[Snyk] Upgrade mongoose from 8.12.1 to 8.16.2 #124
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade mongoose from 8.12.1 to 8.16.2. See this package in npm: mongoose See this project in Snyk: https://app.snyk.io/org/fractalerp/project/1efbcf2c-abf0-474c-b190-fa8d33b57b35?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade mongoose from 8.12.1 to 8.16.2.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 15 versions ahead of your current version.
The recommended version was released 21 days ago.
Release notes
Package name: mongoose
-
8.16.2 - 2025-07-07
- fix(cursor): populate after hydrating in queryCursor so populated docs get parent() #15498 #15494
- fix(schema): support toJSONSchema() on mixed types and improve error message about unsupported types #15492 #15489
- types: add _id and __v to toObject/toJSON transform type #15501 #15479
- types(schema): use user-provided THydratedDocumentType as context for virtual get() and set() #15517 #15516
- types: improve typing for transform option to toJSON and toObject #15485
- docs: link to custom setter docs from lowercase, etc. options and note that setters run on query filters #15493 #15491
- docs(jest): add note about resetModules #15515
-
8.16.1 - 2025-06-26
- fix(document): avoid setting _skipMarkModified when setting nested path with merge option #15484 #11913
- fix(model): make sure post save error handler gets doc as param on VersionError #15483 #15480
- fix: consistent $conditionalHandlers setup between schematypes #15490
- docs(compatibility): note that mongodb 4.0 is not supported anymore since 8.16.0 #15487 hasezoey
- docs: remove unnecessary --save flag from npm install instruction #15486 Thahirgeek
-
8.16.0 - 2025-06-16
- feat(model): add Model.createSearchIndexes() #15470 #15465
- feat: upgrade MongoDB driver -> 6.17.0 #15468 gmstavros
-
8.15.2 - 2025-06-12
- fix(document+schema): improve handling for setting paths underneath maps, including maps of maps #15477 #15461
- fix: report default paths in VersionError message because they can can cause VersionError #15464
- fix(updateValidators): ensure update validators only call validators underneath single nested paths once #15446 #15436
- fix: fix validation for deeply nested maps of subdocuments #15469 #15447 AbdelrahmanHafez
- fix(DocumentArray): correctly set parent if instantiated with schema from another Mongoose instance #15471 #15466
- types(model): use ProjectionType for Model.hydrate() #15447 #15443
-
8.15.1 - 2025-05-26
- types: correct handling of _id in ProjectionType #15432 #15418
- types: fix definition of VectorSearch.$vectorSearch #15429 chriskrycho
- docs: add Document#save to list of function with callbacks removed #15433 SethFalco
-
8.15.0 - 2025-05-16
- feat: CSFLE support #15390 baileympearson
- feat: add strictFilter option to findOneAndUpdate (#14913) #15402 #14913 muazahmed-dev
- feat(error): set cause to MongoDB error reason on ServerSelection errors #15420 #15416
- fix(model): make bulkSave() rely on document.validateSync() to validate docs and skip bulkWrite casting #15415 #15410
- types: stricter projection typing with 1-level deep nesting #15418 #15327 #13840 pshaddel
- docs: emphasize automatic type inference in TypeScript intro and statics/methods, remove duplicated statics.md #15421
-
8.14.3 - 2025-05-13
- types(schema): allow post('init') #15413 #15412 #15333
- types: fix signature of DocumentArray.id #15414 Sainan
- docs: fix typo - change 'prodecure' to 'procedure' #15419 0xEbrahim
-
8.14.2 - 2025-05-08
-
8.14.1 - 2025-04-29
-
8.14.0 - 2025-04-25
-
8.13.3 - 2025-04-24
-
8.13.2 - 2025-04-03
-
8.13.1 - 2025-03-28
-
8.13.0 - 2025-03-24
-
8.12.2 - 2025-03-21
-
8.12.1 - 2025-03-04
from mongoose GitHub release notes8.16.2 / 2025-07-07
8.16.1 / 2025-06-26
8.16.0 / 2025-06-16
8.15.2 / 2025-06-12
8.15.1 / 2025-05-26
8.15.0 / 2025-05-16
8.14.3 / 2025-05-13
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: