build(deps): bump mongoose from 8.20.3 to 9.3.0

[dependabot]

Bumps mongoose from 8.20.3 to 9.3.0.

Release notes

Sourced from mongoose's releases.

9.3.0 / 2026-03-10

• feat(schema): support discriminators option inline for better TypeScript support #16053
• feat(aggregate): add pipelineForUnionWith() helper to allow reusing pipelines with $unionWith in TypeScript #16033
• feat(setDefaultsOnInsert): pass query as context to default functions #16041 #16025
• fix: resolve deeply nested discriminator paths in arrayFilters #16072 Yatin81
• fix(changeStream): emit ready on next tick to allow stream to initialize
• fix(connection): handle calling watch() on disconnected connection
• fix: remove references to mongodb option "promiseLibrary" hasezoey
• fix(model+query): backwards compatible validateBeforeSave handling and avoid TypeError in removeUnusedArrayFilters on nullish update
• perf(model): remove unnecessary overhead when saving new doc
• types(InferRawDocType): fall back to using InferRawDocType instead of pulling non-raw inferred doc type if EnforcedDocType not set #16053
• types: add type constraints for Document#$model() and Document#model() mrazauskas
• docs: fix broken links and update MongoDB documentation links #16037 hasezoey
• docs(contributing): update issue tracker links to Automattic org AkaHarshit

9.2.4 / 2026-03-03

• types(models): allow unknown keys in subdocs while retaining autocomplete suggestions #16048
• types(schema): fix issues related to defining timestamps and virtuals with methods and/or statics in schema options #16052 #16046
• docs: use lowercase primitive types in JSDoc and fix incorrect @returns declarations #16036 #16018
• docs(field-level-encryption): improve CSFLE docs with model registration guidance and schema definition example #16065 #16015

9.2.3 / 2026-02-26

• types(model): make bulkSave() correctly take array of THydratedDocumentType #16032

9.2.2 / 2026-02-23

• fix(document): make pathsToSave filter all update operators and preserve unsaved state #16027
• fix(setDefaultsOnInsert): check child filter paths before applying defaults, fix dot-notation handling, and prevent prototype pollution #16031 #16030
• fix(populate): make refPath work as a function, including map paths with $* #16035 #16028
• perf: optimize pathsToSave and indexed-path checks for subdocuments
• types: remove duplicate definition of UUIDToJSON type #16029
• docs(field-level-encryption): clarify crypt_shared library usage and move extraOptions under autoEncryption #16026 #16015
• test(types): introduce TSTyche for type testing #16024

9.2.1 / 2026-02-11

• types(query): allow assigning QueryFilter<DocType> to QueryFilter<any> #16020
• types: duplicate identifier 'UUIDToJSON' in mongoosejs 9.2.0 #16023
• types: preserve subdocument toObject() field types when using virtuals + versionKey options #16021 #15965 AbdelrahmanHafez
• docs(mongoose): add missing options to mongoose.set() docs #16019

9.2.0 / 2026-02-09

• feat: add option to skip middleware #15883 #8768 AbdelrahmanHafez
• feat(model): delay "Duplicate schema index" warning until createIndexes runs to include model name in the warning #15979
• feat(model): add strict option to Model.hydrate(...) #15940 #15977
• feat(document): add flattenUUIDs option to toObject() and toJSON() #15864 #15021 AbdelrahmanHafez

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.3.0 / 2026-03-10

• feat(schema): support discriminators option inline for better TypeScript support #16053
• feat(aggregate): add pipelineForUnionWith() helper to allow reusing pipelines with $unionWith in TypeScript #16033
• feat(setDefaultsOnInsert): pass query as context to default functions #16041 #16025
• fix: resolve deeply nested discriminator paths in arrayFilters #16072 Yatin81
• fix(changeStream): emit ready on next tick to allow stream to initialize
• fix(connection): handle calling watch() on disconnected connection
• fix: remove references to mongodb option "promiseLibrary" hasezoey
• fix(model+query): backwards compatible validateBeforeSave handling and avoid TypeError in removeUnusedArrayFilters on nullish update
• perf(model): remove unnecessary overhead when saving new doc
• types(InferRawDocType): fall back to using InferRawDocType instead of pulling non-raw inferred doc type if EnforcedDocType not set #16053
• types: add type constraints for Document#$model() and Document#model() mrazauskas
• docs: fix broken links and update MongoDB documentation links #16037 hasezoey
• docs(contributing): update issue tracker links to Automattic org AkaHarshit

9.2.4 / 2026-03-03

• types(models): allow unknown keys in subdocs while retaining autocomplete suggestions #16048
• types(schema): fix issues related to defining timestamps and virtuals with methods and/or statics in schema options #16052 #16046
• docs: use lowercase primitive types in JSDoc and fix incorrect @returns declarations #16036 #16018
• docs(field-level-encryption): improve CSFLE docs with model registration guidance and schema definition example #16065 #16015

9.2.3 / 2026-02-26

• types(model): make bulkSave() correctly take array of THydratedDocumentType #16032

9.2.2 / 2026-02-23

• fix(document): make pathsToSave filter all update operators and preserve unsaved state #16027
• fix(setDefaultsOnInsert): check child filter paths before applying defaults, fix dot-notation handling, and prevent prototype pollution #16031 #16030
• fix(populate): make refPath work as a function, including map paths with $* #16035 #16028
• perf: optimize pathsToSave and indexed-path checks for subdocuments
• types: remove duplicate definition of UUIDToJSON type #16029
• docs(field-level-encryption): clarify crypt_shared library usage and move extraOptions under autoEncryption #16026 #16015
• test(types): introduce TSTyche for type testing #16024

9.2.1 / 2026-02-11

• types(query): allow assigning QueryFilter to QueryFilter #16020
• types: duplicate identifier 'UUIDToJSON' in mongoosejs 9.2.0 #16023
• types: preserve subdocument toObject() field types when using virtuals + versionKey options #16021 #15965 AbdelrahmanHafez
• docs(mongoose): add missing options to mongoose.set() docs #16019

9.2.0 / 2026-02-09

• feat: add option to skip middleware #15883 #8768 AbdelrahmanHafez
• feat(model): delay "Duplicate schema index" warning until createIndexes runs to include model name in the warning #15979
• feat(model): add strict option to Model.hydrate(...) #15940 #15977
• feat(document): add flattenUUIDs option to toObject() and toJSON() #15864 #15021 AbdelrahmanHafez

... (truncated)

Commits

• 7666bb8 chore: release 9.3.0
• 39feb64 Merge pull request #16078 from Automattic/9.3
• ac0701d Merge pull request #16081 from mrazauskas/add-type-constraints
• f55c116 Merge pull request #16077 from Automattic/vkarpov15/gh-16053
• bd6f64e fix lint
• e5237eb Update test/types/inferrawdoctype.test.ts
• 1e9817f fix: add adds type constraints for Document#$model() and Document#model()
• f233efd address code review comments
• 31765bb Merge branch 'master' into 9.3
• 2963f59 Merge branch '9.3' into vkarpov15/gh-16053
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for mongoose since your current version.

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
mongoose	[< 8.3, > 8.2.2]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #2628.