chore(deps): bump mongoose from 5.13.23 to 8.19.2 in /backend

Open dependabot[bot] opened this issue 2 months ago • 1 comments

Bumps mongoose from 5.13.23 to 8.19.2.

Release notes

8.19.2 / 2025-10-20

perf(setDefaultsOnInsert): avoid computing all modified paths when running setDefaultsOnInsert and update validators, only calculate if there are defaults to set #15691 #15672

fix: correct handling of relative vs absolute paths with maps and subdocuments #15682 #15678 #15350

ci: add publish script with provenance #15684 #15680

8.19.1 / 2025-10-06

perf: avoid getting all modified paths in update when checking if versionKey needs to be set #15677 #15672

perf: Avoid needless path translation #15679 orgads

fix(query): throw error if using update operator with modifier and no path #15670 #15642

types: avoid making FilterQuery a conditional type because of how typescript handles distributed conditional unions #15676 #15671

docs: update installation instructions #15675 aalok-y

8.19.0 / 2025-10-02

feat: upgrade mongodb driver to 6.20.0 #15651 #15656

feat(model): add virtuals option to Model.hydrate() to set virtuals #15638 #15627

fix(schema): handle casting array filters underneath maps of Mixed #15655 #15653

types: optimize InferRawDocType #15588 ssalbdivad

types(schema): add lean schema option to TypeScript types #15646 #15583 #10090

8.18.3 / 2025-09-29

fix(update): avoid throwing error if update has a top-level $addToSet with no path #15648 #15642

types(query): allow passing arbitrary options #15644 #15643

docs(connection+mongoose): correct mongodb option name user -> username #15650 #15647

test: add tests covering vector search and text search using Atlas CLI #15649 #15645

8.18.2 / 2025-09-22

fix(document): prevent $clone() from converting mongoose arrays into vanilla arrays #15633 #15625

fix(connection): use correct collection name for model when using useConnection() #15637

fix(connection): propagate changes to _lastHeartbeatAt to useDb() child connections #15640 #15635

types: fix schema property type definition in SchemaType #15631

8.18.1 / 2025-09-08

types: correct type inference for maps of maps #15602

types(model): copy base model statics onto discriminator model #15623 #15600

types: fix types for a string of enums #15605 ruiaraujo

types(SchemaOptions): disallow versionKey: true, which fails at runtime #15606

docs(typescript): add example explaining how to use query helper overrides for handling lean() #15622 #15601

docs(transactions): add note about nested transactions #15624

8.18.0 / 2025-08-22

feat(schema): support for union types #15574 #10894

fix: trim long strings in minLength and maxLength error messages and display the string length #15571 #15550

types(connection+collection): make BaseCollection and BaseConnection usable as values #15575 #15548

... (truncated)

Changelog

Sourced from mongoose's changelog.

8.19.2 / 2025-10-20

perf(setDefaultsOnInsert): avoid computing all modified paths when running setDefaultsOnInsert and update validators, only calculate if there are defaults to set #15691 #15672

fix: correct handling of relative vs absolute paths with maps and subdocuments #15682 #15678 #15350

ci: add publish script with provenance #15684 #15680

8.19.1 / 2025-10-06

perf: avoid getting all modified paths in update when checking if versionKey needs to be set #15677 #15672

perf: Avoid needless path translation #15679 orgads

fix(query): throw error if using update operator with modifier and no path #15670 #15642

types: avoid making FilterQuery a conditional type because of how typescript handles distributed conditional unions #15676 #15671

docs: update installation instructions #15675 aalok-y

8.19.0 / 2025-10-02

feat: upgrade mongodb driver to 6.20.0 #15651 #15656

feat(model): add virtuals option to Model.hydrate() to set virtuals #15638 #15627

fix(schema): handle casting array filters underneath maps of Mixed #15655 #15653

types: optimize InferRawDocType #15588 ssalbdivad

types(schema): add lean schema option to TypeScript types #15646 #15583 #10090

8.18.3 / 2025-09-29

fix(update): avoid throwing error if update has a top-level $addToSet with no path #15648 #15642

types(query): allow passing arbitrary options #15644 #15643

docs(connection+mongoose): correct mongodb option name user -> username #15650 #15647

test: add tests covering vector search and text search using Atlas CLI #15649 #15645

8.18.2 / 2025-09-22

fix(document): prevent $clone() from converting mongoose arrays into vanilla arrays #15633 #15625

fix(connection): use correct collection name for model when using useConnection() #15637

fix(connection): propagate changes to _lastHeartbeatAt to useDb() child connections #15640 #15635

types: fix schema property type definition in SchemaType #15631

8.18.1 / 2025-09-08

types: correct type inference for maps of maps #15602

types(model): copy base model statics onto discriminator model #15623 #15600

types: fix types for a string of enums #15605 ruiaraujo

types(SchemaOptions): disallow versionKey: true, which fails at runtime #15606

docs(typescript): add example explaining how to use query helper overrides for handling lean() #15622 #15601

docs(transactions): add note about nested transactions #15624

8.18.0 / 2025-08-22

feat(schema): support for union types #15574 #10894

fix: trim long strings in minLength and maxLength error messages and display the string length #15571 #15550

types(connection+collection): make BaseCollection and BaseConnection usable as values #15575 #15548

... (truncated)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

Nov 02 '25 16:11 dependabot[bot]

This would need special attention because it is a breaking change.

Nov 02 '25 16:11 gitfrosh