mongoose 4.1

Closes #22893.

Signed-off-by: Adam Vandenberg <flangy@gmail.com>