build(deps): bump mongoose from 8.20.3 to 9.2.1

[dependabot]

Bumps mongoose from 8.20.3 to 9.2.1.

Release notes

Sourced from mongoose's releases.

9.2.1 / 2026-02-11

• types(query): allow assigning QueryFilter<DocType> to QueryFilter<any> #16020
• types: duplicate identifier 'UUIDToJSON' in mongoosejs 9.2.0 #16023
• types: preserve subdocument toObject() field types when using virtuals + versionKey options #16021 #15965 AbdelrahmanHafez
• docs(mongoose): add missing options to mongoose.set() docs #16019

9.2.0 / 2026-02-09

• feat: add option to skip middleware #15883 #8768 AbdelrahmanHafez
• feat(model): delay "Duplicate schema index" warning until createIndexes runs to include model name in the warning #15979
• feat(model): add strict option to Model.hydrate(...) #15940 #15977
• feat(document): add flattenUUIDs option to toObject() and toJSON() #15864 #15021 AbdelrahmanHafez
• fix(schema): treat undefined as not provided for strict, strictQuery and id options #16004 AbdelrahmanHafez
• types(inferrawdoctype): avoid adding _id to nested paths and handle _id: false in options + schema definition #15989
• types: fix toObject() type inference with timestamps + virtuals #15975 AbdelrahmanHafez
• types(models): remove dead MapReduce and GeoSearch types #15984
• test(types): remove tsd in favor of tsc + test utilities #15951 #15696

9.1.6 / 2026-02-04

• fix: handle other top-level query operators in sanitizeFilter
• fix(types): fix toObject() type inference with timestamps + virtuals #15975 #15965 AbdelrahmanHafez
• fix(populate): defer subpopulate until after match functions to avoid comparing populated subdocs #15981 mongodb-js/mongoose-autopopulate#112
• fix(DocumentArray): correctly clone subdocument when updating document array #15978 #15973
• fix(documentArray): fix change tracking for documentArrays in nested maps #15983 #15970 AbdelrahmanHafez
• docs: clarify that you need to explicitly create timeseries collection before inserting document #15990 #15986

9.1.5 / 2026-01-20

• fix(map): validate map subdocument when loaded with init #15960 #15957 AbdelrahmanHafez
• fix(discriminator): prevent indexes and callQueue duplication with shared nested schemas #15974 #15966 AbdelrahmanHafez
• fix(subdocuments): do not pass parent path on init #15970 #15969 #15682 AbdelrahmanHafez
• types(inferrawdoctype): correct handling for subdocs and doc arrays #15967 #13772
• docs: improve grammar and clarity in TypeScript schema comments #15971 harshsinghpujari

9.1.4 / 2026-01-15

• fix: attach sessions to docs retrieved by cursor #15953 #15949 mjfwalsh
• fix(model): make hydrate() handle nested schema arrays #15964 #15956
• fix(clone): fix parent doc for map subdocuments and array subdocuments #15958 #15954 AbdelrahmanHafez
• fix: prevent crash when accessing nested paths on prototype #15962 #15961 som14062005

9.1.3 / 2026-01-09

• fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig #15941 #15938
• fix(query): include preview of current and incoming update in error when merging normal update with pipeline #15939 #15928
• types(model): apply basic type casting to paths underneath subdocuments #15948 #15947
• types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members #15942 #15923
• docs(schema): expose "DocumentArrayElement" #15590 hasezoey

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.2.1 / 2026-02-11

• types(query): allow assigning QueryFilter to QueryFilter #16020
• types: duplicate identifier 'UUIDToJSON' in mongoosejs 9.2.0 #16023
• types: preserve subdocument toObject() field types when using virtuals + versionKey options #16021 #15965 AbdelrahmanHafez
• docs(mongoose): add missing options to mongoose.set() docs #16019

9.2.0 / 2026-02-09

• feat: add option to skip middleware #15883 #8768 AbdelrahmanHafez
• feat(model): delay "Duplicate schema index" warning until createIndexes runs to include model name in the warning #15979
• feat(model): add strict option to Model.hydrate(...) #15940 #15977
• feat(document): add flattenUUIDs option to toObject() and toJSON() #15864 #15021 AbdelrahmanHafez
• fix(schema): treat undefined as not provided for strict, strictQuery and id options #16004 AbdelrahmanHafez
• types(inferrawdoctype): avoid adding _id to nested paths and handle _id: false in options + schema definition #15989
• types: fix toObject() type inference with timestamps + virtuals #15975 AbdelrahmanHafez
• types(models): remove dead MapReduce and GeoSearch types #15984
• test(types): remove tsd in favor of tsc + test utilities #15951 #15696

8.23.0 / 2026-02-09

• feat(document): add flattenUUIDs option to toObject() and toJSON() (backport #15021 to 8.x)

9.1.6 / 2026-02-04

• fix: handle other top-level query operators in sanitizeFilter
• fix(types): fix toObject() type inference with timestamps + virtuals #15975 #15965 AbdelrahmanHafez
• fix(populate): defer subpopulate until after match functions to avoid comparing populated subdocs #15981 mongodb-js/mongoose-autopopulate#112
• fix(DocumentArray): correctly clone subdocument when updating document array #15978 #15973
• fix(documentArray): fix change tracking for documentArrays in nested maps #15983 #15970 AbdelrahmanHafez
• docs: clarify that you need to explicitly create timeseries collection before inserting document #15990 #15986

8.22.1 / 2026-02-04

• fix: handle other top-level query operators in sanitizeFilter
• fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901
• types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15910
• types: add toBSON() to documents #15927

7.8.9 / 2026-02-04

• fix: handle other top-level query operators in sanitizeFilter

8.22.0 / 2026-01-27

• feat(model): allow passing strict option to hydrate() #15944 #15940

8.21.1 / 2026-01-23

• fix(clone): fix parent doc for map subdocuments and array subdocuments #15958 AbdelrahmanHafez

... (truncated)

Commits

• 764bd82 chore: release 9.2.1
• 2e5b780 Merge pull request #16021 from Automattic/fix/gh-15965-subdoc-toObject
• 324ff4c Merge pull request #16020 from Automattic/vkarpov15/gh-16006
• 684b31f test(types): check types using ts-expect-error directive instead of ExpectType
• 06b4e93 Merge pull request #16019 from Automattic/vkarpov15/gh-16005
• 55749fc fix(types): make subdocuments and array subdocuments have the same behavior f...
• b81b3b6 types(query): allow assigning QueryFilter<DocType> to QueryFilter<any>
• 8d05461 test(types): assert subdocuments in toObject() and toJSON get the correc...
• 40ffefe docs(mongoose): add missing options to mongoose.set() docs
• 904a2eb chore: release 9.2.0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for mongoose since your current version.

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
mongoose	[< 8.3, > 8.2.2]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.