Bump mongoose from 9.6.3 to 9.9.1

[dependabot]

Bumps mongoose from 9.6.3 to 9.9.1.

Release notes

Sourced from mongoose's releases.

9.9.1 / 2026-07-31

• fix(query): avoid path collision when excluding subdocuments with nested select: false paths #12798
• types(model): support overriding schema-level lean with lean: false #16413

9.9.0 / 2026-07-30

• perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
• perf(model): improve insertMany() performance and general change tracking performance #16370
• perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
• perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
• types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

9.8.1 / 2026-07-27

• perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
• perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
• fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez
• perf: cache toString() results in array.unique to avoid redundant allocations #16390 vivek180905
• types: respect the _id option when inferring StandardSchema types #16402
• types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
• docs(guide): clarify strictQuery handling of filter paths not in the schema #16397 MuhammadFarhantahir

9.8.0 / 2026-07-20

• feat(schema): add strictRead option to filter or throw on unknown fields during document hydration #16345 #4279 GourabSingha
• feat: upgrade MongoDB Node.js driver to 7.5 #16391
• fix(subdocument): don't minimize empty document array elements to null #16393 #15336 #7322 WaleedAshraf
• fix(model): correctly handle version keys when bulkSave() inserts new documents #16386 #15800 AbdelrahmanHafez
• fix(cast): correctly cast object-shaped geo query values #16380 #16376 rajkumar0932
• fix(schema): avoid mutating shared setters when casting array query values #16372 #16364 yakubka
• fix(document): correctly handle excluded parent paths with optimistic concurrency #16367 #16054 AbdelrahmanHafez
• types(model): add pathsToSave to SaveOptions #16375 AbdelrahmanHafez
• types(model): support extra fields in hydrate() with strict: false #16374 #15940 AbdelrahmanHafez
• docs(populate): document missing options and perDocumentLimit for populate() #16371 Wnayar
• docs: expand sample() example to show sampling from a filtered subset #16369 Wnayar
• docs: fix typos, grammar, and documentation links #16389 LakshyaTyagi15

9.7.4 / 2026-07-06

• types(create): fix handling of nested objects typed as interfaces #16363 #16362
• types: correct this parameter handling for methods with versionKey #16344 #16046
• docs: add FAQ entry for querySrv ECONNREFUSED errors on Windows with mongodb+srv:// connections #16342 ajay naik

9.7.3 / 2026-06-26

• types(model): correct Model.validate() return type to Promise #16340 #16338
• types: use @​standard-schema/spec for StandardSchema types rather than inlining #16341 #16339

9.7.2 / 2026-06-22

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.9.1 / 2026-07-31

• fix(query): avoid path collision when excluding subdocuments with nested select: false paths #12798 BIGSUS24
• types(model): apply schema-level lean to find() #16413
• types(model): support overriding schema-level lean with lean: false #16413

9.9.0 / 2026-07-30

• perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
• perf(model): improve insertMany() performance and general change tracking performance #16370
• perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
• perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
• types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

8.24.2 / 2026-07-27

• fix(subdocument): don't minimize empty document array elements to null #16393 WaleedAshraf
• types: correct Model.validate() return type to Promise #16340 #16340 chatman-media

9.8.1 / 2026-07-27

• perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
• perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
• fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez
• perf: cache toString() results in array.unique to avoid redundant allocations #16390 vivek180905
• types: respect the _id option when inferring StandardSchema types #16402
• types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
• docs(guide): clarify strictQuery handling of filter paths not in the schema #16397 MuhammadFarhantahir

9.8.0 / 2026-07-20

• feat(schema): add strictRead option to filter or throw on unknown fields during document hydration #16345 #4279 GourabSingha
• feat: upgrade MongoDB Node.js driver to 7.5 #16391
• fix(subdocument): don't minimize empty document array elements to null #16393 #15336 #7322 WaleedAshraf
• fix(model): correctly handle version keys when bulkSave() inserts new documents #16386 #15800 AbdelrahmanHafez
• fix(cast): correctly cast object-shaped geo query values #16380 #16376 rajkumar0932
• fix(schema): avoid mutating shared setters when casting array query values #16372 #16364 yakubka
• fix(document): correctly handle excluded parent paths with optimistic concurrency #16367 #16054 AbdelrahmanHafez
• types(model): add pathsToSave to SaveOptions #16375 AbdelrahmanHafez
• types(model): support extra fields in hydrate() with strict: false #16374 #15940 AbdelrahmanHafez
• docs(populate): document missing options and perDocumentLimit for populate() #16371 Wnayar
• docs: expand sample() example to show sampling from a filtered subset #16369 Wnayar
• docs: fix typos, grammar, and documentation links #16389 LakshyaTyagi15

9.7.4 / 2026-07-06

• types(create): fix handling of nested objects typed as interfaces #16363 #16362
• types: correct this parameter handling for methods with versionKey #16344 #16046
• docs: add FAQ entry for querySrv ECONNREFUSED errors on Windows with mongodb+srv:// connections #16342 ajay naik

... (truncated)

Commits

• a510d89 chore: release 9.9.1
• 1287a37 Merge pull request #16414 from Automattic/vkarpov15/gh-16413
• cddce69 types: add lean: false overrides for remaining find operations
• 3d301c9 types(model): support lean: false overriding schema-level lean option re: #16413
• 95935a7 Merge pull request #16409 from BIGSUS24/fix/subdocument-select-false-projecti...
• e970583 types(model): handle { lean: true } schema option on Model.find() types
• c14e17e docs: add missing changelog entry
• 650c286 chore: release 9.9.0
• 0b4ef8a test: improve flakey test
• 2ccf221 Merge pull request #16412 from Automattic/vkarpov15/gh-16045-3
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[greptile-apps]

PR author is in the excluded authors list.

[codacy-production]

Not up to standards ⛔

🔴 Issues 2 medium

Alerts:

⚠ 2 issues (≤ 0 issues of at least minor severity)

Results:
2 new issues

Category	Results
Security	2 medium

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	✅ 0 (≤ 2 duplication)

View in Codacy

AI Reviewer: run a review on demand. To trigger the first review automatically, go to your organization or repository integration settings. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.