chore(deps): bump mongoose from 9.7.4 to 9.9.3

[dependabot]

Bumps mongoose from 9.7.4 to 9.9.3.

Release notes

Sourced from mongoose's releases.

9.9.3 / 2026-08-17

• perf(document): cache projection metadata and avoid scanning all projected paths for flat projections #16439 #16407 #16373 yogesh968
• fix(cast): reject arrays when casting to Int32 or Double #16446 rajanpanth
• docs: document new/returnOriginal deprecation from 9.2.0 #16449 #16008 #15972 alimughal95
• docs(schematypes): clarify that array default applies to the level it is declared on #16441 #9232

9.9.2 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()
• fix(document): support map wildcards in optimistic concurrency paths option #16436 #16383
• fix(model): set document session in bulkSave() so transaction retries restore document state #16438 #16432 yogesh968
• fix(connection): restore delete state across transaction retries #16435 #16433 snowyukitty
• fix(schema): put enum on array elements and support the object enum form in toJSONSchema #16444 #16443 Jaybhade
• perf(document): inline the type checks in $__hasOnlyPrimitiveValues() #14394 yogesh968
• types(document): respect schema toObject and toJSON options #16431 #15594 samuelmbabhazi
• types: import BSON from mongodb instead of bson #16434 #16434 orgads
• docs(populate): document that skip needs sort to paginate reliably #16442 #7579
• docs: remove unused jobs.pug #16437 #16430

9.9.1 / 2026-07-31

• fix(query): avoid path collision when excluding subdocuments with nested select: false paths #12798
• types(model): support overriding schema-level lean with lean: false #16413

9.9.0 / 2026-07-30

• perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
• perf(model): improve insertMany() performance and general change tracking performance #16370
• perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
• perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
• types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

9.8.1 / 2026-07-27

• perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
• perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
• fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez
• perf: cache toString() results in array.unique to avoid redundant allocations #16390 vivek180905
• types: respect the _id option when inferring StandardSchema types #16402
• types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
• docs(guide): clarify strictQuery handling of filter paths not in the schema #16397 MuhammadFarhantahir

9.8.0 / 2026-07-20

• feat(schema): add strictRead option to filter or throw on unknown fields during document hydration #16345 #4279 GourabSingha
• feat: upgrade MongoDB Node.js driver to 7.5 #16391
• fix(subdocument): don't minimize empty document array elements to null #16393 #15336 #7322 WaleedAshraf
• fix(model): correctly handle version keys when bulkSave() inserts new documents #16386 #15800 AbdelrahmanHafez

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.9.3 / 2026-08-17

• perf(document): cache projection metadata and avoid scanning all projected paths for flat projections #16439 #16407 #16373 yogesh968
• fix(cast): reject arrays when casting to Int32 or Double #16446 rajanpanth
• docs: document new/returnOriginal deprecation from 9.2.0 #16449 #16008 #15972 alimughal95
• docs(schematypes): clarify that array default applies to the level it is declared on #16441 #9232

8.24.3 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()

9.9.2 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()
• fix(document): support map wildcards in optimistic concurrency paths option #16436 #16383
• fix(model): set document session in bulkSave() so transaction retries restore document state #16438 #16432 yogesh968
• fix(connection): restore delete state across transaction retries #16435 #16433 snowyukitty
• fix(schema): put enum on array elements and support the object enum form in toJSONSchema #16444 #16443 Jaybhade
• perf(document): inline the type checks in $__hasOnlyPrimitiveValues() #14394 yogesh968
• types(document): respect schema toObject and toJSON options #16431 #15594 samuelmbabhazi
• types: import BSON from mongodb instead of bson #16434 #16434 orgads
• docs(populate): document that skip needs sort to paginate reliably #16442 #7579
• docs: remove unused jobs.pug #16437 #16430

9.9.1 / 2026-07-31

• fix(query): avoid path collision when excluding subdocuments with nested select: false paths #12798 BIGSUS24
• types(model): apply schema-level lean to find() #16413
• types(model): support overriding schema-level lean with lean: false #16413

9.9.0 / 2026-07-30

• perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
• perf(model): improve insertMany() performance and general change tracking performance #16370
• perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
• perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
• types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

8.24.2 / 2026-07-27

• fix(subdocument): don't minimize empty document array elements to null #16393 WaleedAshraf
• types: correct Model.validate() return type to Promise #16340 #16340 chatman-media

9.8.1 / 2026-07-27

• perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
• perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
• fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez

... (truncated)

Commits

• 808e14c chore: release 9.9.3
• e2f9345 Merge pull request #16439 from yogesh968/gh-16373
• e4f41fa Merge pull request #16441 from yogesh968/gh-9232
• 1850c84 Simplify 'default' property explanation in schematypes
• e190b00 fix tests
• 537993d fix tests
• 28650a7 Merge branch 'master' of github.com:Automattic/mongoose
• 8cd69e4 fix tests
• b4ac58c Merge pull request #16449 from alimughal95/docs/document-new-returndocument-d...
• ed77f05 Update migration guide for Mongoose 9.2.0 deprecations
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)