Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps mongoose from 8.20.2 to 9.0.1.

Release notes

Sourced from mongoose's releases.

9.0.1 / 2025-12-05

  • perf: use native Buffer.equals() for buffer comparison #15821 AbdelrahmanHafez
  • fix(model): fix overwriteImmutable not working with timestamps: true, add overwriteImmutable types re #15781 #15819 AbdelrahmanHafez
  • fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15782 #15781 jhaayushkumar
  • fix(schema): Add enumValues property to Number enum for consistency with String enum #15824 AkaHarshit
  • fix: incorrect variable bug in double casting #15849 #15848 lomesh2312
  • fix: clear timeout in collection operations #15852 techcodie
  • types(query+model): use function overrides instead of | Query<any, any> to support using Query as filter #15791 #15779
  • docs(migrating_to_9): clarify removing next() from pre middleware #15813
  • docs: add dark mode support and CSS improvements #15753
  • docs: Mongoose compatibility page updates #15797 alexbevi
  • docs: Add closing backticks to code block in migration guide #15783 isnifer
  • docs: fix documentation link in connection.js #15804 salittle0

9.0.0 / 2025-11-21

  • BREAKING CHANGE: drop support for callback-based pre middleware, e.g. next() in pre() hooks
  • BREAKING CHANGE: update to MongoDB Node driver v7
  • BREAKING CHANGE: make UUID schema type return bson UUIDs #15378
  • BREAKING CHANGE: make findOne(null), find(null), etc. throw an error instead of returning first doc #15019 #14948
  • BREAKING CHANGE: disallow update pipelines by default, require updatePipeline option #15586 #14424
  • BREAKING CHANGE: call virtual ref function with subdoc, not top-level doc #14652 #12440 #12363
  • BREAKING CHANGE(types): make create() and insertOne() params more strict, remove generics to prevent type inference #15587 #15355
  • BREAKING CHANGE(types): make FilterQuery properties no longer resolve to any in TypeScript #15422
  • BREAKING CHANGE(types): change this to HydratedDocument for default() and required(), HydratedDocument | Query for validate() #15020 #14696
  • BREAKING CHANGE(types): make id a virtual in TypeScript rather than a property on Document base class #15572 #13079
  • BREAKING CHANGE(types): consolidate RootQuerySelector, Condition, etc. types with MongoDB driver's #15593
  • BREAKING CHANGE: asyncify update validators, SchemaType.prototype.doValidate(), save hooks for improved stack traces #15312
  • BREAKING CHANGE: remove bson as direct dependency, use mongodb/lib/bson instead #15576 #15154
  • BREAKING CHANGE: remove _executionStack, make validate() async function and call Kareem hooks directly vs through wrappers #15298 #14906
  • BREAKING CHANGE: remove browser build, move to @​mongoosejs/browser instead #15385 #15296
  • BREAKING CHANGE: remove schematype caster and casterConstructor properties in favor of embeddedSchemaType and Constructor #15513 #15179
  • BREAKING CHANGE: adding missing pluralizations, fixing pluralization: virus -> viruses #14247 ItsBradyDavis
  • BREAKING CHANGE: remove connection noListener option #15641 #15640
  • feat(types): add Schema.create() for TypeScript type inference #15482 #14954
  • chore: remove examples directory #15597

9.0.0-rc1 / 2025-11-19

  • fix(populate): correctly populate embedded discriminators on subdocuments #15774

9.0.0-rc0 / 2025-11-19

  • BREAKING CHANGE: drop support for callback-based pre middleware, e.g. next() in pre() hooks
  • BREAKING CHANGE: update to MongoDB Node driver v7
  • BREAKING CHANGE: make UUID schema type return bson UUIDs #15378
  • BREAKING CHANGE: make findOne(null), find(null), etc. throw an error instead of returning first doc #15019 #14948
  • BREAKING CHANGE: disallow update pipelines by default, require updatePipeline option #15586 #14424
  • BREAKING CHANGE: call virtual ref function with subdoc, not top-level doc #14652 #12440 #12363

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.0.1 / 2025-12-05

  • perf: use native Buffer.equals() for buffer comparison #15821 AbdelrahmanHafez
  • fix(model): fix overwriteImmutable not working with timestamps: true, add overwriteImmutable types re #15781 #15819 AbdelrahmanHafez
  • fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15782 #15781 jhaayushkumar
  • fix(schema): Add enumValues property to Number enum for consistency with String enum #15824 AkaHarshit
  • fix: incorrect variable bug in double casting #15849 #15848 lomesh2312
  • fix: clear timeout in collection operations #15852 techcodie
  • types(query+model): use function overrides instead of | Query<any, any> to support using Query as filter #15791 #15779
  • docs(migrating_to_9): clarify removing next() from pre middleware #15813
  • docs: add dark mode support and CSS improvements #15753
  • docs: Mongoose compatibility page updates #15797 alexbevi
  • docs: Add closing backticks to code block in migration guide #15783 isnifer
  • docs: fix documentation link in connection.js #15804 salittle0
Commits
  • adb3a5e chore: release 9.0.1
  • 1b72648 docs(migrating_to_9): clarify removing next() from pre middleware
  • 7a15ea5 Merge branch '8.x'
  • 0275815 correct publish step name
  • 63df6c4 Merge pull request #15852 from techcodie/fix-collection-timeout-memory-leak
  • b7794d1 Merge pull request #15876 from Automattic/fix-ci
  • 04e4c2e chore: fix lint
  • 7525ad9 Merge pull request #15866 from Automattic/refactor/use-object-has-own
  • 9d094b3 Merge pull request #15753 from White-Devil2839/master
  • e2464af Update docs/js/theme-toggle.js
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependabot dependencies Pull requests that update a dependency file web-team labels Dec 8, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 8, 2025 04:10
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 8, 2025
@dependabot dependabot bot requested review from falric and removed request for a team December 8, 2025 04:10
@dependabot dependabot bot added the dependabot label Dec 8, 2025
@dependabot dependabot bot requested review from nsandstrom and perlan December 8, 2025 04:10
@dependabot dependabot bot added the web-team label Dec 8, 2025
Bumps [mongoose](https://github.com/Automattic/mongoose) from 8.20.2 to 9.0.1.
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@8.20.2...9.0.1)

---
updated-dependencies:
- dependency-name: mongoose
  dependency-version: 9.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/mongoose-9.0.1 branch from b0bafed to 33aca25 Compare December 12, 2025 02:43
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 12, 2025

Looks like mongoose is no longer being updated by Dependabot, so this is no longer needed.

@dependabot dependabot bot closed this Dec 12, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/mongoose-9.0.1 branch December 12, 2025 05:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies Pull requests that update a dependency file web-team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant