[Snyk] Upgrade mongoose from 8.15.0 to 8.18.0

[KleilsonSantos]

Snyk has created this PR to upgrade mongoose from 8.15.0 to 8.18.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 12 versions ahead of your current version.

• The recommended version was released a month ago.

Release notes

Package name: mongoose

• 8.18.0 - 2025-08-22
  

  8.18.0 / 2025-08-22

  • feat(schema): support for union types #15574 #10894
  • fix: trim long strings in minLength and maxLength error messages and display the string length #15571 #15550
  • types(connection+collection): make BaseCollection and BaseConnection usable as values #15575 #15548
  • types: remove logic that omits timestamps when virtuals, methods, etc. options set #15577 #12807
• 8.17.2 - 2025-08-18
  

  8.17.2 / 2025-08-18

  • fix: avoid Model.validate() hanging when all paths fail casting #15580 #15579 piotracalski
  • types(document): better support for flattenObjectIds and versionKey options for toObject() and toJSON() #15582 #15578
  • docs: fix docs jsdoc tags and add UUID to be listed #15585
  • docs(document): fix code sample that errors with "Cannot set properties of undefined" #15589
• 8.17.1 - 2025-08-07
  

  8.17.1 / 2025-08-07

  • fix(query): propagate read preference and read concern to populate if read() called after populate() #15567 #15553
  • fix(model): call correct function in autoSearchIndex #15569 #15565
  • fix(model): allow setting statics option on discriminator schema #15568 #15556
  • fix(model): remove unnecessary conversion of undefined -> null in findById #15566 #15551
  • types: allow passing in projections without as const #15564 #15557
  • types: support maxLength and minLength in SchemaTypeOptions #15570 #4720
• 8.17.0 - 2025-07-30
  

  8.17.0 / 2025-07-30

  • feat: upgrade mongodb -> 6.18.0 #15552
  • feat(mongoose): export base Connection and Collection classes #15548
  • feat: make Schema.prototype.$conditionalHandlers public #15497
  • types: automatically infer discriminator type #15547 #15535
  • types: make versionKey: false disable __v from hydrated document #15524 #15511
  • types: indicate support for mongodb abort #15549 GalacticHypernova
  • types: add options property to schemas #15524
  • types(schematype): make defaultOptions static and add schemaOptions to DocumentArray #15529 #15524
• 8.16.5 - 2025-07-25
  

  8.16.5 / 2025-07-25

  • fix(map): avoid throwing required error if saving map of primitives with required: true #15542
  • types(model): export MongooseBulkWriteResult type #15546
  • types(connection): add base to connection type #15544
• 8.16.4 - 2025-07-16
  

  8.16.4 / 2025-07-16

  • fix(connection): avoid calling connection.close() internally with force: Object #15534 #15531
  • types(schema): handle required: string in schema definitions #15538 #15536
  • types(document): allow calling $isDefault() with no args #15528 #15522
  • types: infer Typescript string enums #15530 ruiaraujo
  • types: pass TModelType down to schema statics #15537
• 8.16.3 - 2025-07-10
  

  8.16.3 / 2025-07-10

  • fix(document): clean modified subpaths if unsetting map #15520 #15519
  • fix: make DocumentArray SchemaType pass all options to embedded SchemaType #15523
  • types: support readonly array in query.select #15527 omermizr
• 8.16.2 - 2025-07-07
  

  8.16.2 / 2025-07-07

  • fix(cursor): populate after hydrating in queryCursor so populated docs get parent() #15498 #15494
  • fix(schema): support toJSONSchema() on mixed types and improve error message about unsupported types #15492 #15489
  • types: add _id and __v to toObject/toJSON transform type #15501 #15479
  • types(schema): use user-provided THydratedDocumentType as context for virtual get() and set() #15517 #15516
  • types: improve typing for transform option to toJSON and toObject #15485
  • docs: link to custom setter docs from lowercase, etc. options and note that setters run on query filters #15493 #15491
  • docs(jest): add note about resetModules #15515
• 8.16.1 - 2025-06-26
  

  8.16.1 / 2025-06-26

  • fix(document): avoid setting _skipMarkModified when setting nested path with merge option #15484 #11913
  • fix(model): make sure post save error handler gets doc as param on VersionError #15483 #15480
  • fix: consistent $conditionalHandlers setup between schematypes #15490
  • docs(compatibility): note that mongodb 4.0 is not supported anymore since 8.16.0 #15487 hasezoey
  • docs: remove unnecessary --save flag from npm install instruction #15486 Thahirgeek
• 8.16.0 - 2025-06-16
• 8.15.2 - 2025-06-12
• 8.15.1 - 2025-05-26
• 8.15.0 - 2025-05-16

from mongoose GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[Copilot]

Pull Request Overview

This PR upgrades mongoose from version 8.15.0 to 8.18.0, bringing 12 versions of improvements including bug fixes, type enhancements, and new features like union type support and improved error messages.

• Updates mongoose dependency to version 8.18.0 for latest features and fixes
• Includes performance improvements and bug fixes from 3 minor releases
• Adds TypeScript improvements and better API design features

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

The package.json shows the old version as ^8.14.1 but the PR title and description indicate upgrading from 8.15.0. This inconsistency suggests either the PR metadata is incorrect or the package.json wasn't properly updated from the stated starting version.

Suggested change

	"mongoose": "^8.18.0",
	"mongoose": "^8.15.0",