[Snyk] Upgrade mongoose from 8.19.2 to 8.20.0

[OOCAZ]

Snyk has created this PR to upgrade mongoose from 8.19.2 to 8.20.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.

• The recommended version was released 22 days ago.

Release notes

Package name: mongoose

• 8.20.0 - 2025-11-17
  

  8.20.0 / 2025-11-17

  • feat: cast id parameter based on schema _id type in DocumentArray.id() #15733 #15725 #15724 Lex-Ashu
  • fix: pass parent schema to SchemaType constructors in interpretAsType to make implementing custom container types easier #15700
  • types(models): default _id type to ObjectId for Document #15688 Catwallon
  • docs: add FAQ entry about DivergentArrayError #15743 Mario5T
  • docs: update browser.md with Mongoose limitations #15744 YashSharma64
  • chore: add benchmark for large nested array documents (related to #9588) #15742 Kundan-CR7
• 8.19.4 - 2025-11-14
  

  8.19.4 / 2025-11-14

  • fix(schema): avoid throwing error on array of unions #15720 #15718
  • fix: store original index on insertMany validation errors #15735 Jadu07
  • types: correct return type of discriminator to Model #15726 twentytwo777
  • docs: improve Next.js integration guide with comprehensive examples #15730 adarsh-priydarshi-5646
  • docs: add documentation for Union Schema Type #15721 TechGenie-awake
  • docs: removed the outdated callback and replaced them with async/await pattern #15723 hk2166
  • docs: fix lingering remove() call in statics docs #15737 Gautam-Bharadwaj
  • docs: fix inline doc typo in schematypes.d.ts #15738 hagid786
• 8.19.3 - 2025-11-04
  

  8.19.3 / 2025-11-04

  • fix(model+plugins): correctly apply shard key on deleteOne() #15705 #15701
  • fix(schema): correctly cache text indexes as 'text' not 1 #15695
  • types: make inferRawDocType correctly infer empty array type [] as any[] #15704 #15699
• 8.19.2 - 2025-10-20

from mongoose GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/mongoose	8.20.0	🟢 6.5	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review ⚠️ 2 Found 6/24 approved changesets -- score normalized to 2 Security-Policy 🟢 9 security policy file detected Maintained 🟢 10 30 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 10 license file detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Vulnerabilities 🟢 10 0 existing vulnerabilities detected Pinned-Dependencies ⚠️ 2 dependency not pinned by hash detected -- score normalized to 2 Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Signed-Releases ⚠️ -1 no releases found Packaging 🟢 10 packaging workflow detected Fuzzing ⚠️ 0 project is not fuzzed SAST 🟢 7 SAST tool detected but not run on all commits

Scanned Files

• package-lock.json

[netlify]

✅ Deploy Preview for splendorous-snickerdoodle-0e3599 ready!

Name	Link
🔨 Latest commit	0f406d4
🔍 Latest deploy log	https://app.netlify.com/projects/splendorous-snickerdoodle-0e3599/deploys/693800a314a16a0008d7423c
😎 Deploy Preview	https://deploy-preview-262--splendorous-snickerdoodle-0e3599.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 86 Accessibility: 91 Best Practices: 92 SEO: 100 PWA: - View the detailed breakdown and full score reports

---

To edit notification comments on pull requests, go to your Netlify project configuration.