Update dependency mongoose to v9

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
mongoose (source)	^7.4.3 → ^9.0.0

---

Release Notes

Automattic/mongoose (mongoose)

v9.6.2

Compare Source

==================

• fix(document): correctly handle modified subpaths when parent path is unset after modifying #​16271 #​16252
• types: handle compiling with exactOptionalPropertyTypes #​16277 #​16273
• chore: align Node version docs and types #​16270 AbdelrahmanHafez

v9.6.1

Compare Source

==================

• types(objectid): fix _id getter helper on ObjectId #​16251 noseworthy

v9.6.0

Compare Source

==================

• feat: upgrade mongodb node driver to 7.2 #​16245
• feat(schematype): support allowNull option to disallow null values even if not required #​16237 #​15905
• types(query): make QueryFilter respect string unions and enums #​16242 #​16240
• types: export Projector and ArrayProjectionOperators #​16243 #​16235

v9.5.0

Compare Source

==================

• feat(debug): add timestamp option to debug output #​16216 rejunp
• feat(query): add cloneUpdate option to explicitly disable update cloning #​16230 #​16202
• feat(query): extend defaults query option to find() #​16226 sderrow
• fix(query): avoid cloning update until absolutely necessary to better support updates with __proto__ #​16230 #​16202
• fix(query): avoid treating documents with a $set() method as objects with a $set property when casting updates #​16230
• fix(queryHelpers): pass default options to discriminators #​16227 #​16226
• fix(document): handle including and excluding nested paths with optimistic concurrency #​16177 #​16054
• fix(model): throw ObjectParameterError in insertOne() if doc is not an object #​16221 IshitaSingh0822
• fix(cast): preserve reason in CastError message after setModel() #​16167 White-Devil2839
• perf(model): remove unnecessary clone in findOneAndUpdate() #​16230
• perf: use kareem 3.3.0 mongoosejs/kareem#45 #​16229
• chore: use TSTyche assertions #​16222 mrazauskas

v9.4.1

Compare Source

==================

• Revert "fix(setDefaultsOnInsert): run setters on default values during upsert" #​16218 #​16051

v9.4.0

Compare Source

==================

• perf(document+model): avoid parallel save error instantiation, simplify resetting atomics, streamline validation and collection handling
• feat(document): add $getChanges() alias, deprecate getChanges() #​15959 techcodie
• fix(schema): support toJSONSchema on unions #​16179
• fix(schema): implement validation for Union schemas and subdocuments techcodie
• fix(connection): snapshot Date in heartbeat handler and flush queue on recovery #​16183 andreialecu
• fix(model): use duck-typing with version check to validate the argument to useConnection() is actually a connection #​16098
• fix(setDefaultsOnInsert): run setters on default values during upsert #​16051 mahmoodhamdi
• fix(utils): properly compare Set objects in deepEqual KhanjarSingh
• fix(utils): wrap discriminator merge check in parentheses to fix precedence Necro-Rohan
• fix(schema): correct template literal in encryptionType error message Mridul012
• fix(schema): correct error when unsupported query operator with number #​16062
• fix(types): make MergeType and UnpackedIntersection distributive over union types techcodie
• types: add id to HydratedDocument virtuals by default unless explicitly set #​16178
• types(populate): use marker type to track populated vs depopulated type for perf
• types(populate): retain populated paths in toObject() and toJSON() unless depopulate: true set #​16085
• types(query): make TypeScript error on $and with unrecognized query operator
• chore: use TSTyche assertions mrazauskas
• docs(connection): remove references to useUnifiedTopology and fix backtick
• docs: fix typo 'retreiving' -> 'retrieving' in SchemaType getter JSDoc yogesh968
• docs: fix typos around 'retrieve' in schemaType and tests ayushshukla1807
• docs: fix typos in code comments Goldyvaiiii

v9.3.3

Compare Source

==================

• fix(schemaType): standardize to use MongooseError instead of plain Error #​16172 VIPAX-JIT
• types: make MergeType distributive to better support populate on models where the hydrated doc type is a union #​16101 #​16161
• docs: upgrade http:// links to https:// in connections.md #​16163 Puxhkar
• docs: fix typographical, grammatical errors & documentation clarity improvements #​16175 yogesh968
• docs: clarify multi-mongos support documentation for sharded clusters

v9.3.2

Compare Source

==================

• fix(mongoose): throw error when trying to set null or undefined as options #​16130 #​16140
• fix(cast): include array value in query filter error message #​16127 White-Devil2839
• fix(cast): replace assert.ok with descriptive Error in castNumber #​16110 mrsandy1965
• fix(connection): standardize throw new Error to MongooseError #​16142 techcodie
• fix(query): use MongooseError instead of Error #​16132 ace-tk
• docs: add production environment example for autoIndex #​16151 mrsandy1965
• docs: upgrade self-referencing http:// links to https:// #​16150 mrsandy1965
• docs: fix incorrect Double cast comment and upgrade insecure plugin link #​16148 mrsandy1965
• docs: fix redundant text and http link in installation section #​16146 Puxhkar
• docs: fix typo 'mutiple' → 'multiple' in queries.md #​16147 mrsandy1965
• docs: use HTTPS for external links in docs navigation #​16133 ace-tk
• docs: use HTTPS for external links in CONTRIBUTING and homepage #​16134 ace-tk
• docs(populate): replace removed mapReduce() API link #​16135 ace-tk
• docs(models): replace removed count() and mapReduce() references #​16123 White-Devil2839
• docs: fix broken count() and update() links in queries docs White-Devil2839
• docs: fix broken update() link in validation docs #​16121 White-Devil2839
• docs: update GitHub link to use https #​16120 White-Devil2839
• docs(documents): fix incorrect variable name in nullish coalescing example #​16119 White-Devil2839
• docs: fix missing quotes in populate path examples #​16118 White-Devil2839
• docs: fix missing comma in populate dynamic ref example #​16117 White-Devil2839
• docs: clarify that transaction rollback marks fields as modified to allow re-saving #​16112 ramanverse

v9.3.1

Compare Source

==================

• fix(model): handle passing string projection to hydrate() #​16082
• fix(model): fix bulkWrite() sorting #​16079 #​16080 pnkov
• fix(QueryCursor): fix wrong this context in QueryCursor close callback #​16104 techcodie
• types(schema): infer schema options correctly for model context in statics #​16046 #​16102
• types(schema): fix type definition for HydratedDocType in autoTypedVirtuals #​16083
• types(plugin): allow passing model with custom TStatics into Schema.prototype.plugin() #​16090 #​16086
• chore: use MongooseError instead of Error in schema, model, and aggregate #​15995 mahmoodhamdi
• docs(projection): clean up jsdoc for parseProjection()

v9.3.0

Compare Source

==================

• feat(schema): support discriminators option inline for better TypeScript support #​16053
• feat(aggregate): add pipelineForUnionWith() helper to allow reusing pipelines with $unionWith in TypeScript #​16033
• feat(setDefaultsOnInsert): pass query as context to default functions #​16041 #​16025
• fix: resolve deeply nested discriminator paths in arrayFilters #​16072 Yatin81
• fix(changeStream): emit ready on next tick to allow stream to initialize
• fix(connection): handle calling watch() on disconnected connection
• fix: remove references to mongodb option "promiseLibrary" hasezoey
• fix(model+query): backwards compatible validateBeforeSave handling and avoid TypeError in removeUnusedArrayFilters on nullish update
• perf(model): remove unnecessary overhead when saving new doc
• types(InferRawDocType): fall back to using InferRawDocType instead of pulling non-raw inferred doc type if EnforcedDocType not set #​16053
• types: add type constraints for Document#$model() and Document#model() mrazauskas
• docs: fix broken links and update MongoDB documentation links #​16037 hasezoey
• docs(contributing): update issue tracker links to Automattic org AkaHarshit

v9.2.4

Compare Source

==================

• types(models): allow unknown keys in subdocs while retaining autocomplete suggestions #​16048
• types(schema): fix issues related to defining timestamps and virtuals with methods and/or statics in schema options #​16052 #​16046
• docs: use lowercase primitive types in JSDoc and fix incorrect @returns declarations #​16036 #​16018
• docs(field-level-encryption): improve CSFLE docs with model registration guidance and schema definition example #​16065 #​16015

v9.2.3

Compare Source

==================

• types(model): make bulkSave() correctly take array of THydratedDocumentType #​16032

v9.2.2

Compare Source

==================

• fix(document): make pathsToSave filter all update operators and preserve unsaved state #​16027
• fix(setDefaultsOnInsert): check child filter paths before applying defaults, fix dot-notation handling, and prevent prototype pollution #​16031 #​16030
• fix(populate): make refPath work as a function, including map paths with $* #​16035 #​16028
• perf: optimize pathsToSave and indexed-path checks for subdocuments
• types: remove duplicate definition of UUIDToJSON type #​16029
• docs(field-level-encryption): clarify crypt_shared library usage and move extraOptions under autoEncryption #​16026 #​16015
• test(types): introduce TSTyche for type testing #​16024

v9.2.1

Compare Source

==================

• types(query): allow assigning QueryFilter to QueryFilter #​16020
• types: duplicate identifier 'UUIDToJSON' in mongoosejs 9.2.0 #​16023
• types: preserve subdocument toObject() field types when using virtuals + versionKey options #​16021 #​15965 AbdelrahmanHafez
• docs(mongoose): add missing options to mongoose.set() docs #​16019

v9.2.0

Compare Source

==================

• types(query): allow assigning QueryFilter to QueryFilter #​16020
• types: duplicate identifier 'UUIDToJSON' in mongoosejs 9.2.0 #​16023
• types: preserve subdocument toObject() field types when using virtuals + versionKey options #​16021 #​15965 AbdelrahmanHafez
• docs(mongoose): add missing options to mongoose.set() docs #​16019

v9.1.6

Compare Source

==================

• fix: handle other top-level query operators in sanitizeFilter
• fix(types): fix toObject() type inference with timestamps + virtuals #​15975 #​15965 AbdelrahmanHafez
• fix(populate): defer subpopulate until after match functions to avoid comparing populated subdocs #​15981 mongodb-js/mongoose-autopopulate#112
• fix(DocumentArray): correctly clone subdocument when updating document array #​15978 #​15973
• fix(documentArray): fix change tracking for documentArrays in nested maps #​15983 #​15970 AbdelrahmanHafez
• docs: clarify that you need to explicitly create timeseries collection before inserting document #​15990 #​15986

v9.1.5

Compare Source

==================

• fix(map): validate map subdocument when loaded with init #​15960 #​15957 AbdelrahmanHafez
• fix(discriminator): prevent indexes and callQueue duplication with shared nested schemas #​15974 #​15966 AbdelrahmanHafez
• fix(subdocuments): do not pass parent path on init #​15970 #​15969 #​15682 AbdelrahmanHafez
• types(inferrawdoctype): correct handling for subdocs and doc arrays #​15967 #​13772
• docs: improve grammar and clarity in TypeScript schema comments #​15971 harshsinghpujari

v9.1.4

Compare Source

==================

• fix: attach sessions to docs retrieved by cursor #​15953 #​15949 mjfwalsh
• fix(model): make hydrate() handle nested schema arrays #​15964 #​15956
• fix(clone): fix parent doc for map subdocuments and array subdocuments #​15958 #​15954 AbdelrahmanHafez
• fix: prevent crash when accessing nested paths on prototype #​15962 #​15961 som14062005

v9.1.3

Compare Source

==================

• fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig #​15941 #​15938
• fix(query): include preview of current and incoming update in error when merging normal update with pipeline #​15939 #​15928
• types(model): apply basic type casting to paths underneath subdocuments #​15948 #​15947
• types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members #​15942 #​15923
• docs(schema): expose "DocumentArrayElement" #​15590 hasezoey

v9.1.2

Compare Source

==================

• fix(subdocs): pass options to pre-save hooks for subdocs #​15921 #​15920 AbdelrahmanHafez
• perf(model): select only _id when checking document existence during save() #​15919 AbdelrahmanHafez

v9.1.1

Compare Source

==================

• fix(document): avoid 'Cannot mix array and object updates' on doc.updateOne() with pipeline #​15928
• docs: update default search version to 9.x #​15926 #​15925

v9.1.0

Compare Source

===================

• feat(model): make pathsToSave handle saving just a subpath of a modified path #​15896
• feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #​15908 #​15870
• feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options #​15917 #​15915 #​15912 AbdelrahmanHafez
• feat(document): add support for getAtomics() to allow custom container types to utilize atomics #​15817
• perf: optimize Object.keys() checks and optional chaining #​15865 AbdelrahmanHafez
• fix: add support for typescript style enums #​15914 #​15913 mjfwebb
• fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #​15904 #​15901
• types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #​15918 #​15910
• types: allow calling create() with TRawDocType for better generics support #​15903 #​15902
• types(document): add id virtual getter by default to HydrateDocument<> if TOverrides is Record<string, never> #​15906 #​15900
• docs(schema): add lean to list of schema options #​15907 #​15894 #​12081

v9.0.2

Compare Source

==================

• fix(model): trigger error post hook on bulkwrite when pre-hook throws an error #​15882 AbdelrahmanHafez
• fix(document): use bitwise OR to accumulate version mode flags #​15893 AbdelrahmanHafez
• types(queries): apply Mongoose casting to default MongoDB driver _id in RootFilterOperators #​15891 #​15887 #​15779
• types(schema): correctly infer virtuals, methods on hydrated doc type from schema options #​15892
• types: fixed this parameter type detection for methods with arguments #​15885 I-Enderlord-I
• types: export InferRawDocTypeWithout_id to replicate Mongoose 8 InferRawDocType behavior #​15815 #​15814 JavaScriptBach
• docs: improve colors on dark mode #​15879 AbdelrahmanHafez
• docs(model): add overwriteImmutable option #​15884 AbdelrahmanHafez
• refactor: remove internal callbacks for buffering #​15890

v9.0.1

Compare Source

==================

• perf: use native Buffer.equals() for buffer comparison #​15821 AbdelrahmanHafez
• fix(model): fix overwriteImmutable not working with timestamps: true, add overwriteImmutable types re #​15781 #​15819 AbdelrahmanHafez
• fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #​15782 #​15781 jhaayushkumar
• fix(schema): Add enumValues property to Number enum for consistency with String enum #​15824 AkaHarshit
• fix: incorrect variable bug in double casting #​15849 #​15848 lomesh2312
• fix: clear timeout in collection operations #​15852 techcodie
• types(query+model): use function overrides instead of | Query<any, any> to support using Query as filter #​15791 #​15779
• docs(migrating_to_9): clarify removing next() from pre middleware #​15813
• docs: add dark mode support and CSS improvements #​15753
• docs: Mongoose compatibility page updates #​15797 alexbevi
• docs: Add closing backticks to code block in migration guide #​15783 isnifer
• docs: fix documentation link in connection.js #​15804 salittle0

v9.0.0

Compare Source

==================

• BREAKING CHANGE: drop support for callback-based pre middleware, e.g. next() in pre() hooks
• BREAKING CHANGE: update to MongoDB Node driver v7
• BREAKING CHANGE: make UUID schema type return bson UUIDs #​15378
• BREAKING CHANGE: make findOne(null), find(null), etc. throw an error instead of returning first doc #​15019 #​14948
• BREAKING CHANGE: disallow update pipelines by default, require updatePipeline option #​15586 #​14424
• BREAKING CHANGE: call virtual ref function with subdoc, not top-level doc #​14652 #​12440 #​12363
• BREAKING CHANGE(types): make create() and insertOne() params more strict, remove generics to prevent type inference #​15587 #​15355
• BREAKING CHANGE(types): make FilterQuery properties no longer resolve to any in TypeScript #​15422
• BREAKING CHANGE(types): change this to HydratedDocument for default() and required(), HydratedDocument | Query for validate() #​15020 #​14696
• BREAKING CHANGE(types): make id a virtual in TypeScript rather than a property on Document base class #​15572 #​13079
• BREAKING CHANGE(types): consolidate RootQuerySelector, Condition, etc. types with MongoDB driver's #​15593
• BREAKING CHANGE: asyncify update validators, SchemaType.prototype.doValidate(), save hooks for improved stack traces #​15312
• BREAKING CHANGE: remove bson as direct dependency, use mongodb/lib/bson instead #​15576 #​15154
• BREAKING CHANGE: remove _executionStack, make validate() async function and call Kareem hooks directly vs through wrappers #​15298 #​14906
• BREAKING CHANGE: remove browser build, move to @​mongoosejs/browser instead #​15385 #​15296
• BREAKING CHANGE: remove schematype caster and casterConstructor properties in favor of embeddedSchemaType and Constructor #​15513 #​15179
• BREAKING CHANGE: adding missing pluralizations, fixing pluralization: virus -> viruses #​14247 ItsBradyDavis
• BREAKING CHANGE: remove connection noListener option #​15641 #​15640
• feat(types): add Schema.create() for TypeScript type inference #​15482 #​14954
• chore: remove examples directory #​15597

v8.23.1

Compare Source

8.23.1 / 2026-04-23

• fix(model): support sort option in Model.bulkWrite() updateOne and replaceOne operations #​16091 #​16079
• fix(setDefaultsOnInsert): check child filter paths before applying defaults (backport #​16031 to 8.x) #​16219 marklai1998
• fix(schema): always pass raw string value to error validators, only trim to 30 chars for maxlength validator #​16238 #​16236 #​15550 #​15571

v8.23.0

Compare Source

===================

• feat(document): add flattenUUIDs option to toObject() and toJSON() (backport #​15021 to 8.x)

v8.22.1

Compare Source

==================

• fix: handle other top-level query operators in sanitizeFilter
• fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #​15904 #​15901
• types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #​15910
• types: add toBSON() to documents #​15927

v8.22.0

Compare Source

8.22.0 / 2026-01-27

• feat(model): allow passing strict option to hydrate() #​15944 #​15940

v8.21.1

Compare Source

===================

• fix(clone): fix parent doc for map subdocuments and array subdocuments #​15958 AbdelrahmanHafez
• fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #​15904 #​15901
• fix: respect currentTime schema option in bulkWrite updates #​15976 sderrow
• types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #​15910
• types: add toBSON() to documents #​15927

v8.21.0

Compare Source

===================

• feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #​15908 #​15870
• feat(document): add support for getAtomics() to allow custom container types to utilize atomics #​15817
• fix: add support for typescript style enums #​15914 #​15913 mjfwebb

v8.20.4

Compare Source

===================

• fix(model): ensure $isDeleted is set after calling doc.deleteOne() successfully #​15898
• fix(document): use bitwise OR to accumulate version mode flags #​15893 #​15888 AbdelrahmanHafez

v8.20.3

Compare Source

===================

• perf: use Object.hasOwn instead of Object#hasOwnProperty #​15875 AbdelrahmanHafez
• fix: improve error when calling Document.prototype.init() with null/undefined #​15812 Vegapunk-debug
• types(schema): avoid treating paths with default: null as required #​15889
• types(schema): allow partial statics to schema.statics() #​15780

v8.20.2

Compare Source

===================

• fix(model): bump version if necessary after successful bulkSave() #​15809 #​15800
• fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #​15789 #​15782 #​15781
• types(schema): allow calling schema.static() with as TStatics #​15794 #​15780

v8.20.1

Compare Source

===================

• types: correct Model.schema type and fix unknown check for this param type in schema.methods #​15750 #​15693
• docs: add detailed loadClass() TypeScript usage guide #​15731 #​12813 Necro-Rohan
• docs: update version support documentation for Mongoose #​15761 ManmathX
• docs: add copy-to-clipboard feature for code blocks in docs #​15759 vedansha07

v8.20.0

Compare Source

===================

• feat: cast id parameter based on schema _id type in DocumentArray.id() #​15733 #​15725 #​15724 Lex-Ashu
• fix: pass parent schema to SchemaType constructors in interpretAsType to make implementing custom container types easier #​15700
• types(models): default _id type to ObjectId for Document #​15688 Catwallon
• docs: add FAQ entry about DivergentArrayError #​15743 Mario5T
• docs: update browser.md with Mongoose limitations #​15744 YashSharma64
• chore: add benchmark for large nested array documents (related to #​9588) #​15742 Kundan-CR7

v8.19.4

Compare Source

===================

• fix(schema): avoid throwing error on array of unions #​15720 #​15718
• fix: store original index on insertMany validation errors #​15735 Jadu07
• types: correct return type of discriminator to Model #​15726 twentytwo777
• docs: improve Next.js integration guide with comprehensive examples #​15730 adarsh-priydarshi-5646
• docs: add documentation for Union Schema Type #​15721 TechGenie-awake
• docs: removed the outdated callback and replaced them with async/await pattern #​15723 hk2166
• docs: fix lingering remove() call in statics docs #​15737 Gautam-Bharadwaj
• docs: fix inline doc typo in schematypes.d.ts #​15738 hagid786

v8.19.3

Compare Source

===================

• fix(model+plugins): correctly apply shard key on deleteOne() #​15705 #​15701
• fix(schema): correctly cache text indexes as 'text' not 1 #​15695
• types: make inferRawDocType correctly infer empty array type [] as any[] #​15704 #​15699

v8.19.2

Compare Source

===================

• perf(setDefaultsOnInsert): avoid computing all modified paths when running setDefaultsOnInsert and update validators, only calculate if there are defaults to set #​15691 #​15672
• fix: correct handling of relative vs absolute paths with maps and subdocuments #​15682 #​15678 #​15350
• ci: add publish script with provenance #​15684 #​15680

v8.19.1

Compare Source

===================

• perf: avoid getting all modified paths in update when checking if versionKey needs to be set [#​15677](https://redirect.github.com/Automattic/mongoo

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud