[Snyk] Upgrade mongoose from 8.15.0 to 8.17.0 #72
Conversation
Snyk has created this PR to upgrade mongoose from 8.15.0 to 8.17.0. See this package in npm: mongoose See this project in Snyk: https://app.snyk.io/org/kdsdesign1/project/6dfd2c96-abbb-46a3-be3c-7747489f415d?utm_source=github&utm_medium=referral&page=upgrade-pr
There was a problem hiding this comment.
Pull Request Overview
This PR upgrades the mongoose package from version 8.15.0 to 8.17.0, bringing in 9 intermediate versions of bug fixes, new features, and type improvements. The upgrade includes MongoDB driver updates, new API features, and various bug fixes related to document handling, validation, and TypeScript definitions.
Key changes include:
- Upgraded mongoose from version 8.15.0 to 8.17.0
- Includes MongoDB driver upgrade to 6.18.0
- Incorporates multiple bug fixes and type improvements across 9 intermediate versions
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
| "express-validator": "^7.2.1", | ||
| "jsonwebtoken": "^9.0.2", | ||
| "mongoose": "^8.14.1", | ||
| "mongoose": "^8.17.0", |
There was a problem hiding this comment.
The package.json shows the previous version as ^8.14.1 in the diff context, but the PR description indicates upgrading from 8.15.0 to 8.17.0. This version mismatch suggests the baseline version in the diff may be incorrect or outdated.
Snyk has created this PR to upgrade mongoose from 8.15.0 to 8.17.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 9 versions ahead of your current version.
The recommended version was released 22 days ago.
Release notes
Package name: mongoose
-
8.17.0 - 2025-07-30
- feat: upgrade mongodb -> 6.18.0 #15552
- feat(mongoose): export base Connection and Collection classes #15548
- feat: make Schema.prototype.$conditionalHandlers public #15497
- types: automatically infer discriminator type #15547 #15535
- types: make versionKey: false disable __v from hydrated document #15524 #15511
- types: indicate support for mongodb abort #15549 GalacticHypernova
- types: add options property to schemas #15524
- types(schematype): make defaultOptions static and add schemaOptions to DocumentArray #15529 #15524
-
8.16.5 - 2025-07-25
- fix(map): avoid throwing required error if saving map of primitives with required: true #15542
- types(model): export MongooseBulkWriteResult type #15546
- types(connection): add base to connection type #15544
-
8.16.4 - 2025-07-16
- fix(connection): avoid calling connection.close() internally with force: Object #15534 #15531
- types(schema): handle required: string in schema definitions #15538 #15536
- types(document): allow calling $isDefault() with no args #15528 #15522
- types: infer Typescript string enums #15530 ruiaraujo
- types: pass TModelType down to schema statics #15537
-
8.16.3 - 2025-07-10
- fix(document): clean modified subpaths if unsetting map #15520 #15519
- fix: make DocumentArray SchemaType pass all options to embedded SchemaType #15523
- types: support readonly array in query.select #15527 omermizr
-
8.16.2 - 2025-07-07
- fix(cursor): populate after hydrating in queryCursor so populated docs get parent() #15498 #15494
- fix(schema): support toJSONSchema() on mixed types and improve error message about unsupported types #15492 #15489
- types: add _id and __v to toObject/toJSON transform type #15501 #15479
- types(schema): use user-provided THydratedDocumentType as context for virtual get() and set() #15517 #15516
- types: improve typing for transform option to toJSON and toObject #15485
- docs: link to custom setter docs from lowercase, etc. options and note that setters run on query filters #15493 #15491
- docs(jest): add note about resetModules #15515
-
8.16.1 - 2025-06-26
- fix(document): avoid setting _skipMarkModified when setting nested path with merge option #15484 #11913
- fix(model): make sure post save error handler gets doc as param on VersionError #15483 #15480
- fix: consistent $conditionalHandlers setup between schematypes #15490
- docs(compatibility): note that mongodb 4.0 is not supported anymore since 8.16.0 #15487 hasezoey
- docs: remove unnecessary --save flag from npm install instruction #15486 Thahirgeek
-
8.16.0 - 2025-06-16
- feat(model): add Model.createSearchIndexes() #15470 #15465
- feat: upgrade MongoDB driver -> 6.17.0 #15468 gmstavros
-
8.15.2 - 2025-06-12
- fix(document+schema): improve handling for setting paths underneath maps, including maps of maps #15477 #15461
- fix: report default paths in VersionError message because they can can cause VersionError #15464
- fix(updateValidators): ensure update validators only call validators underneath single nested paths once #15446 #15436
- fix: fix validation for deeply nested maps of subdocuments #15469 #15447 AbdelrahmanHafez
- fix(DocumentArray): correctly set parent if instantiated with schema from another Mongoose instance #15471 #15466
- types(model): use ProjectionType for Model.hydrate() #15447 #15443
-
8.15.1 - 2025-05-26
-
8.15.0 - 2025-05-16
from mongoose GitHub release notes8.17.0 / 2025-07-30
8.16.5 / 2025-07-25
8.16.4 / 2025-07-16
8.16.3 / 2025-07-10
8.16.2 / 2025-07-07
8.16.1 / 2025-06-26
8.16.0 / 2025-06-16
8.15.2 / 2025-06-12
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: