chore(deps): bump mongoose from 9.7.4 to 9.9.0

[dependabot]

Bumps mongoose from 9.7.4 to 9.9.0.

Release notes

Sourced from mongoose's releases.

9.9.0 / 2026-07-30

• perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
• perf(model): improve insertMany() performance and general change tracking performance #16370
• perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
• perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
• types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

9.8.1 / 2026-07-27

• perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
• perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
• fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez
• perf: cache toString() results in array.unique to avoid redundant allocations #16390 vivek180905
• types: respect the _id option when inferring StandardSchema types #16402
• types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
• docs(guide): clarify strictQuery handling of filter paths not in the schema #16397 MuhammadFarhantahir

9.8.0 / 2026-07-20

• feat(schema): add strictRead option to filter or throw on unknown fields during document hydration #16345 #4279 GourabSingha
• feat: upgrade MongoDB Node.js driver to 7.5 #16391
• fix(subdocument): don't minimize empty document array elements to null #16393 #15336 #7322 WaleedAshraf
• fix(model): correctly handle version keys when bulkSave() inserts new documents #16386 #15800 AbdelrahmanHafez
• fix(cast): correctly cast object-shaped geo query values #16380 #16376 rajkumar0932
• fix(schema): avoid mutating shared setters when casting array query values #16372 #16364 yakubka
• fix(document): correctly handle excluded parent paths with optimistic concurrency #16367 #16054 AbdelrahmanHafez
• types(model): add pathsToSave to SaveOptions #16375 AbdelrahmanHafez
• types(model): support extra fields in hydrate() with strict: false #16374 #15940 AbdelrahmanHafez
• docs(populate): document missing options and perDocumentLimit for populate() #16371 Wnayar
• docs: expand sample() example to show sampling from a filtered subset #16369 Wnayar
• docs: fix typos, grammar, and documentation links #16389 LakshyaTyagi15

Changelog

Sourced from mongoose's changelog.

9.9.0 / 2026-07-30

• perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
• perf(model): improve insertMany() performance and general change tracking performance #16370
• perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
• perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
• types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

8.24.2 / 2026-07-27

• fix(subdocument): don't minimize empty document array elements to null #16393 WaleedAshraf
• types: correct Model.validate() return type to Promise #16340 #16340 chatman-media

9.8.1 / 2026-07-27

• perf(document): avoid rebuilding modified paths during required path validation #16379 xianjianlf2
• perf(document): avoid clearing the required paths cache on every document instantiation #16404 #16377
• fix(query): reject update modifiers without paths #16387 AbdelrahmanHafez
• perf: cache toString() results in array.unique to avoid redundant allocations #16390 vivek180905
• types: respect the _id option when inferring StandardSchema types #16402
• types(model): keep Model.schema typed when TSchema is omitted samuelmbabhazi
• docs(guide): clarify strictQuery handling of filter paths not in the schema #16397 MuhammadFarhantahir

9.8.0 / 2026-07-20

• feat(schema): add strictRead option to filter or throw on unknown fields during document hydration #16345 #4279 GourabSingha
• feat: upgrade MongoDB Node.js driver to 7.5 #16391
• fix(subdocument): don't minimize empty document array elements to null #16393 #15336 #7322 WaleedAshraf
• fix(model): correctly handle version keys when bulkSave() inserts new documents #16386 #15800 AbdelrahmanHafez
• fix(cast): correctly cast object-shaped geo query values #16380 #16376 rajkumar0932
• fix(schema): avoid mutating shared setters when casting array query values #16372 #16364 yakubka
• fix(document): correctly handle excluded parent paths with optimistic concurrency #16367 #16054 AbdelrahmanHafez
• types(model): add pathsToSave to SaveOptions #16375 AbdelrahmanHafez
• types(model): support extra fields in hydrate() with strict: false #16374 #15940 AbdelrahmanHafez
• docs(populate): document missing options and perDocumentLimit for populate() #16371 Wnayar
• docs: expand sample() example to show sampling from a filtered subset #16369 Wnayar
• docs: fix typos, grammar, and documentation links #16389 LakshyaTyagi15

Commits

• 650c286 chore: release 9.9.0
• 0b4ef8a test: improve flakey test
• 2ccf221 Merge pull request #16412 from Automattic/vkarpov15/gh-16045-3
• 2d7256b fix lint
• 5f998c8 types: handle required discriminator keys when inferring embedded discriminat...
• 8b59eea types: allow base discriminator to have nullish discriminator key for backwar...
• a37bfc6 types: add explicit discriminator key to embedded discriminator subtypes
• a8aee7c test: add test case coverage for #16045
• 911d31d Merge pull request #16408 from Automattic/vkarpov15/gh-14394-2
• 2477550 Merge pull request #16411 from Automattic/vkarpov15/upsert-createdat
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1167.