POST-groups_groupid_quests_reject.test.js
+++ b/test/api/v3/integration/quests/POST-groups_groupid_quests_reject.test.js
@@ -25,7 +25,7 @@ describe('POST /groups/:groupId/quests/reject', () => {
    leader = groupLeader;
    partyMembers = members;

-    await leader.update({
+    await leader.updateOne({
      [`items.quests.${PET_QUEST}`]: 1,
    });
    user = await generateUser();
--- a/test/api/v3/integration/shops/GET-shops_market.test.js
+++ b/test/api/v3/integration/shops/GET-shops_market.test.js
@@ -27,7 +27,7 @@ describe('GET /shops/market', () => {
  });

  it('can purchase anything returned from the shops object using the /user/purchase route', async () => {
-    await user.update({
+    await user.updateOne({
      balance: 99999999,
      'stats.gp': 99999999,
    });
--- a/test/api/v3/integration/shops/GET-shops_time_travelers.test.js
+++ b/test/api/v3/integration/shops/GET-shops_time_travelers.test.js
@@ -39,7 +39,7 @@ describe('GET /shops/time-travelers', () => {
  });

  it('returns active shop notes and imageName if user has trinkets', async () => {
-    await user.update({
+    await user.updateOne({
      'purchased.plan.consecutive.trinkets': 1,
    });

@@ -57,7 +57,7 @@ describe('GET /shops/time-travelers', () => {
  });

  it('does not return mystery sets that are already owned', async () => {
-    await user.update({
+    await user.updateOne({
      'items.gear.owned': {
        head_mystery_201606: true, // eslint-disable-line camelcase
        armor_mystery_201606: true, // eslint-disable-line camelcase
@@ -72,7 +72,7 @@ describe('GET /shops/time-travelers', () => {
  });

  it('does not return pets and mounts that user already owns', async () => {
-    await user.update({
+    await user.updateOne({
      'items.mounts': {
        'MantisShrimp-Base': true,
      },
--- a/test/api/v3/integration/tasks/DELETE-tasks_id.test.js
+++ b/test/api/v3/integration/tasks/DELETE-tasks_id.test.js
@@ -86,7 +86,7 @@ describe('DELETE /tasks/:id', () => {
    it('does not send task activity webhooks if task is not user owned', async () => {
      const uuid = generateUUID();

-      await user.update({
+      await user.updateOne({
        balance: 10,
      });
      const guild = await generateGroup(user);
--- a/test/api/v3/integration/tasks/GET-tasks_user.test.js
+++ b/test/api/v3/integration/tasks/GET-tasks_user.test.js
@@ -154,7 +154,7 @@ describe('GET /tasks/user', () => {

  xit('returns dailies with isDue for the date specified and will add CDS offset if time is not supplied and assumes timezones', async () => {
    const timezoneOffset = 420;
-    await user.update({
+    await user.updateOne({
      'preferences.dayStart': 0,
      'preferences.timezoneOffset': timezoneOffset,
    });
@@ -181,7 +181,7 @@ describe('GET /tasks/user', () => {

  xit('returns dailies with isDue for the date specified and will add CDS offset if time is not supplied and assumes timezones', async () => {
    const timezoneOffset = 240;
-    await user.update({
+    await user.updateOne({
      'preferences.dayStart': 0,
      'preferences.timezoneOffset': timezoneOffset,
    });
@@ -208,7 +208,7 @@ describe('GET /tasks/user', () => {

  xit('returns dailies with isDue for the date specified and will add CDS offset if time is not supplied and assumes timezones', async () => {
    const timezoneOffset = 540;
-    await user.update({
+    await user.updateOne({
      'preferences.dayStart': 0,
      'preferences.timezoneOffset': timezoneOffset,
    });
--- a/test/api/v3/integration/tasks/POST-tasks_id_score_direction.test.js
+++ b/test/api/v3/integration/tasks/POST-tasks_id_score_direction.test.js
@@ -106,7 +106,7 @@ describe('POST /tasks/:id/score/:direction', () => {

        const initialLvl = user.stats.lvl;

-        await user.update({
+        await user.updateOne({
          'stats.exp': 3000,
        });
        const task = await user.post('/tasks/user', {
--- a/test/api/v3/integration/tasks/POST-tasks_unlink-all_challengeId.test.js
+++ b/test/api/v3/integration/tasks/POST-tasks_unlink-all_challengeId.test.js
@@ -104,7 +104,6 @@ describe('POST /tasks/unlink-all/:challengeId', () => {
      id: challenge._id,
      shortName: challenge.shortName,
      broken: 'CHALLENGE_DELETED',
-      winner: null,
    });
  });
 });
--- a/test/api/v3/integration/tasks/PUT-tasks_id.test.js
+++ b/test/api/v3/integration/tasks/PUT-tasks_id.test.js
@@ -200,7 +200,7 @@ describe('PUT /tasks/:id', () => {
    it('does not send task activity webhooks if task is not user owned', async () => {
      const uuid = generateUUID();

-      await user.update({
+      await user.updateOne({
        balance: 10,
      });
      const guild = await generateGroup(user);
--- a/test/api/v3/integration/user/DELETE-user.test.js
+++ b/test/api/v3/integration/user/DELETE-user.test.js
@@ -48,6 +48,7 @@ describe('DELETE /user', () => {
    });

    it('deletes the user', async () => {
+      await expect(checkExistence('users', user._id)).to.eventually.eql(true);
      await user.del('/user', {
        password,
      });
@@ -157,11 +158,12 @@ describe('DELETE /user', () => {
    });

    it('deletes the user with a legacy sha1 password', async () => {
+      await expect(checkExistence('users', user._id)).to.eventually.eql(true);
      const textPassword = 'mySecretPassword';
      const salt = sha1MakeSalt();
      const sha1HashedPassword = sha1EncryptPassword(textPassword, salt);

-      await user.update({
+      await user.updateOne({
        'auth.local.hashed_password': sha1HashedPassword,
        'auth.local.passwordHashMethod': 'sha1',
        'auth.local.salt': salt,
@@ -211,6 +213,7 @@ describe('DELETE /user', () => {
    });

    it('deletes a Google user', async () => {
+      await expect(checkExistence('users', user._id)).to.eventually.eql(true);
      await user.del('/user', {
        password: DELETE_CONFIRMATION,
      });
@@ -230,6 +233,7 @@ describe('DELETE /user', () => {
    });

    it('deletes a Apple user', async () => {
+      await expect(checkExistence('users', user._id)).to.eventually.eql(true);
      await user.del('/user', {
        password: DELETE_CONFIRMATION,
      });
--- a/test/api/v3/integration/user/GET-user_anonymized.test.js
+++ b/test/api/v3/integration/user/GET-user_anonymized.test.js
@@ -17,7 +17,7 @@ describe('GET /user/anonymized', () => {
        text: 'Clark Kent',
      },
    });
-    await user.update({
+    await user.updateOne({
      newMessages: ['some', 'new', 'messages'],
      'profile.name': 'profile',
      'purchased.plan': 'purchased plan',
--- a/test/api/v3/integration/user/POST-move-pinned-item.js
+++ b/test/api/v3/integration/user/POST-move-pinned-item.js
@@ -52,7 +52,7 @@ describe('POST /user/move-pinned-item/:path/move/to/:position', () => {
    // For this test put seasonal items at the end so they stay out of the way
    testPinnedItemsOrder = testPinnedItemsOrder.concat(officialPinnedItemPaths);

-    await user.update({
+    await user.updateOne({
      pinnedItems: testPinnedItems,
      pinnedItemsOrder: testPinnedItemsOrder,
    });
@@ -96,7 +96,7 @@ describe('POST /user/move-pinned-item/:path/move/to/:position', () => {
      'potion',
    ];

-    await user.update({
+    await user.updateOne({
      pinnedItems: testPinnedItems,
      pinnedItemsOrder: testPinnedItemsOrder,
    });
@@ -138,7 +138,7 @@ describe('POST /user/move-pinned-item/:path/move/to/:position', () => {
      'potion',
    ];

-    await user.update({
+    await user.updateOne({
      pinnedItems: testPinnedItems,
      pinnedItemsOrder: testPinnedItemsOrder,
    });
@@ -171,7 +171,7 @@ describe('POST /user/move-pinned-item/:path/move/to/:position', () => {
    // add item to pinned
    officialPinnedItems.push({ type: 'armoire', path: 'armoire' });

-    await user.update({
+    await user.updateOne({
      pinnedItems: testPinnedItems,
      pinnedItemsOrder: testPinnedItemsOrder,
    });
@@ -201,7 +201,7 @@ describe('POST /user/move-pinned-item/:path/move/to/:position', () => {
      'potion',
    ];

-    await user.update({
+    await user.updateOne({
      pinnedItems: testPinnedItems,
      pinnedItemsOrder: testPinnedItemsOrder,
    });
@@ -225,7 +225,7 @@ describe('POST /user/move-pinned-item/:path/move/to/:position', () => {
      'potion',
    ];

-    await user.update({
+    await user.updateOne({
      pinnedItems: testPinnedItems,
      pinnedItemsOrder: testPinnedItemsOrder,
    });
--- a/test/api/v3/integration/user/POST-user_class_cast_spellId.test.js
+++ b/test/api/v3/integration/user/POST-user_class_cast_spellId.test.js
@@ -18,7 +18,7 @@ describe('POST /user/class/cast/:spellId', () => {
  });

  it('returns an error if spell does not exist', async () => {
-    await user.update({ 'stats.class': 'rogue' });
+    await user.updateOne({ 'stats.class': 'rogue' });
    const spellId = 'invalidSpell';
    await expect(user.post(`/user/class/cast/${spellId}`))
      .to.eventually.be.rejected.and.eql({
@@ -39,7 +39,7 @@ describe('POST /user/class/cast/:spellId', () => {
  });

  it('returns an error if spell.mana > user.mana', async () => {
-    await user.update({ 'stats.class': 'rogue' });
+    await user.updateOne({ 'stats.class': 'rogue' });
    await expect(user.post('/user/class/cast/backStab'))
      .to.eventually.be.rejected.and.eql({
        code: 401,
@@ -58,7 +58,7 @@ describe('POST /user/class/cast/:spellId', () => {
  });

  it('returns an error if use Healing Light spell with full health', async () => {
-    await user.update({
+    await user.updateOne({
      'stats.class': 'healer',
      'stats.lvl': 11,
      'stats.hp': 50,
@@ -73,7 +73,7 @@ describe('POST /user/class/cast/:spellId', () => {
  });

  it('returns an error if spell.lvl > user.level', async () => {
-    await user.update({ 'stats.mp': 200, 'stats.class': 'wizard' });
+    await user.updateOne({ 'stats.mp': 200, 'stats.class': 'wizard' });
    await expect(user.post('/user/class/cast/earth'))
      .to.eventually.be.rejected.and.eql({
        code: 401,
@@ -101,7 +101,7 @@ describe('POST /user/class/cast/:spellId', () => {
  });

  it('returns an error if targetId is required but missing', async () => {
-    await user.update({ 'stats.class': 'rogue', 'stats.lvl': 11 });
+    await user.updateOne({ 'stats.class': 'rogue', 'stats.lvl': 11 });
    await expect(user.post('/user/class/cast/pickPocket'))
      .to.eventually.be.rejected.and.eql({
        code: 400,
@@ -111,7 +111,7 @@ describe('POST /user/class/cast/:spellId', () => {
  });

  it('returns an error if targeted task doesn\'t exist', async () => {
-    await user.update({ 'stats.class': 'rogue', 'stats.lvl': 11 });
+    await user.updateOne({ 'stats.class': 'rogue', 'stats.lvl': 11 });
    await expect(user.post(`/user/class/cast/pickPocket?targetId=${generateUUID()}`))
      .to.eventually.be.rejected.and.eql({
        code: 404,
@@ -127,7 +127,7 @@ describe('POST /user/class/cast/:spellId', () => {
    await groupLeader.post(`/tasks/challenge/${challenge._id}`, [
      { type: 'habit', text: 'task text' },
    ]);
-    await groupLeader.update({ 'stats.class': 'rogue', 'stats.lvl': 11 });
+    await groupLeader.updateOne({ 'stats.class': 'rogue', 'stats.lvl': 11 });
    await sleep(0.5);
    await groupLeader.sync();
    await expect(groupLeader.post(`/user/class/cast/pickPocket?targetId=${groupLeader.tasksOrder.habits[0]}`))
@@ -146,7 +146,7 @@ describe('POST /user/class/cast/:spellId', () => {
      type: 'todo',
    });
    await groupLeader.post(`/tasks/${groupTask._id}/assign`, [groupLeader._id]);
-    await groupLeader.update({ 'stats.class': 'rogue', 'stats.lvl': 11 });
+    await groupLeader.updateOne({ 'stats.class': 'rogue', 'stats.lvl': 11 });
    await sleep(0.5);
    await groupLeader.sync();

@@ -159,7 +159,7 @@ describe('POST /user/class/cast/:spellId', () => {
  });

  it('Issue #12361: returns an error if stealth has already been cast', async () => {
-    await user.update({
+    await user.updateOne({
      'stats.class': 'rogue',
      'stats.lvl': 15,
      'stats.mp': 400,
@@ -180,7 +180,7 @@ describe('POST /user/class/cast/:spellId', () => {
      groupDetails: { type: 'party', privacy: 'private' },
      members: 1,
    });
-    await groupLeader.update({ 'items.special.snowball': 3 });
+    await groupLeader.updateOne({ 'items.special.snowball': 3 });

    const target = generateUUID();
    await expect(groupLeader.post(`/user/class/cast/snowball?targetId=${target}`))
@@ -192,7 +192,7 @@ describe('POST /user/class/cast/:spellId', () => {
  });

  it('returns an error if party does not exists', async () => {
-    await user.update({ 'items.special.snowball': 3 });
+    await user.updateOne({ 'items.special.snowball': 3 });

    await expect(user.post(`/user/class/cast/snowball?targetId=${generateUUID()}`))
      .to.eventually.be.rejected.and.eql({
@@ -207,7 +207,7 @@ describe('POST /user/class/cast/:spellId', () => {
      groupDetails: { type: 'party', privacy: 'private' },
      members: 1,
    });
-    await groupLeader.update({ 'stats.mp': 200, 'stats.class': 'wizard', 'stats.lvl': 13 });
+    await groupLeader.updateOne({ 'stats.mp': 200, 'stats.class': 'wizard', 'stats.lvl': 13 });

    await groupLeader.post('/user/class/cast/earth');
    await sleep(1);
@@ -224,11 +224,11 @@ describe('POST /user/class/cast/:spellId', () => {
    });

    let promises = [];
-    promises.push(group.groupLeader.update({ 'stats.mp': 200, 'stats.class': 'wizard', 'stats.lvl': 20 }));
-    promises.push(group.members[0].update({ 'stats.mp': 0, 'stats.class': 'warrior', 'stats.lvl': 20 }));
-    promises.push(group.members[1].update({ 'stats.mp': 0, 'stats.class': 'wizard', 'stats.lvl': 20 }));
-    promises.push(group.members[2].update({ 'stats.mp': 0, 'stats.class': 'rogue', 'stats.lvl': 20 }));
-    promises.push(group.members[3].update({ 'stats.mp': 0, 'stats.class': 'healer', 'stats.lvl': 20 }));
+    promises.push(group.groupLeader.updateOne({ 'stats.mp': 200, 'stats.class': 'wizard', 'stats.lvl': 20 }));
+    promises.push(group.members[0].updateOne({ 'stats.mp': 0, 'stats.class': 'warrior', 'stats.lvl': 20 }));
+    promises.push(group.members[1].updateOne({ 'stats.mp': 0, 'stats.class': 'wizard', 'stats.lvl': 20 }));
+    promises.push(group.members[2].updateOne({ 'stats.mp': 0, 'stats.class': 'rogue', 'stats.lvl': 20 }));
+    promises.push(group.members[3].updateOne({ 'stats.mp': 0, 'stats.class': 'healer', 'stats.lvl': 20 }));
    await Promise.all(promises);

    await group.groupLeader.post('/user/class/cast/mpheal');
@@ -252,7 +252,7 @@ describe('POST /user/class/cast/:spellId', () => {
      members: 1,
    });

