Skip to content

build(deps): bump mongoose from 7.2.4 to 7.8.9 in /entertainment-web-app#123

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/entertainment-web-app/mongoose-7.8.9
Open

build(deps): bump mongoose from 7.2.4 to 7.8.9 in /entertainment-web-app#123
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/entertainment-web-app/mongoose-7.8.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Copy link
Copy Markdown
Contributor

Bumps mongoose from 7.2.4 to 7.8.9.

Release notes

Sourced from mongoose's releases.

7.8.8 / 2025-12-04

  • fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15789 #15782 #15781
  • fix(model): bump version if necessary after successful bulkSave() #15800

7.8.7 / 2025-04-30

7.8.6 / 2025-01-20

  • chore: remove coverage output from bundle

7.8.5 / 2025-01-20

  • chore: re-release to force npm audit to pick up 6.x fix for CVE-2025-23061

7.8.4 / 2025-01-13

  • fix: disallow nested $where in populate match

7.8.3 / 2024-11-26

  • fix: disallow using $where in match
  • fix(projection): avoid setting projection to unknown exclusive/inclusive if elemMatch on a Date, ObjectId, etc. #14894 #14893
  • docs(migrating_to_7): add note about keepAlive to Mongoose 7 migration guide #15032 #13431
Changelog

Sourced from mongoose's changelog.

7.8.9 / 2026-02-04

  • fix: handle other top-level query operators in sanitizeFilter

8.22.0 / 2026-01-27

  • feat(model): allow passing strict option to hydrate() #15944 #15940

8.21.1 / 2026-01-23

  • fix(clone): fix parent doc for map subdocuments and array subdocuments #15958 AbdelrahmanHafez
  • fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901
  • fix: respect currentTime schema option in bulkWrite updates #15976 sderrow
  • types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15910
  • types: add toBSON() to documents #15927

9.1.5 / 2026-01-20

9.1.4 / 2026-01-15

9.1.3 / 2026-01-09

  • fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig #15941 #15938
  • fix(query): include preview of current and incoming update in error when merging normal update with pipeline #15939 #15928
  • types(model): apply basic type casting to paths underneath subdocuments #15948 #15947
  • types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members #15942 #15923
  • docs(schema): expose "DocumentArrayElement" #15590 hasezoey

9.1.2 / 2026-01-05

9.1.1 / 2025-12-30

  • fix(document): avoid 'Cannot mix array and object updates' on doc.updateOne() with pipeline #15928
  • docs: update default search version to 9.x #15926 #15925

9.1.0 / 2025-12-29

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 7, 2026
@vercel

vercel Bot commented May 7, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
entertainment-app-mern Ready Ready Preview, Comment May 24, 2026 5:08am
entertainment-app-nodejs-backend Ready Ready Preview, Comment May 24, 2026 5:08am
fm-todo-fs Error Error May 24, 2026 5:08am
todo-app-mern Ready Ready Preview, Comment May 24, 2026 5:08am

Bumps [mongoose](https://github.com/Automattic/mongoose) from 7.2.4 to 7.8.9.
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Automattic/mongoose/commits)

---
updated-dependencies:
- dependency-name: mongoose
  dependency-version: 7.8.9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants