fix(deps): update dependency mongoose to v9

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
mongoose (source)	^8.0.0 → ^9.0.0

---

Release Notes

Automattic/mongoose (mongoose)

v9.9.4

Compare Source

==================

• fix(query): set strictQuery and strict on _mongooseOptions consistently #​16451 #​16447
• fix(hydration): use the doc model for looking up a ref #​16453 rawmind
• fix(schema): drop the map values subpath when removing a map path #​16457 rawmind
• fix(schema): remove a map that lives under a nested path #​16461 #​16457 luantaraschi
• fix(schema): do not repeat null in a toJSONSchema enum that already lists null #​16456 luantaraschi
• fix(schema): clone a document array element with its own constructor signature #​16463 #​16462 luantaraschi
• fix(schema): keep the map value schematype a single object when cloning #​16473 luantaraschi
• fix(schema): clarify duplicate index warning to note index is not created #​16476 vjymisal0
• perf(model): index bulkSave write errors by document id #​16474 yoominho91
• docs: add Atlas Vector Search and Atlas Search documentation #​16395
• docs: fix dead MongoDB driver Collection link #​16458 rajanpanth

v9.9.3

Compare Source

==================

• perf(document): cache projection metadata and avoid scanning all projected paths for flat projections #​16439 #​16407 #​16373 yogesh968
• fix(cast): reject arrays when casting to Int32 or Double #​16446 rajanpanth
• docs: document new/returnOriginal deprecation from 9.2.0 #​16449 #​16008 #​15972 alimughal95
• docs(schematypes): clarify that array default applies to the level it is declared on #​16441 #​9232

v9.9.2

Compare Source

==================

• fix(query): apply sanitizeFilter on countDocuments and cursor()
• fix(document): support map wildcards in optimistic concurrency paths option #​16436 #​16383
• fix(model): set document session in bulkSave() so transaction retries restore document state #​16438 #​16432 yogesh968
• fix(connection): restore delete state across transaction retries #​16435 #​16433 snowyukitty
• fix(schema): put enum on array elements and support the object enum form in toJSONSchema #​16444 #​16443 Jaybhade
• perf(document): inline the type checks in $__hasOnlyPrimitiveValues() #​14394 yogesh968
• types(document): respect schema toObject and toJSON options #​16431 #​15594 samuelmbabhazi
• types: import BSON from mongodb instead of bson #​16434
  #​16434 orgads
• docs(populate): document that skip needs sort to paginate reliably #​16442 #​7579
• docs: remove unused jobs.pug #​16437 #​16430

v9.9.1

Compare Source

==================

• fix(query): avoid path collision when excluding subdocuments with nested select: false paths #​12798 BIGSUS24
• types(model): apply schema-level lean to find() #​16413
• types(model): support overriding schema-level lean with lean: false #​16413

v9.9.0

Compare Source

==================

• perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #​16407 #​16373 #​16385
• perf(model): improve insertMany() performance and general change tracking performance #​16370
• perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #​16411
• perf: improve toObject() performance #​16408 #​16405 #​16378 #​14394 BIGSUS24
• types: add discriminator key to each member of embedded discriminator enum- #​16412 #​16045

v9.8.1

Compare Source

==================

• perf(document): avoid rebuilding modified paths during required path validation #​16379 xianjianlf2
• perf(document): avoid clearing the required paths cache on every document instantiation #​16404 #​16377
• fix(query): reject update modifiers without paths #​16387 AbdelrahmanHafez
• perf: cache toString() results in array.unique to avoid redundant allocations #​16390 vivek180905
• types: respect the _id option when inferring StandardSchema types #​16402
• types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
• docs(guide): clarify strictQuery handling of filter paths not in the schema #​16397 MuhammadFarhantahir

v9.8.0

Compare Source

==================

• feat(schema): add strictRead option to filter or throw on unknown fields during document hydration #​16345 #​4279 GourabSingha
• feat: upgrade MongoDB Node.js driver to 7.5 #​16391
• fix(subdocument): don't minimize empty document array elements to null #​16393 #​15336 #​7322 WaleedAshraf
• fix(model): correctly handle version keys when bulkSave() inserts new documents #​16386 #​15800 AbdelrahmanHafez
• fix(cast): correctly cast object-shaped geo query values #​16380 #​16376 rajkumar0932
• fix(schema): avoid mutating shared setters when casting array query values #​16372 #​16364 yakubka
• fix(document): correctly handle excluded parent paths with optimistic concurrency #​16367 #​16054 AbdelrahmanHafez
• types(model): add pathsToSave to SaveOptions #​16375 AbdelrahmanHafez
• types(model): support extra fields in hydrate() with strict: false #​16374 #​15940 AbdelrahmanHafez
• docs(populate): document missing options and perDocumentLimit for populate() #​16371 Wnayar
• docs: expand sample() example to show sampling from a filtered subset #​16369 Wnayar
• docs: fix typos, grammar, and documentation links #​16389 LakshyaTyagi15

v9.7.4

Compare Source

==================

• types(create): fix handling of nested objects typed as interfaces #​16363 #​16362
• types: correct this parameter handling for methods with versionKey #​16344 #​16046
• docs: add FAQ entry for querySrv ECONNREFUSED errors on Windows with mongodb+srv:// connections #​16342 ajay naik

v9.7.3

Compare Source

==================

• types(model): correct Model.validate() return type to Promise #​16340 #​16338
• types: use @​standard-schema/spec for StandardSchema types rather than inlining #​16341 #​16339

v9.7.2

Compare Source

==================

• fix(documentarray): reindex subdocs after array reordering and removal so subsequent nested changes save using the correct path #​16282 AbdelrahmanHafez
• fix(document): avoid accessing special properties in Document.prototype.get()
• fix(schema): only return own properties in schematype lookups and disallow setting schema paths under special properties
• docs: update homepage sponsor layout

v9.7.1

Compare Source

==================

• perf(document+model): improve save performance by avoiding unnecessary promise allocations and reducing path/default/dirty-state overhead #​16331
• fix(schema): include ObjectId regex pattern in toJSONSchema() output #​16335 #​16334 AbdelrahmanHafez
• fix(populate): split populate into separate queries per document if the resulting $in filter has more than 50k elements to reduce risk of BSON size errors #​16333 #​5890
• docs: add assistant sidebar with MongoDB Knowledge integration #​16311 #​16283
• docs: update docs copy buttons, edit links, homepage alignment, and llms.txt generation #​16326 #​16327 #​16329

v9.7.0

Compare Source

==================

• feat: add Node.js TracingChannel support for APM instrumentation #​16275 #​16105 logaretm
• feat(model): add standard schema adapter for models #​16308 #​16280
• fix(cursor): avoid waiting on buffering to run aggregation middleware #​16289 #​16284
• fix(document): throw error if overwriting array selected with $slice #​16313 #​2432
• fix(schema): remove validateSync() union fallback #​16310 #​16291 AbdelrahmanHafez
• types: cast primitive types within unions when applying create casting #​16320 #​16316
• docs: add llms.txt #​16312 #​15687
• docs: rewrite documents docs #​16298
• docs(model): clarify some details on model.validate() casting #​16308 #​16280
• docs(findOneAndUpdate): clarify update handling of undefined #​16299
• docs(model): fix link to be absolute #​16321 hasezoey

v9.6.3

Compare Source

==================

• fix(clone): isolate cloned arrays from source documents #​16281 AbdelrahmanHafez
• fix(update): preserve user-provided $setOnInsert.createdAt with overwriteImmutable: true #​16278 #​15781 AbdelrahmanHafez
• fix(schema): always pass raw string value to error validators, only trim to 30 chars for maxlength validator #​16238 #​16236 #​15550 #​15571
• types: add $percentile to TypeScript aggregation expression types #​16290 #​16288
• docs: update default pool sizes on createConnection() #​16295 torbiak-samdesk
• docs: improve code block copy button behavior and sidebar scrolling #​16294 DraXx-Van
• docs: remove broken link to deleted schema example #​16297 kaseken

v9.6.2

Compare Source

==================

• fix(document): correctly handle modified subpaths when parent path is unset after modifying #​16271 #​16252
• types: handle compiling with exactOptionalPropertyTypes #​16277 #​16273
• chore: align Node version docs and types #​16270 AbdelrahmanHafez

v9.6.1

Compare Source

==================

• types(objectid): fix _id getter helper on ObjectId #​16251 noseworthy

v9.6.0

Compare Source

==================

• feat: upgrade mongodb node driver to 7.2 #​16245
• feat(schematype): support allowNull option to disallow null values even if not required #​16237 #​15905
• types(query): make QueryFilter respect string unions and enums #​16242 #​16240
• types: export Projector and ArrayProjectionOperators #​16243 #​16235

v9.5.0

Compare Source

==================

• feat(debug): add timestamp option to debug output #​16216 rejunp
• feat(query): add cloneUpdate option to explicitly disable update cloning #​16230 #​16202
• feat(query): extend defaults query option to find() #​16226 sderrow
• fix(query): avoid cloning update until absolutely necessary to better support updates with __proto__ #​16230 #​16202
• fix(query): avoid treating documents with a $set() method as objects with a $set property when casting updates #​16230
• fix(queryHelpers): pass default options to discriminators #​16227 #​16226
• fix(document): handle including and excluding nested paths with optimistic concurrency #​16177 #​16054
• fix(model): throw ObjectParameterError in insertOne() if doc is not an object #​16221 IshitaSingh0822
• fix(cast): preserve reason in CastError message after setModel() #​16167 White-Devil2839
• perf(model): remove unnecessary clone in findOneAndUpdate() #​16230
• perf: use kareem 3.3.0 mongoosejs/kareem#45 #​16229
• chore: use TSTyche assertions #​16222 mrazauskas

v9.4.1

Compare Source

==================

• Revert "fix(setDefaultsOnInsert): run setters on default values during upsert" #​16218 #​16051

v9.4.0

Compare Source

==================

• perf(document+model): avoid parallel save error instantiation, simplify resetting atomics, streamline validation and collection handling
• feat(document): add $getChanges() alias, deprecate getChanges() #​15959 techcodie
• fix(schema): support toJSONSchema on unions #​16179
• fix(schema): implement validation for Union schemas and subdocuments techcodie
• fix(connection): snapshot Date in heartbeat handler and flush queue on recovery #​16183 andreialecu
• fix(model): use duck-typing with version check to validate the argument to useConnection() is actually a connection #​16098
• fix(setDefaultsOnInsert): run setters on default values during upsert #​16051 mahmoodhamdi
• fix(utils): properly compare Set objects in deepEqual KhanjarSingh
• fix(utils): wrap discriminator merge check in parentheses to fix precedence Necro-Rohan
• fix(schema): correct template literal in encryptionType error message Mridul012
• fix(schema): correct error when unsupported query operator with number #​16062
• fix(types): make MergeType and UnpackedIntersection distributive over union types techcodie
• types: add id to HydratedDocument virtuals by default unless explicitly set #​16178
• types(populate): use marker type to track populated vs depopulated type for perf
• types(populate): retain populated paths in toObject() and toJSON() unless depopulate: true set #​16085
• types(query): make TypeScript error on $and with unrecognized query operator
• chore: use TSTyche assertions mrazauskas
• docs(connection): remove references to useUnifiedTopology and fix backtick
• docs: fix typo 'retreiving' -> 'retrieving' in SchemaType getter JSDoc yogesh968
• docs: fix typos around 'retrieve' in schemaType and tests ayushshukla1807
• docs: fix typos in code comments Goldyvaiiii

v9.3.3

Compare Source

==================

• fix(schemaType): standardize to use MongooseError instead of plain Error #​16172 VIPAX-JIT
• types: make MergeType distributive to better support populate on models where the hydrated doc type is a union #​16101 #​16161
• docs: upgrade http:// links to https:// in connections.md #​16163 Puxhkar
• docs: fix typographical, grammatical errors & documentation clarity improvements #​16175 yogesh968
• docs: clarify multi-mongos support documentation for sharded clusters

v9.3.2

Compare Source

==================

• fix(mongoose): throw error when trying to set null or undefined as options #​16130 #​16140
• fix(cast): include array value in query filter error message #​16127 White-Devil2839
• fix(cast): replace assert.ok with descriptive Error in castNumber #​16110 mrsandy1965
• fix(connection): standardize throw new Error to MongooseError #​16142 techcodie
• fix(query): use MongooseError instead of Error #​16132 ace-tk
• docs: add production environment example for autoIndex #​16151 mrsandy1965
• docs: upgrade self-referencing http:// links to https:// #​16150 mrsandy1965
• docs: fix incorrect Double cast comment and upgrade insecure plugin link #​16148 mrsandy1965
• docs: fix redundant text and http link in installation section #​16146 Puxhkar
• docs: fix typo 'mutiple' → 'multiple' in queries.md #​16147 mrsandy1965
• docs: use HTTPS for external links in docs navigation #​16133 ace-tk
• docs: use HTTPS for external links in CONTRIBUTING and homepage #​16134 ace-tk
• docs(populate): replace removed mapReduce() API link #​16135 ace-tk
• docs(models): replace removed count() and mapReduce() references #​16123 White-Devil2839
• docs: fix broken count() and update() links in queries docs White-Devil2839
• docs: fix broken update() link in validation docs #​16121 White-Devil2839
• docs: update GitHub link to use https #​16120 White-Devil2839
• docs(documents): fix incorrect variable name in nullish coalescing example #​16119 White-Devil2839
• docs: fix missing quotes in populate path examples #​16118 White-Devil2839
• docs: fix missing comma in populate dynamic ref example #​16117 White-Devil2839
• docs: clarify that transaction rollback marks fields as modified to allow re-saving #​16112 ramanverse

v9.3.1

Compare Source

==================

• fix(model): handle passing string projection to hydrate() #​16082
• fix(model): fix bulkWrite() sorting #​16079 #​16080 pnkov
• fix(QueryCursor): fix wrong this context in QueryCursor close callback #​16104 techcodie
• types(schema): infer schema options correctly for model context in statics #​16046 #​16102
• types(schema): fix type definition for HydratedDocType in autoTypedVirtuals #​16083
• types(plugin): allow passing model with custom TStatics into Schema.prototype.plugin() #​16090 #​16086
• chore: use MongooseError instead of Error in schema, model, and aggregate #​15995 mahmoodhamdi
• docs(projection): clean up jsdoc for parseProjection()

v9.3.0

Compare Source

==================

• feat(schema): support discriminators option inline for better TypeScript support #​16053
• feat(aggregate): add pipelineForUnionWith() helper to allow reusing pipelines with $unionWith in TypeScript #​16033
• feat(setDefaultsOnInsert): pass query as context to default functions #​16041 #​16025
• fix: resolve deeply nested discriminator paths in arrayFilters #​16072 Yatin81
• fix(changeStream): emit ready on next tick to allow stream to initialize
• fix(connection): handle calling watch() on disconnected connection
• fix: remove references to mongodb option "promiseLibrary" hasezoey
• fix(model+query): backwards compatible validateBeforeSave handling and avoid TypeError in removeUnusedArrayFilters on nullish update
• perf(model): remove unnecessary overhead when saving new doc
• types(InferRawDocType): fall back to using InferRawDocType instead of pulling non-raw inferred doc type if EnforcedDocType not set #​16053
• types: add type constraints for Document#$model() and Document#model() mrazauskas
• docs: fix broken links and update MongoDB documentation links #​16037 hasezoey
• docs(contributing): update issue tracker links to Automattic org AkaHarshit

v9.2.4

Compare Source

==================

• types(models): allow unknown keys in subdocs while retaining autocomplete suggestions #​16048
• types(schema): fix issues related to defining timestamps and virtuals with methods and/or statics in schema options #​16052 #​16046
• docs: use lowercase primitive types in JSDoc and fix incorrect @returns declarations #​16036 #​16018
• docs(field-level-encryption): improve CSFLE docs with model registration guidance and schema definition example #​16065 #​16015

v9.2.3

Compare Source

==================

• types(model): make bulkSave() correctly take array of THydratedDocumentType #​16032

v9.2.2

Compare Source

==================

• fix(document): make pathsToSave filter all update operators and preserve unsaved state #​16027
• fix(setDefaultsOnInsert): check child filter paths before applying defaults, fix dot-notation handling, and prevent prototype pollution #​16031 #​16030
• fix(populate): make refPath work as a function, including map paths with $* #​16035 #​16028
• perf: optimize pathsToSave and indexed-path checks for subdocuments
• types: remove duplicate definition of UUIDToJSON type #​16029
• docs(field-level-encryption): clarify crypt_shared library usage and move extraOptions under autoEncryption #​16026 #​16015
• test(types): introduce TSTyche for type testing #​16024

v9.2.1

Compare Source

==================

• types(query): allow assigning QueryFilter to QueryFilter #​16020
• types: duplicate identifier 'UUIDToJSON' in mongoosejs 9.2.0 #​16023
• types: preserve subdocument toObject() field types when using virtuals + versionKey options #​16021 #​15965 AbdelrahmanHafez
• docs(mongoose): add missing options to mongoose.set() docs #​16019

v9.2.0

Compare Source

==================

• types(query): allow assigning QueryFilter to QueryFilter #​16020
• types: duplicate identifier 'UUIDToJSON' in mongoosejs 9.2.0 #​16023
• types: preserve subdocument toObject() field types when using virtuals + versionKey options #​16021 #​15965 AbdelrahmanHafez
• docs(mongoose): add missing options to mongoose.set() docs #​16019

v9.1.6

Compare Source

==================

• fix: handle other top-level query operators in sanitizeFilter
• fix(types): fix toObject() type inference with timestamps + virtuals #​15975 #​15965 AbdelrahmanHafez
• fix(populate): defer subpopulate until after match functions to avoid comparing populated subdocs #​15981 mongodb-js/mongoose-autopopulate#112
• fix(DocumentArray): correctly clone subdocument when updating document array #​15978 #​15973
• fix(documentArray): fix change tracking for documentArrays in nested maps #​15983 #​15970 AbdelrahmanHafez
• docs: clarify that you need to explicitly create timeseries collection before inserting document #​15990 #​15986

v9.1.5

Compare Source

==================

• fix(map): validate map subdocument when loaded with init #​15960 #​15957 AbdelrahmanHafez
• fix(discriminator): prevent indexes and callQueue duplication with shared nested schemas #​15974 #​15966 AbdelrahmanHafez
• fix(subdocuments): do not pass parent path on init #​15970 #​15969 #​15682 AbdelrahmanHafez
• types(inferrawdoctype): correct handling for subdocs and doc arrays #​15967 #​13772
• docs: improve grammar and clarity in TypeScript schema comments #​15971 harshsinghpujari

v9.1.4

Compare Source

==================

• fix: attach sessions to docs retrieved by cursor #​15953 #​15949 mjfwalsh
• fix(model): make hydrate() handle nested schema arrays #​15964 #​15956
• fix(clone): fix parent doc for map subdocuments and array subdocuments #​15958 #​15954 AbdelrahmanHafez
• fix: prevent crash when accessing nested paths on prototype #​15962 #​15961 som14062005

v9.1.3

Compare Source

==================

• fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig #​15941 #​15938
• fix(query): include preview of current and incoming update in error when merging normal update with pipeline #​15939 #​15928
• types(model): apply basic type casting to paths underneath subdocuments #​15948 #​15947
• types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members #​15942 #​15923
• docs(schema): expose "DocumentArrayElement" #​15590 hasezoey

v9.1.2

Compare Source

==================

• fix(subdocs): pass options to pre-save hooks for subdocs #​15921 #​15920 AbdelrahmanHafez
• perf(model): select only _id when checking document existence during save() #​15919 AbdelrahmanHafez

v9.1.1

Compare Source

==================

• fix(document): avoid 'Cannot mix array and object updates' on doc.updateOne() with pipeline #​15928
• docs: update default search version to 9.x #​15926 #​15925

v9.1.0

Compare Source

===================

• feat(model): make pathsToSave handle saving just a subpath of a modified path #​15896
• feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #​15908 #​15870
• feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options #​15917 #​15915 #​15912 AbdelrahmanHafez
• feat(document): add support for getAtomics() to allow custom container types to utilize atomics #​15817
• perf: optimize Object.keys() checks and optional chaining #​15865 AbdelrahmanHafez
• fix: add support for typescript style enums #​15914 #​15913 mjfwebb
• fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #​15904 #​15901
• types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #​15918 #​15910
• types: allow calling create() with TRawDocType for better generics support #​15903 #​15902
• types(document): add id virtual getter by default to HydrateDocument<> if TOverrides is Record<string, never> #​15906 #​15900
• docs(schema): add lean to list of schema options #​15907 #​15894 #​12081

v9.0.2

Compare Source

==================

• fix(model): trigger error post hook on bulkwrite when pre-hook throws an error #​15882 AbdelrahmanHafez
• fix(document): use bitwise OR to accumulate version mode flags #​15893 AbdelrahmanHafez
• types(queries): apply Mongoose casting to default MongoDB driver _id in RootFilterOperators #​15891 #​15887 #​15779
• types(schema): correctly infer virtuals, methods on hydrated doc type from schema options #​15892
• types: fixed this parameter type detection for methods with arguments #​15885 I-Enderlord-I
• types: export InferRawDocTypeWithout_id to replicate Mongoose 8 InferRawDocType behavior #​15815 #​15814 [JavaScriptBach](https://redir

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: 08-node-express-uploading/package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: multer-storage-cloudinary@4.0.0
npm error Found: cloudinary@2.7.0
npm error node_modules/cloudinary
npm error   cloudinary@"2.7.0" from the root project
npm error
npm error Could not resolve dependency:
npm error peer cloudinary@"^1.21.0" from multer-storage-cloudinary@4.0.0
npm error node_modules/multer-storage-cloudinary
npm error   multer-storage-cloudinary@"4.0.0" from the root project
npm error
npm error Conflicting peer dependency: cloudinary@1.41.3
npm error node_modules/cloudinary
npm error   peer cloudinary@"^1.21.0" from multer-storage-cloudinary@4.0.0
npm error   node_modules/multer-storage-cloudinary
npm error     multer-storage-cloudinary@"4.0.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-08-25T21_14_58_377Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-08-25T21_14_58_377Z-debug-0.log