-    await groupLeader.update({ 'stats.mp': 200, 'stats.class': 'wizard', 'stats.lvl': 13 });
+    await groupLeader.updateOne({ 'stats.mp': 200, 'stats.class': 'wizard', 'stats.lvl': 13 });
    await groupLeader.post('/user/class/cast/earth', { quantity: 2 });

    await sleep(1);
@@ -275,7 +275,7 @@ describe('POST /user/class/cast/:spellId', () => {
      text: 'todo group',
      type: 'todo',
    });
-    await user.update({ 'stats.class': 'healer', 'stats.mp': 200, 'stats.lvl': 15 });
+    await user.updateOne({ 'stats.class': 'healer', 'stats.mp': 200, 'stats.lvl': 15 });
    await user.post(`/tasks/${groupTask._id}/assign`, [user._id]);
    await user.put('/user', {
      'preferences.tasks.mirrorGroupTasks': [guild._id],
@@ -305,7 +305,7 @@ describe('POST /user/class/cast/:spellId', () => {
    });
    const leader = party.groupLeader;
    const recipient = party.members[0];
-    await leader.update({ 'stats.gp': 10 });
+    await leader.updateOne({ 'stats.gp': 10 });
    await leader.post(`/user/class/cast/birthday?targetId=${recipient._id}`);
    await leader.sync();
    await recipient.sync();
@@ -314,14 +314,14 @@ describe('POST /user/class/cast/:spellId', () => {
  });

  it('only increases user\'s achievement one if target == caster', async () => {
-    await user.update({ 'stats.gp': 10 });
+    await user.updateOne({ 'stats.gp': 10 });
    await user.post(`/user/class/cast/birthday?targetId=${user._id}`);
    await user.sync();
    expect(user.achievements.birthday).to.equal(1);
  });

  it('passes correct target to spell when targetType === \'task\'', async () => {
-    await user.update({ 'stats.class': 'wizard', 'stats.lvl': 11 });
+    await user.updateOne({ 'stats.class': 'wizard', 'stats.lvl': 11 });

    const task = await user.post('/tasks/user', {
      text: 'test habit',
@@ -334,7 +334,7 @@ describe('POST /user/class/cast/:spellId', () => {
  });

  it('passes correct target to spell when targetType === \'self\'', async () => {
-    await user.update({ 'stats.class': 'wizard', 'stats.lvl': 14, 'stats.mp': 50 });
+    await user.updateOne({ 'stats.class': 'wizard', 'stats.lvl': 14, 'stats.mp': 50 });

    const result = await user.post('/user/class/cast/frost');

--- a/test/api/v3/integration/user/POST-user_custom-day-start.test.js
+++ b/test/api/v3/integration/user/POST-user_custom-day-start.test.js
@@ -24,7 +24,7 @@ describe('POST /user/custom-day-start', () => {
  it('sets lastCron to the current time to prevent an unexpected cron', async () => {
    const oldCron = moment().subtract(7, 'hours');

-    await user.update({ lastCron: oldCron });
+    await user.updateOne({ lastCron: oldCron });
    await user.post(endpoint, { dayStart: 1 });
    await user.sync();

--- a/test/api/v3/integration/user/POST-user_equip_type_key.test.js
+++ b/test/api/v3/integration/user/POST-user_equip_type_key.test.js
@@ -14,7 +14,7 @@ describe('POST /user/equip/:type/:key', () => {
  // More tests in common code unit tests

  it('equip an item', async () => {
-    await user.update({
+    await user.updateOne({
      'items.gear.owned': {
        weapon_warrior_0: true,
        weapon_warrior_1: true,
--- a/test/api/v3/integration/user/POST-user_feed_pet_food.test.js
+++ b/test/api/v3/integration/user/POST-user_feed_pet_food.test.js
@@ -19,7 +19,7 @@ describe('POST /user/feed/:pet/:food', () => {
  // More tests in common code unit tests

  it('does not enjoy the food', async () => {
-    await user.update({
+    await user.updateOne({
      'items.pets.Wolf-Base': 5,
      'items.food.Milk': 2,
    });
@@ -42,7 +42,7 @@ describe('POST /user/feed/:pet/:food', () => {
  });

  it('bulk feeding pet with non-preferred food', async () => {
-    await user.update({
+    await user.updateOne({
      'items.pets.Wolf-Base': 5,
      'items.food.Milk': 3,
    });
@@ -85,7 +85,7 @@ describe('POST /user/feed/:pet/:food', () => {
        },
      });

-      await user.update({
+      await user.updateOne({
        'items.pets.Wolf-Base': 49,
        'items.food.Milk': 2,
      });
@@ -113,7 +113,7 @@ describe('POST /user/feed/:pet/:food', () => {
        },
      });

-      await user.update({
+      await user.updateOne({
        'items.pets.Wolf-Base': 47,
        'items.food.Milk': 3,
      });
--- a/test/api/v3/integration/user/POST-user_hatch_egg_hatchingPotion.test.js
+++ b/test/api/v3/integration/user/POST-user_hatch_egg_hatchingPotion.test.js
@@ -16,7 +16,7 @@ describe('POST /user/hatch/:egg/:hatchingPotion', () => {
  // More tests in common code unit tests

  it('hatch a new pet', async () => {
-    await user.update({
+    await user.updateOne({
      'items.eggs.Wolf': 1,
      'items.hatchingPotions.Base': 1,
    });
@@ -54,7 +54,7 @@ describe('POST /user/hatch/:egg/:hatchingPotion', () => {
        },
      });

-      await user.update({
+      await user.updateOne({
        'items.eggs.Wolf': 1,
        'items.hatchingPotions.Base': 1,
      });
--- a/test/api/v3/integration/user/POST-user_mark_pms_read.test.js
+++ b/test/api/v3/integration/user/POST-user_mark_pms_read.test.js
@@ -12,7 +12,7 @@ describe('POST /user/mark-pms-read', () => {
  // More tests in common code unit tests

  it('marks user\'s private messages as read', async () => {
-    await user.update({
+    await user.updateOne({
      'inbox.newMessages': 1,
    });
    await user.post('/user/mark-pms-read');
--- a/test/api/v3/integration/user/POST-user_purchase.test.js
+++ b/test/api/v3/integration/user/POST-user_purchase.test.js
@@ -35,7 +35,7 @@ describe('POST /user/purchase/:type/:key', () => {

  it('can convert gold to gems if subscribed', async () => {
    const oldBalance = user.balance;
-    await user.update({
+    await user.updateOne({
      'purchased.plan.customerId': 'group-plan',
      'stats.gp': 1000,
    });
@@ -53,14 +53,14 @@ describe('POST /user/purchase/:type/:key', () => {
      },
      upgradeToGroupPlan: true,
    });
-    await group.update({
+    await group.updateOne({
      'leaderOnly.getGems': true,
      'purchased.plan.customerId': 123,
    });
    await groupLeader.sync();
    const oldBalance = groupLeader.balance;

-    await groupLeader.update({
+    await groupLeader.updateOne({
      'purchased.plan.customerId': 'group-plan',
      'stats.gp': 1000,
    });
@@ -80,13 +80,13 @@ describe('POST /user/purchase/:type/:key', () => {
      members: 1,
      upgradeToGroupPlan: true,
    });
-    await group.update({
+    await group.updateOne({
      'leaderOnly.getGems': true,
      'purchased.plan.customerId': 123,
    });
    const oldBalance = members[0].balance;

-    await members[0].update({
+    await members[0].updateOne({
      'purchased.plan.customerId': 'group-plan',
      'stats.gp': 1000,
    });
@@ -111,7 +111,7 @@ describe('POST /user/purchase/:type/:key', () => {

    it('can convert gold to gems if subscribed', async () => {
      const oldBalance = user.balance;
-      await user.update({
+      await user.updateOne({
        'purchased.plan.customerId': 'group-plan',
        'stats.gp': 1000,
      });
--- a/test/api/v3/integration/user/POST-user_read_card.test.js
+++ b/test/api/v3/integration/user/POST-user_read_card.test.js
@@ -23,7 +23,7 @@ describe('POST /user/read-card/:cardType', () => {
  // More tests in common code unit tests

  it('reads a card', async () => {
-    await user.update({
+    await user.updateOne({
      'items.special.greetingReceived': [true],
      'flags.cardReceived': true,
      notifications: [{
--- a/test/api/v3/integration/user/POST-user_rebirth.test.js
+++ b/test/api/v3/integration/user/POST-user_rebirth.test.js
@@ -24,7 +24,7 @@ describe('POST /user/rebirth', () => {
  // More tests in common code unit tests

  it('resets user\'s tasks', async () => {
-    await user.update({
+    await user.updateOne({
      balance: 1.5,
    });

--- a/test/api/v3/integration/user/POST-user_release_both.test.js
+++ b/test/api/v3/integration/user/POST-user_release_both.test.js
@@ -47,7 +47,7 @@ describe('POST /user/release-both', () => {
  // More tests in common code unit tests

  it('grants triad bingo with gems', async () => {
-    await user.update();
+    await user.updateOne();

    const response = await user.post('/user/release-both');
    await user.sync();
--- a/test/api/v3/integration/user/POST-user_release_mounts.test.js
+++ b/test/api/v3/integration/user/POST-user_release_mounts.test.js
@@ -36,7 +36,7 @@ describe('POST /user/release-mounts', () => {
  // More tests in common code unit tests

  it('releases mounts', async () => {
-    await user.update({
+    await user.updateOne({
      balance: 1,
    });

--- a/test/api/v3/integration/user/POST-user_release_pets.test.js
+++ b/test/api/v3/integration/user/POST-user_release_pets.test.js
@@ -36,7 +36,7 @@ describe('POST /user/release-pets', () => {
  // More tests in common code unit tests

  it('releases pets', async () => {
-    await user.update({
+    await user.updateOne({
      balance: 1,
    });

--- a/test/api/v3/integration/user/POST-user_reroll.test.js
+++ b/test/api/v3/integration/user/POST-user_reroll.test.js
@@ -24,7 +24,7 @@ describe('POST /user/reroll', () => {
  // More tests in common code unit tests

  it('resets user\'s tasks', async () => {
-    await user.update({
+    await user.updateOne({
      balance: 2,
    });

--- a/test/api/v3/integration/user/POST-user_revive.test.js
+++ b/test/api/v3/integration/user/POST-user_revive.test.js
@@ -24,7 +24,7 @@ describe('POST /user/revive', () => {
  // More tests in common code unit tests

  it('decreases a stat', async () => {
-    await user.update({
+    await user.updateOne({
      'stats.str': 2,
      'stats.hp': 0,
    });
--- a/test/api/v3/integration/user/POST-user_sell.test.js
+++ b/test/api/v3/integration/user/POST-user_sell.test.js
@@ -25,7 +25,7 @@ describe('POST /user/sell/:type/:key', () => {
  });

  it('sells an item', async () => {
-    await user.update({
+    await user.updateOne({
      items: {
        eggs: {
          Wolf: 1,
--- a/test/api/v3/integration/user/POST-user_unlock.js
+++ b/test/api/v3/integration/user/POST-user_unlock.js
@@ -26,7 +26,7 @@ describe('POST /user/unlock', () => {
  // More tests in common code unit tests

  it('reduces a user\'s balance', async () => {
-    await user.update({
+    await user.updateOne({
      balance: usersStartingGems,
    });
    const response = await user.post(`/user/unlock?path=${unlockPath}`);
@@ -37,7 +37,7 @@ describe('POST /user/unlock', () => {
  });

  it('does not reduce a user\'s balance twice', async () => {
-    await user.update({
+    await user.updateOne({
      balance: usersStartingGems,
    });
    const response = await user.post(`/user/unlock?path=${unlockGearSetPath}`);
--- a/test/api/v3/integration/user/PUT-user.test.js
+++ b/test/api/v3/integration/user/PUT-user.test.js
@@ -108,7 +108,7 @@ describe('PUT /user', () => {
        _id: '1234', publishDate: new Date(), title: 'Title', published: true,
      });

-      await user.update({
+      await user.updateOne({
        'flags.lastNewStuffRead': '123',
      });

@@ -190,7 +190,7 @@ describe('PUT /user', () => {
      it(`updates user with ${type} that is a default`, async () => {
        const dbUpdate = {};
        dbUpdate[`purchased.${type}.${item}`] = true;
-        await user.update(dbUpdate);
+        await user.updateOne(dbUpdate);

        // Sanity checks to make sure user is not already equipped with item
        expect(get(user.preferences, type)).to.not.eql(item);
@@ -212,7 +212,7 @@ describe('PUT /user', () => {
    });

    it('can set beard to default', async () => {
-      await user.update({
+      await user.updateOne({
        'purchased.hair.beard': 3,
        'preferences.hair.beard': 3,
      });
@@ -225,7 +225,7 @@ describe('PUT /user', () => {
    });

    it('can set mustache to default', async () => {
-      await user.update({
+      await user.updateOne({
        'purchased.hair.mustache': 2,
        'preferences.hair.mustache': 2,
      });
@@ -264,7 +264,7 @@ describe('PUT /user', () => {
      it(`updates user with ${type} user does own`, async () => {
        const dbUpdate = {};
        dbUpdate[`purchased.${type}.${item}`] = true;
-        await user.update(dbUpdate);
+        await user.updateOne(dbUpdate);

        // Sanity check to make sure user is not already equipped with item
        expect(get(user.preferences, type)).to.not.eql(item);
--- a/test/api/v3/integration/user/auth/DELETE-user_auth_social_network.test.js
+++ b/test/api/v3/integration/user/auth/DELETE-user_auth_social_network.test.js
@@ -22,7 +22,7 @@ describe('DELETE social registration', () => {

  context('Google', () => {
    it('fails if user does not have an alternative registration method', async () => {
-      await user.update({
+      await user.updateOne({
        'auth.google.id': 'some-google-id',
        'auth.local': { ok: true },
      });
@@ -34,7 +34,7 @@ describe('DELETE social registration', () => {
    });

    it('succeeds if user has a local registration', async () => {
-      await user.update({
+      await user.updateOne({
        'auth.google.id': 'some-google-id',
      });

@@ -47,7 +47,7 @@ describe('DELETE social registration', () => {

  context('Apple', () => {
    it('fails if user does not have an alternative registration method', async () => {
-      await user.update({
+      await user.updateOne({
        'auth.apple.id': 'some-apple-id',
        'auth.local': { ok: true },
      });
@@ -59,7 +59,7 @@ describe('DELETE social registration', () => {
    });

    it('succeeds if user has a local registration', async () => {
-      await user.update({
+      await user.updateOne({
        'auth.apple.id': 'some-apple-id',
      });

--- a/test/api/v3/integration/user/auth/GET-auth_reset-password-set-new-one.js
+++ b/test/api/v3/integration/user/auth/GET-auth_reset-password-set-new-one.js
@@ -44,7 +44,7 @@ xdescribe('GET /user/auth/local/reset-password-set-new-one', () => {
      userId: user._id,
      expiresAt: moment().subtract({ minutes: 1 }),
    }));
-    await user.update({
+    await user.updateOne({
      'auth.local.passwordResetCode': code,
    });

@@ -69,7 +69,7 @@ xdescribe('GET /user/auth/local/reset-password-set-new-one', () => {
      userId: user._id,
      expiresAt: moment().add({ days: 1 }),
    }));
-    await user.update({
+    await user.updateOne({
      auth: 'not an object with valid fields',
    });

@@ -84,7 +84,7 @@ xdescribe('GET /user/auth/local/reset-password-set-new-one', () => {
      userId: user._id,
      expiresAt: moment().add({ days: 1 }),
    }));
-    await user.update({
+    await user.updateOne({
      'auth.local.passwordResetCode': 'invalid',
    });

@@ -101,7 +101,7 @@ xdescribe('GET /user/auth/local/reset-password-set-new-one', () => {
      userId: user._id,
      expiresAt: moment().add({ days: 1 }),
    }));
-    await user.update({
+    await user.updateOne({
      'auth.local.passwordResetCode': code,
    });

--- a/test/api/v3/integration/user/auth/POST-auth_reset-password-set-new-one.js
+++ b/test/api/v3/integration/user/auth/POST-auth_reset-password-set-new-one.js
@@ -59,7 +59,7 @@ describe('POST /user/auth/reset-password-set-new-one', () => {
      userId: user._id,
      expiresAt: moment().subtract({ minutes: 1 }),
    }));
-    await user.update({
+    await user.updateOne({
      'auth.local.passwordResetCode': code,
    });

@@ -111,7 +111,7 @@ describe('POST /user/auth/reset-password-set-new-one', () => {
      userId: user._id,
      expiresAt: moment().add({ days: 1 }),
    }));
-    await user.update({
+    await user.updateOne({
      'auth.local.passwordResetCode': 'invalid',
    });

@@ -133,7 +133,7 @@ describe('POST /user/auth/reset-password-set-new-one', () => {
      userId: user._id,
      expiresAt: moment().add({ days: 1 }),
    }));
-    await user.update({
+    await user.updateOne({
      'auth.local.passwordResetCode': code,
    });

@@ -153,7 +153,7 @@ describe('POST /user/auth/reset-password-set-new-one', () => {
      userId: user._id,
      expiresAt: moment().add({ days: 1 }),
    }));
-    await user.update({
+    await user.updateOne({
      'auth.local.passwordResetCode': code,
    });

@@ -174,7 +174,7 @@ describe('POST /user/auth/reset-password-set-new-one', () => {
      userId: user._id,
      expiresAt: moment().add({ days: 1 }),
    }));
-    await user.update({
+    await user.updateOne({
      'auth.local.passwordResetCode': code,
    });

@@ -196,7 +196,7 @@ describe('POST /user/auth/reset-password-set-new-one', () => {
      userId: user._id,
      expiresAt: moment().add({ days: 1 }),
    }));
-    await user.update({
+    await user.updateOne({
      'auth.local.passwordResetCode': code,
    });

@@ -218,7 +218,7 @@ describe('POST /user/auth/reset-password-set-new-one', () => {
      userId: user._id,
      expiresAt: moment().add({ days: 1 }),
    }));
-    await user.update({
+    await user.updateOne({
      'auth.local.passwordResetCode': code,
    });

@@ -245,7 +245,7 @@ describe('POST /user/auth/reset-password-set-new-one', () => {
    const salt = sha1MakeSalt();
    const sha1HashedPassword = sha1EncryptPassword(textPassword, salt);

-    await user.update({
+    await user.updateOne({
      'auth.local.hashed_password': sha1HashedPassword,
      'auth.local.passwordHashMethod': 'sha1',
      'auth.local.salt': salt,
@@ -260,7 +260,7 @@ describe('POST /user/auth/reset-password-set-new-one', () => {
      userId: user._id,
      expiresAt: moment().add({ days: 1 }),
    }));
-    await user.update({
+    await user.updateOne({
      'auth.local.passwordResetCode': code,
    });

--- a/test/api/v3/integration/user/auth/POST-login-local.test.js
+++ b/test/api/v3/integration/user/auth/POST-login-local.test.js
@@ -37,7 +37,7 @@ describe('POST /user/auth/local/login', () => {
  });

  it('user is blocked', async () => {
-    await user.update({ 'auth.blocked': 1 });
+    await user.updateOne({ 'auth.blocked': 1 });
    await expect(api.post(endpoint, {
      username: user.auth.local.username,
      password,
@@ -84,7 +84,7 @@ describe('POST /user/auth/local/login', () => {
    const salt = sha1MakeSalt();
    const sha1HashedPassword = sha1EncryptPassword(textPassword, salt);

-    await user.update({
+    await user.updateOne({
      'auth.local.hashed_password': sha1HashedPassword,
      'auth.local.passwordHashMethod': 'sha1',
      'auth.local.salt': salt,
--- a/test/api/v3/integration/user/auth/POST-register_local.test.js
+++ b/test/api/v3/integration/user/auth/POST-register_local.test.js
@@ -497,7 +497,7 @@ describe('POST /user/auth/local/register', () => {
      });
    });
    it('succeeds', async () => {
-      await user.update({ 'auth.facebook.id': 'some-fb-id', 'auth.local': { ok: true } });
+      await user.updateOne({ 'auth.facebook.id': 'some-fb-id', 'auth.local': { ok: true } });
      await user.post('/user/auth/local/register', {
        username,
        email,
@@ -531,7 +531,7 @@ describe('POST /user/auth/local/register', () => {
      });
    });
    it('succeeds', async () => {
-      await user.update({ 'auth.google.id': 'some-google-id', 'auth.local': { ok: true } });
+      await user.updateOne({ 'auth.google.id': 'some-google-id', 'auth.local': { ok: true } });
      await user.post('/user/auth/local/register', {
        username,
        email,
@@ -565,7 +565,7 @@ describe('POST /user/auth/local/register', () => {
      });
    });
    it('succeeds', async () => {
-      await user.update({ 'auth.apple.id': 'some-apple-id', 'auth.local': { ok: true } });
+      await user.updateOne({ 'auth.apple.id': 'some-apple-id', 'auth.local': { ok: true } });
      await user.post('/user/auth/local/register', {
        username,
        email,
--- a/test/api/v3/integration/user/auth/POST-user_reset_password.test.js
+++ b/test/api/v3/integration/user/auth/POST-user_reset_password.test.js
@@ -27,7 +27,7 @@ describe('POST /user/reset-password', async () => {

  it('resets password for social users', async () => {
    const email = `${user.auth.local.username}+google@example.com`;
-    await user.update({ 'auth.google.emails': [{ value: email }] });
+    await user.updateOne({ 'auth.google.emails': [{ value: email }] });
    await user.sync();
    const previousPassword = user.auth.local.passwordResetCode;
    const response = await user.post(endpoint, {
--- a/test/api/v3/integration/user/auth/PUT-user_update_email.test.js
+++ b/test/api/v3/integration/user/auth/PUT-user_update_email.test.js
@@ -80,7 +80,7 @@ describe('PUT /user/auth/update-email', () => {
      const sha1HashedPassword = sha1EncryptPassword(textPassword, salt);
      const myNewEmail = 'my-new-random-email@example.net';

-      await user.update({
+      await user.updateOne({
        'auth.local.hashed_password': sha1HashedPassword,
        'auth.local.passwordHashMethod': 'sha1',
        'auth.local.salt': salt,
@@ -115,7 +115,7 @@ describe('PUT /user/auth/update-email', () => {

    beforeEach(async () => {
      socialUser = await generateUser();
-      await socialUser.update({ 'auth.local': { ok: true } });
+      await socialUser.updateOne({ 'auth.local': { ok: true } });
    });

    it('does not change email if user.auth.local.email does not exist for this user', async () => {
--- a/test/api/v3/integration/user/auth/PUT-user_update_password.test.js
+++ b/test/api/v3/integration/user/auth/PUT-user_update_password.test.js
@@ -128,7 +128,7 @@ describe('PUT /user/auth/update-password', async () => {
    const salt = sha1MakeSalt();
    const sha1HashedPassword = sha1EncryptPassword(textPassword, salt);

-    await user.update({
+    await user.updateOne({
      'auth.local.hashed_password': sha1HashedPassword,
      'auth.local.passwordHashMethod': 'sha1',
      'auth.local.salt': salt,
--- a/test/api/v3/integration/user/auth/PUT-user_update_username.test.js
+++ b/test/api/v3/integration/user/auth/PUT-user_update_username.test.js
@@ -67,7 +67,7 @@ describe('PUT /user/auth/update-username', async () => {
    const salt = sha1MakeSalt();
    const sha1HashedPassword = sha1EncryptPassword(textPassword, salt);

-    await user.update({
+    await user.updateOne({
      'auth.local.hashed_password': sha1HashedPassword,
      'auth.local.passwordHashMethod': 'sha1',
      'auth.local.salt': salt,
--- a/test/api/v3/integration/user/buy/POST-user_buy.test.js
+++ b/test/api/v3/integration/user/buy/POST-user_buy.test.js
@@ -30,7 +30,7 @@ describe('POST /user/buy/:key', () => {
  });

  it('buys a potion', async () => {
-    await user.update({
+    await user.updateOne({
      'stats.gp': 400,
      'stats.hp': 40,
    });
@@ -45,7 +45,7 @@ describe('POST /user/buy/:key', () => {
  });

  it('returns an error if user tries to buy a potion with full health', async () => {
-    await user.update({
+    await user.updateOne({
      'stats.gp': 40,
      'stats.hp': 50,
    });
@@ -72,7 +72,7 @@ describe('POST /user/buy/:key', () => {
    const item = content.special[key];
    const stub = sinon.stub(item, 'canOwn').returns(true);

-    await user.update({ 'stats.gp': 250 });
+    await user.updateOne({ 'stats.gp': 250 });
    const res = await user.post(`/user/buy/${key}`);
    await user.sync();

@@ -88,7 +88,7 @@ describe('POST /user/buy/:key', () => {
  });

  it('allows for bulk purchases', async () => {
-    await user.update({
+    await user.updateOne({
      'stats.gp': 400,
      'stats.hp': 20,
    });
--- a/test/api/v3/integration/user/buy/POST-user_buy_armoire.test.js
+++ b/test/api/v3/integration/user/buy/POST-user_buy_armoire.test.js
@@ -15,7 +15,7 @@ describe('POST /user/buy-armoire', () => {
  // More tests in common code unit tests

  it('returns an error if user does not have enough gold', async () => {
-    await user.update({
+    await user.updateOne({
      'stats.gp': 5,
    });

--- a/test/api/v3/integration/user/buy/POST-user_buy_health_potion.test.js
+++ b/test/api/v3/integration/user/buy/POST-user_buy_health_potion.test.js
@@ -27,7 +27,7 @@ describe('POST /user/buy-health-potion', () => {
  });

  it('buys a potion', async () => {
-    await user.update({
+    await user.updateOne({
      'stats.gp': 400,
    });

--- a/test/api/v3/integration/user/buy/POST-user_buy_quest.test.js
+++ b/test/api/v3/integration/user/buy/POST-user_buy_quest.test.js
@@ -29,7 +29,7 @@ describe('POST /user/buy-quest/:key', () => {
    const key = 'dilatoryDistress1';
    const item = content.quests[key];

-    await user.update({ 'stats.gp': 250 });
+    await user.updateOne({ 'stats.gp': 250 });
    const res = await user.post(`/user/buy-quest/${key}`);
    await user.sync();

@@ -45,7 +45,7 @@ describe('POST /user/buy-quest/:key', () => {

    const achievementName1 = `achievements.quests.${prerequisites[0]}`;

-    await user.update({
+    await user.updateOne({
      [achievementName1]: true,
      'stats.gp': 9999,
    });
@@ -66,7 +66,7 @@ describe('POST /user/buy-quest/:key', () => {
    const achievementName1 = `achievements.quests.${prerequisites[0]}`;
    const achievementName2 = `achievements.quests.${prerequisites[1]}`;

-    await user.update({
+    await user.updateOne({
      [achievementName1]: true,
      [achievementName2]: true,
      'stats.gp': 9999,
--- a/test/api/v3/integration/user/buy/POST-user_buy_special_spell.test.js
+++ b/test/api/v3/integration/user/buy/POST-user_buy_special_spell.test.js
@@ -29,7 +29,7 @@ describe('POST /user/buy-special-spell/:key', () => {
    const key = 'thankyou';
    const item = content.special[key];

-    await user.update({ 'stats.gp': 250 });
+    await user.updateOne({ 'stats.gp': 250 });
    const res = await user.post(`/user/buy-special-spell/${key}`);
    await user.sync();

@@ -45,7 +45,7 @@ describe('POST /user/buy-special-spell/:key', () => {
  it('returns an error if user does not have enough gold', async () => {
    const key = 'thankyou';

-    await user.update({
+    await user.updateOne({
      'stats.gp': 5,
    });

--- a/test/api/v3/integration/user/stats/POST-user_allocate.test.js
+++ b/test/api/v3/integration/user/stats/POST-user_allocate.test.js
@@ -36,7 +36,7 @@ describe('POST /user/allocate', () => {
  });

  it('returns an error if the user hasn\'t selected class', async () => {
-    await user.update({ 'flags.classSelected': false });
+    await user.updateOne({ 'flags.classSelected': false });
    await expect(user.post('/user/allocate'))
      .to.eventually.be.rejected.and.eql({
        code: 401,
@@ -46,7 +46,7 @@ describe('POST /user/allocate', () => {
  });

  it('allocates attribute points', async () => {
-    await user.update({ 'stats.points': 1 });
+    await user.updateOne({ 'stats.points': 1 });
    const res = await user.post('/user/allocate?stat=con');
    await user.sync();
    expect(user.stats.con).to.equal(1);
--- a/Show More
+++ b/Show More