build(deps): bump mongoose from 8.20.3 to 9.1.3

[dependabot]

Bumps mongoose from 8.20.3 to 9.1.3.

Release notes

Sourced from mongoose's releases.

9.1.3 / 2026-01-09

• fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig #15941 #15938
• fix(query): include preview of current and incoming update in error when merging normal update with pipeline #15939 #15928
• types(model): apply basic type casting to paths underneath subdocuments #15948 #15947
• types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members #15942 #15923
• docs(schema): expose "DocumentArrayElement" #15590 hasezoey

9.1.2 / 2025-01-05

• fix(subdocs): pass options to pre-save hooks for subdocs #15921 #15920 AbdelrahmanHafez
• perf(model): select only _id when checking document existence during save() #15919 AbdelrahmanHafez

9.1.1 / 2025-12-30

• fix(document): avoid 'Cannot mix array and object updates' on doc.updateOne() with pipeline #15928
• docs: update default search version to 9.x #15926 #15925

9.1.0 / 2025-12-29

• feat(model): make pathsToSave handle saving just a subpath of a modified path #15896
• feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870
• feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options #15917 #15915 #15912 AbdelrahmanHafez
• feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817
• perf: optimize Object.keys() checks and optional chaining #15865 AbdelrahmanHafez
• fix: add support for typescript style enums #15914 #15913 mjfwebb
• fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901
• types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15918 #15910
• types: allow calling create() with TRawDocType for better generics support #15903 #15902
• types(document): add id virtual getter by default to HydrateDocument<> if TOverrides is Record<string, never> #15906 #15900
• docs(schema): add lean to list of schema options #15907 #15894 #12081

9.0.2 / 2025-12-17

• fix(model): trigger error post hook on bulkwrite when pre-hook throws an error #15882 AbdelrahmanHafez
• fix(document): use bitwise OR to accumulate version mode flags #15893 AbdelrahmanHafez
• types(queries): apply Mongoose casting to default MongoDB driver _id in RootFilterOperators #15891 #15887 #15779
• types(schema): correctly infer virtuals, methods on hydrated doc type from schema options #15892
• types: fixed this parameter type detection for methods with arguments #15885 I-Enderlord-I
• types: export InferRawDocTypeWithout_id to replicate Mongoose 8 InferRawDocType behavior #15815 #15814 JavaScriptBach
• docs: improve colors on dark mode #15879 AbdelrahmanHafez
• docs(model): add overwriteImmutable option #15884 AbdelrahmanHafez
• refactor: remove internal callbacks for buffering #15890

9.0.1 / 2025-12-05

• perf: use native Buffer.equals() for buffer comparison #15821 AbdelrahmanHafez
• fix(model): fix overwriteImmutable not working with timestamps: true, add overwriteImmutable types re #15781 #15819 AbdelrahmanHafez
• fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15782 #15781 jhaayushkumar
• fix(schema): Add enumValues property to Number enum for consistency with String enum #15824 AkaHarshit

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.1.3 / 2026-01-09

• fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig #15941 #15938
• fix(query): include preview of current and incoming update in error when merging normal update with pipeline #15939 #15928
• types(model): apply basic type casting to paths underneath subdocuments #15948 #15947
• types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members #15942 #15923
• docs(schema): expose "DocumentArrayElement" #15590 hasezoey

9.1.2 / 2026-01-05

• fix(subdocs): pass options to pre-save hooks for subdocs #15921 #15920 AbdelrahmanHafez
• perf(model): select only _id when checking document existence during save() #15919 AbdelrahmanHafez

9.1.1 / 2025-12-30

• fix(document): avoid 'Cannot mix array and object updates' on doc.updateOne() with pipeline #15928
• docs: update default search version to 9.x #15926 #15925

9.1.0 / 2025-12-29

• feat(model): make pathsToSave handle saving just a subpath of a modified path #15896
• feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870
• feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options #15917 #15915 #15912 AbdelrahmanHafez
• feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817
• perf: optimize Object.keys() checks and optional chaining #15865 AbdelrahmanHafez
• fix: add support for typescript style enums #15914 #15913 mjfwebb
• fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #15904 #15901
• types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #15918 #15910
• types: allow calling create() with TRawDocType for better generics support #15903 #15902
• types(document): add id virtual getter by default to HydrateDocument<> if TOverrides is Record<string, never> #15906 #15900
• docs(schema): add lean to list of schema options #15907 #15894 #12081

8.21.0 / 2025-12-29

• feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870
• feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817
• fix: add support for typescript style enums #15914 #15913 mjfwebb

8.20.4 / 2025-12-18

• fix(model): ensure $isDeleted is set after calling doc.deleteOne() successfully #15898
• fix(document): use bitwise OR to accumulate version mode flags #15893 #15888 AbdelrahmanHafez

9.0.2 / 2025-12-17

• fix(model): trigger error post hook on bulkwrite when pre-hook throws an error #15882 AbdelrahmanHafez
• fix(document): use bitwise OR to accumulate version mode flags #15893 AbdelrahmanHafez
• types(queries): apply Mongoose casting to default MongoDB driver _id in RootFilterOperators #15891 #15887 #15779
• types(schema): correctly infer virtuals, methods on hydrated doc type from schema options #15892
• types: fixed this parameter type detection for methods with arguments #15885 I-Enderlord-I

... (truncated)

Commits

• 732673a chore: release 9.1.3
• 7f60e51 Merge pull request #15948 from Automattic/vkarpov15/gh-15947
• 458ab26 lint fix
• 71bcdb8 types(model): apply basic type casting to paths underneath subdocuments
• 898399b Merge pull request #15945 from Automattic/fix-flaky-encryption-test
• 048306d Merge pull request #15590 from hasezoey/exposeDocArrayElement
• e5c7729 Fix incorrect reference to DocumentArrayElement
• 7793459 Update lib/schema/documentArrayElement.js
• 6f482bf Update lib/schema/documentArray.js
• e2b3274 Update lib/schema/subdocument.js
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for mongoose since your current version.

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
mongoose	[< 8.3, > 8.2.2]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.