deps: bump mongoose from 8.21.0 to 9.1.0

[dependabot]

Bumps mongoose from 8.21.0 to 9.1.0.

Release notes

Sourced from mongoose's releases.

9.1.0 / 2025-12-29

• feat(model): make pathsToSave handle saving just a subpath of a modified path #15896
• feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870
• feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options #15917 #15915 #15912 AbdelrahmanHafez
• feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817
• fix: add support for typescript style enums #15914 #15913 mjfwebb
• types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15918 #15910

9.0.2 / 2025-12-17

• fix(model): trigger error post hook on bulkwrite when pre-hook throws an error #15882 AbdelrahmanHafez
• fix(document): use bitwise OR to accumulate version mode flags #15893 AbdelrahmanHafez
• types(queries): apply Mongoose casting to default MongoDB driver _id in RootFilterOperators #15891 #15887 #15779
• types(schema): correctly infer virtuals, methods on hydrated doc type from schema options #15892
• types: fixed this parameter type detection for methods with arguments #15885 I-Enderlord-I
• types: export InferRawDocTypeWithout_id to replicate Mongoose 8 InferRawDocType behavior #15815 #15814 JavaScriptBach
• docs: improve colors on dark mode #15879 AbdelrahmanHafez
• docs(model): add overwriteImmutable option #15884 AbdelrahmanHafez
• refactor: remove internal callbacks for buffering #15890

9.0.1 / 2025-12-05

• perf: use native Buffer.equals() for buffer comparison #15821 AbdelrahmanHafez
• fix(model): fix overwriteImmutable not working with timestamps: true, add overwriteImmutable types re #15781 #15819 AbdelrahmanHafez
• fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15782 #15781 jhaayushkumar
• fix(schema): Add enumValues property to Number enum for consistency with String enum #15824 AkaHarshit
• fix: incorrect variable bug in double casting #15849 #15848 lomesh2312
• fix: clear timeout in collection operations #15852 techcodie
• types(query+model): use function overrides instead of | Query<any, any> to support using Query as filter #15791 #15779
• docs(migrating_to_9): clarify removing next() from pre middleware #15813
• docs: add dark mode support and CSS improvements #15753
• docs: Mongoose compatibility page updates #15797 alexbevi
• docs: Add closing backticks to code block in migration guide #15783 isnifer
• docs: fix documentation link in connection.js #15804 salittle0

9.0.0 / 2025-11-21

• BREAKING CHANGE: drop support for callback-based pre middleware, e.g. next() in pre() hooks
• BREAKING CHANGE: update to MongoDB Node driver v7
• BREAKING CHANGE: make UUID schema type return bson UUIDs #15378
• BREAKING CHANGE: make findOne(null), find(null), etc. throw an error instead of returning first doc #15019 #14948
• BREAKING CHANGE: disallow update pipelines by default, require updatePipeline option #15586 #14424
• BREAKING CHANGE: call virtual ref function with subdoc, not top-level doc #14652 #12440 #12363
• BREAKING CHANGE(types): make create() and insertOne() params more strict, remove generics to prevent type inference #15587 #15355
• BREAKING CHANGE(types): make FilterQuery properties no longer resolve to any in TypeScript #15422
• BREAKING CHANGE(types): change this to HydratedDocument for default() and required(), HydratedDocument | Query for validate() #15020 #14696
• BREAKING CHANGE(types): make id a virtual in TypeScript rather than a property on Document base class #15572 #13079
• BREAKING CHANGE(types): consolidate RootQuerySelector, Condition, etc. types with MongoDB driver's #15593
• BREAKING CHANGE: asyncify update validators, SchemaType.prototype.doValidate(), save hooks for improved stack traces #15312

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.1.0 / 2025-12-29

• feat(model): make pathsToSave handle saving just a subpath of a modified path #15896
• feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870
• feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options #15917 #15915 #15912 AbdelrahmanHafez
• feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817
• fix: add support for typescript style enums #15914 #15913 mjfwebb
• types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15918 #15910

Commits

• 0f7834a chore: release 9.1.0
• e782cb6 types(models): support Mongoose query casting in AnyBulkWriteOperation filter...
• 98f2fbd Merge pull request #15917 from Automattic/fix/optimistic-concurrency-exclude
• 6e51c7b Merge branch '8.x'
• ea60ca3 fix(docs): clarify behavior of optimisticConcurrency in schema options
• 361e9c5 fix(test): update optimisticConcurrency describe block to include issue refer...
• 4e77da4 fix: address PR feedback
• 52fa4b6 docs(versioning): update docs to be more explicit about behavior of each opti...
• 70ed4f4 feat(versioning): add exclude option to optimisticConcurrency re #15915
• 7021b0c test(versioning): add tests for versioning exclude re #15915
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coveralls]

coverage: 86.076%. remained the same
when pulling 91850db on dependabot/npm_and_yarn/mongoose-9.1.0
into 44fba58 on default.