Skip to content

chore(deps): bump mongoose from 8.24.1 to 8.24.3 - #161

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mongoose-8.24.3
Open

chore(deps): bump mongoose from 8.24.1 to 8.24.3#161
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mongoose-8.24.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor

Bumps mongoose from 8.24.1 to 8.24.3.

Release notes

Sourced from mongoose's releases.

8.24.3

fix(query): apply sanitizeFilter on countDocuments and cursor()

8.24.2 / 2026-07-27

Changelog

Sourced from mongoose's changelog.

8.24.3 / 2026-08-10

  • fix(query): apply sanitizeFilter on countDocuments and cursor()

9.9.2 / 2026-08-10

  • fix(query): apply sanitizeFilter on countDocuments and cursor()
  • fix(document): support map wildcards in optimistic concurrency paths option #16436 #16383
  • fix(model): set document session in bulkSave() so transaction retries restore document state #16438 #16432 yogesh968
  • fix(connection): restore delete state across transaction retries #16435 #16433 snowyukitty
  • fix(schema): put enum on array elements and support the object enum form in toJSONSchema #16444 #16443 Jaybhade
  • perf(document): inline the type checks in $__hasOnlyPrimitiveValues() #14394 yogesh968
  • types(document): respect schema toObject and toJSON options #16431 #15594 samuelmbabhazi
  • types: import BSON from mongodb instead of bson #16434 #16434 orgads
  • docs(populate): document that skip needs sort to paginate reliably #16442 #7579
  • docs: remove unused jobs.pug #16437 #16430

9.9.1 / 2026-07-31

  • fix(query): avoid path collision when excluding subdocuments with nested select: false paths #12798 BIGSUS24
  • types(model): apply schema-level lean to find() #16413
  • types(model): support overriding schema-level lean with lean: false #16413

9.9.0 / 2026-07-30

  • perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
  • perf(model): improve insertMany() performance and general change tracking performance #16370
  • perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
  • perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
  • types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

8.24.2 / 2026-07-27

9.8.1 / 2026-07-27

  • perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
  • perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
  • fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez
  • perf: cache toString() results in array.unique to avoid redundant allocations #16390 vivek180905
  • types: respect the _id option when inferring StandardSchema types #16402
  • types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
  • docs(guide): clarify strictQuery handling of filter paths not in the schema #16397 MuhammadFarhantahir

9.8.0 / 2026-07-20

... (truncated)

Commits
  • bd28eef chore: release 8.24.3
  • 8b10d57 fix(query): apply sanitizeFilter on countDocuments and cursor()
  • 02543d0 chore: release 8.24.2
  • 43703f1 Merge pull request #16400 from AbdelrahmanHafez/fix/8.x-minimize-empty-array-...
  • ece3d41 fix(subdocument): don't minimize empty document array elements to null re #16393
  • 84889ba test(subdocument): repro empty document array elements minimized to null re #...
  • 8328ee7 fix(types): correct Model.validate() return type to Promise<TRawDocType>
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [mongoose](https://github.com/Automattic/mongoose) from 8.24.1 to 8.24.3.
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@8.24.1...8.24.3)

---
updated-dependencies:
- dependency-name: mongoose
  dependency-version: 8.24.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependabot dependencies Pull requests that update a dependency file web-team labels Aug 13, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 13, 2026 04:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file dependabot labels Aug 13, 2026
@dependabot
dependabot Bot requested review from falric, nsandstrom, perlan and wishicouldrememberthisusername and removed request for a team August 13, 2026 04:05
@dependabot dependabot Bot added the web-team label Aug 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies Pull requests that update a dependency file web-team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants