Bump mongoose from 9.6.3 to 9.9.2

[dependabot]

Bumps mongoose from 9.6.3 to 9.9.2.

Release notes

Sourced from mongoose's releases.

9.9.2 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()
• fix(document): support map wildcards in optimistic concurrency paths option #16436 #16383
• fix(model): set document session in bulkSave() so transaction retries restore document state #16438 #16432 yogesh968
• fix(connection): restore delete state across transaction retries #16435 #16433 snowyukitty
• fix(schema): put enum on array elements and support the object enum form in toJSONSchema #16444 #16443 Jaybhade
• perf(document): inline the type checks in $__hasOnlyPrimitiveValues() #14394 yogesh968
• types(document): respect schema toObject and toJSON options #16431 #15594 samuelmbabhazi
• types: import BSON from mongodb instead of bson #16434 #16434 orgads
• docs(populate): document that skip needs sort to paginate reliably #16442 #7579
• docs: remove unused jobs.pug #16437 #16430

9.9.1 / 2026-07-31

• fix(query): avoid path collision when excluding subdocuments with nested select: false paths #12798
• types(model): support overriding schema-level lean with lean: false #16413

9.9.0 / 2026-07-30

• perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
• perf(model): improve insertMany() performance and general change tracking performance #16370
• perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
• perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
• types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

9.8.1 / 2026-07-27

• perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
• perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
• fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez
• perf: cache toString() results in array.unique to avoid redundant allocations #16390 vivek180905
• types: respect the _id option when inferring StandardSchema types #16402
• types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
• docs(guide): clarify strictQuery handling of filter paths not in the schema #16397 MuhammadFarhantahir

9.8.0 / 2026-07-20

• feat(schema): add strictRead option to filter or throw on unknown fields during document hydration #16345 #4279 GourabSingha
• feat: upgrade MongoDB Node.js driver to 7.5 #16391
• fix(subdocument): don't minimize empty document array elements to null #16393 #15336 #7322 WaleedAshraf
• fix(model): correctly handle version keys when bulkSave() inserts new documents #16386 #15800 AbdelrahmanHafez
• fix(cast): correctly cast object-shaped geo query values #16380 #16376 rajkumar0932
• fix(schema): avoid mutating shared setters when casting array query values #16372 #16364 yakubka
• fix(document): correctly handle excluded parent paths with optimistic concurrency #16367 #16054 AbdelrahmanHafez
• types(model): add pathsToSave to SaveOptions #16375 AbdelrahmanHafez
• types(model): support extra fields in hydrate() with strict: false #16374 #15940 AbdelrahmanHafez
• docs(populate): document missing options and perDocumentLimit for populate() #16371 Wnayar
• docs: expand sample() example to show sampling from a filtered subset #16369 Wnayar

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.9.2 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()
• fix(document): support map wildcards in optimistic concurrency paths option #16436 #16383
• fix(model): set document session in bulkSave() so transaction retries restore document state #16438 #16432 yogesh968
• fix(connection): restore delete state across transaction retries #16435 #16433 snowyukitty
• fix(schema): put enum on array elements and support the object enum form in toJSONSchema #16444 #16443 Jaybhade
• perf(document): inline the type checks in $__hasOnlyPrimitiveValues() #14394 yogesh968
• types(document): respect schema toObject and toJSON options #16431 #15594 samuelmbabhazi
• types: import BSON from mongodb instead of bson #16434 #16434 orgads
• docs(populate): document that skip needs sort to paginate reliably #16442 #7579
• docs: remove unused jobs.pug #16437 #16430

9.9.1 / 2026-07-31

• fix(query): avoid path collision when excluding subdocuments with nested select: false paths #12798 BIGSUS24
• types(model): apply schema-level lean to find() #16413
• types(model): support overriding schema-level lean with lean: false #16413

9.9.0 / 2026-07-30

• perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
• perf(model): improve insertMany() performance and general change tracking performance #16370
• perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
• perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
• types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

8.24.2 / 2026-07-27

• fix(subdocument): don't minimize empty document array elements to null #16393 WaleedAshraf
• types: correct Model.validate() return type to Promise #16340 #16340 chatman-media

9.8.1 / 2026-07-27

• perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
• perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
• fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez
• perf: cache toString() results in array.unique to avoid redundant allocations #16390 vivek180905
• types: respect the _id option when inferring StandardSchema types #16402
• types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
• docs(guide): clarify strictQuery handling of filter paths not in the schema #16397 MuhammadFarhantahir

9.8.0 / 2026-07-20

• feat(schema): add strictRead option to filter or throw on unknown fields during document hydration #16345 #4279 GourabSingha
• feat: upgrade MongoDB Node.js driver to 7.5 #16391
• fix(subdocument): don't minimize empty document array elements to null #16393 #15336 #7322 WaleedAshraf
• fix(model): correctly handle version keys when bulkSave() inserts new documents #16386 #15800 AbdelrahmanHafez

... (truncated)

Commits

• f4f3750 fix tests
• c936643 chore: release 9.9.2
• ee919bc Merge branch 'vkarpov15/sanitizefilter-countdocs'
• c5df469 Merge pull request #16436 from Automattic/vkarpov15/gh-16383
• dae8236 docs(version-support): update latest versions and fix incorrect docs link for...
• 71e9814 fix lint
• 714dce4 Merge branch 'master' into vkarpov15/gh-16383
• e0901ed docs: add PathTrie comments
• b5003d3 fix(query): apply sanitizeFilter on countDocuments and cursor()
• d55ee9d Merge pull request #16438 from yogesh968/gh-16432
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[greptile-apps]

PR author is in the excluded authors list.

[codacy-production]

Not up to standards ⛔

🔴 Issues 2 medium

Alerts:

⚠ 2 issues (≤ 0 issues of at least minor severity)

Results:
2 new issues

Category	Results
Security	2 medium

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	✅ 0 (≤ 2 duplication)

View in Codacy

AI Reviewer: run a review on demand. To trigger the first review automatically, go to your organization or repository integration settings. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}