Skip to content

Conversation

@KleilsonSantos
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade mongoose from 8.15.0 to 8.17.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 10 versions ahead of your current version.

  • The recommended version was released a month ago.

Release notes
Package name: mongoose
  • 8.17.1 - 2025-08-07

    8.17.1 / 2025-08-07

    • fix(query): propagate read preference and read concern to populate if read() called after populate() #15567 #15553
    • fix(model): call correct function in autoSearchIndex #15569 #15565
    • fix(model): allow setting statics option on discriminator schema #15568 #15556
    • fix(model): remove unnecessary conversion of undefined -> null in findById #15566 #15551
    • types: allow passing in projections without as const #15564 #15557
    • types: support maxLength and minLength in SchemaTypeOptions #15570 #4720
  • 8.17.0 - 2025-07-30

    8.17.0 / 2025-07-30

    • feat: upgrade mongodb -> 6.18.0 #15552
    • feat(mongoose): export base Connection and Collection classes #15548
    • feat: make Schema.prototype.$conditionalHandlers public #15497
    • types: automatically infer discriminator type #15547 #15535
    • types: make versionKey: false disable __v from hydrated document #15524 #15511
    • types: indicate support for mongodb abort #15549 GalacticHypernova
    • types: add options property to schemas #15524
    • types(schematype): make defaultOptions static and add schemaOptions to DocumentArray #15529 #15524
  • 8.16.5 - 2025-07-25

    8.16.5 / 2025-07-25

    • fix(map): avoid throwing required error if saving map of primitives with required: true #15542
    • types(model): export MongooseBulkWriteResult type #15546
    • types(connection): add base to connection type #15544
  • 8.16.4 - 2025-07-16

    8.16.4 / 2025-07-16

    • fix(connection): avoid calling connection.close() internally with force: Object #15534 #15531
    • types(schema): handle required: string in schema definitions #15538 #15536
    • types(document): allow calling $isDefault() with no args #15528 #15522
    • types: infer Typescript string enums #15530 ruiaraujo
    • types: pass TModelType down to schema statics #15537
  • 8.16.3 - 2025-07-10

    8.16.3 / 2025-07-10

    • fix(document): clean modified subpaths if unsetting map #15520 #15519
    • fix: make DocumentArray SchemaType pass all options to embedded SchemaType #15523
    • types: support readonly array in query.select #15527 omermizr
  • 8.16.2 - 2025-07-07

    8.16.2 / 2025-07-07

    • fix(cursor): populate after hydrating in queryCursor so populated docs get parent() #15498 #15494
    • fix(schema): support toJSONSchema() on mixed types and improve error message about unsupported types #15492 #15489
    • types: add _id and __v to toObject/toJSON transform type #15501 #15479
    • types(schema): use user-provided THydratedDocumentType as context for virtual get() and set() #15517 #15516
    • types: improve typing for transform option to toJSON and toObject #15485
    • docs: link to custom setter docs from lowercase, etc. options and note that setters run on query filters #15493 #15491
    • docs(jest): add note about resetModules #15515
  • 8.16.1 - 2025-06-26

    8.16.1 / 2025-06-26

    • fix(document): avoid setting _skipMarkModified when setting nested path with merge option #15484 #11913
    • fix(model): make sure post save error handler gets doc as param on VersionError #15483 #15480
    • fix: consistent $conditionalHandlers setup between schematypes #15490
    • docs(compatibility): note that mongodb 4.0 is not supported anymore since 8.16.0 #15487 hasezoey
    • docs: remove unnecessary --save flag from npm install instruction #15486 Thahirgeek
  • 8.16.0 - 2025-06-16

    8.16.0 / 2025-06-16

  • 8.15.2 - 2025-06-12
  • 8.15.1 - 2025-05-26
  • 8.15.0 - 2025-05-16
from mongoose GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade mongoose from 8.15.0 to 8.17.1.

See this package in npm:
mongoose

See this project in Snyk:
https://app.snyk.io/org/kdsdesign1/project/6dfd2c96-abbb-46a3-be3c-7747489f415d?utm_source=github&utm_medium=referral&page=upgrade-pr
Copilot AI review requested due to automatic review settings September 4, 2025 09:22
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR upgrades the mongoose dependency from version 8.15.0 to 8.17.1, incorporating 10 intermediate releases with bug fixes, performance improvements, and new features. The upgrade includes fixes for query population, model functionality, and TypeScript type improvements, along with an updated MongoDB driver to version 6.18.0.

  • Mongoose version upgrade from 8.15.0 to 8.17.1
  • Includes bug fixes for query handling, document operations, and schema processing
  • Enhanced TypeScript support and improved API design

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

"express-validator": "^7.2.1",
"jsonwebtoken": "^9.0.2",
"mongoose": "^8.14.1",
"mongoose": "^8.17.1",
Copy link

Copilot AI Sep 4, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The package.json shows mongoose being upgraded from ^8.14.1 to ^8.17.1, but the PR description indicates the upgrade is from 8.15.0 to 8.17.1. This version mismatch suggests the package.json may have been outdated or the PR description is incorrect.

Suggested change
"mongoose": "^8.17.1",
"mongoose": "^8.15.0",

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants