Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 9, 2026

Bumps mongoose from 9.1.5 to 9.1.6.

Release notes

Sourced from mongoose's releases.

9.1.6 / 2026-02-04

  • fix: handle other top-level query operators in sanitizeFilter
  • fix(types): fix toObject() type inference with timestamps + virtuals #15975 #15965 AbdelrahmanHafez
  • fix(populate): defer subpopulate until after match functions to avoid comparing populated subdocs #15981 mongodb-js/mongoose-autopopulate#112
  • fix(DocumentArray): correctly clone subdocument when updating document array #15978 #15973
  • fix(documentArray): fix change tracking for documentArrays in nested maps #15983 #15970 AbdelrahmanHafez
  • docs: clarify that you need to explicitly create timeseries collection before inserting document #15990 #15986
Changelog

Sourced from mongoose's changelog.

9.1.6 / 2026-02-04

  • fix: handle other top-level query operators in sanitizeFilter
  • fix(types): fix toObject() type inference with timestamps + virtuals #15975 #15965 AbdelrahmanHafez
  • fix(populate): defer subpopulate until after match functions to avoid comparing populated subdocs #15981 mongodb-js/mongoose-autopopulate#112
  • fix(DocumentArray): correctly clone subdocument when updating document array #15978 #15973
  • fix(documentArray): fix change tracking for documentArrays in nested maps #15983 #15970 AbdelrahmanHafez
  • docs: clarify that you need to explicitly create timeseries collection before inserting document #15990 #15986

8.22.1 / 2026-02-04

  • fix: handle other top-level query operators in sanitizeFilter
  • fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901
  • types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15910
  • types: add toBSON() to documents #15927

7.8.9 / 2026-02-04

  • fix: handle other top-level query operators in sanitizeFilter

8.22.0 / 2026-01-27

  • feat(model): allow passing strict option to hydrate() #15944 #15940

8.21.1 / 2026-01-23

  • fix(clone): fix parent doc for map subdocuments and array subdocuments #15958 AbdelrahmanHafez
  • fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901
  • fix: respect currentTime schema option in bulkWrite updates #15976 sderrow
  • types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15910
  • types: add toBSON() to documents #15927
Commits
  • dfff2a5 chore: release 9.1.6
  • 1b06959 test: remove hydrate with strict mode test for now
  • fad4514 style: fix lint
  • ffe31d7 Merge branch '8.x'
  • 41fb971 docs: add missing changelog entries
  • 472e7c7 chore: release 8.22.1
  • 1735149 Merge branch '7.x' into 8.x
  • 5227801 chore: release 7.8.9
  • b804e34 fix: handle other top-level query operators in sanitizeFilter
  • c893a91 Merge pull request #15992 from Automattic/vkarpov15/npm-audit
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [mongoose](https://github.com/Automattic/mongoose) from 9.1.5 to 9.1.6.
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@9.1.5...9.1.6)

---
updated-dependencies:
- dependency-name: mongoose
  dependency-version: 9.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 9, 2026
@berviantoleo berviantoleo merged commit dd04ccb into main Feb 11, 2026
8 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/mongoose-9.1.6 branch February 11, 2026 03:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant