Bump mongoose from 9.1.0 to 9.9.5 in /backend

[dependabot]

Bumps mongoose from 9.1.0 to 9.9.5.

Release notes

Sourced from mongoose's releases.

9.9.5 / 2026-09-04

• fix(query): pass schema through when casting a nested $expr comparison #16496 rajanpanth
• fix(projection): build the dotted path correctly in isPathSelectedInclusive #16495 rajanpanth
• fix(document): replace {MODEL} in custom cast error messages from document validation #16480 #8300 AbinMadathil-Celigo
• types(model): add missing properties to listSearchIndexes() return type #16486 lazerg

9.9.4 / 2026-08-25

• fix(query): set strictQuery and strict on _mongooseOptions consistently #16451 #16447
• fix(hydration): use the doc model for looking up a ref #16453 rawmind
• fix(schema): drop the map values subpath when removing a map path #16457 rawmind
• fix(schema): remove a map that lives under a nested path #16461 #16457 luantaraschi
• fix(schema): do not repeat null in a toJSONSchema enum that already lists null #16456 luantaraschi
• fix(schema): clone a document array element with its own constructor signature #16463 #16462 luantaraschi
• fix(schema): keep the map value schematype a single object when cloning #16473 luantaraschi
• fix(schema): clarify duplicate index warning to note index is not created #16476 vjymisal0
• perf(model): index bulkSave write errors by document id #16474 yoominho91
• docs: add Atlas Vector Search and Atlas Search documentation #16395
• docs: fix dead MongoDB driver Collection link #16458 rajanpanth

9.9.3 / 2026-08-17

• perf(document): cache projection metadata and avoid scanning all projected paths for flat projections #16439 #16407 #16373 yogesh968
• fix(cast): reject arrays when casting to Int32 or Double #16446 rajanpanth
• docs: document new/returnOriginal deprecation from 9.2.0 #16449 #16008 #15972 alimughal95
• docs(schematypes): clarify that array default applies to the level it is declared on #16441 #9232

9.9.2 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()
• fix(document): support map wildcards in optimistic concurrency paths option #16436 #16383
• fix(model): set document session in bulkSave() so transaction retries restore document state #16438 #16432 yogesh968
• fix(connection): restore delete state across transaction retries #16435 #16433 snowyukitty
• fix(schema): put enum on array elements and support the object enum form in toJSONSchema #16444 #16443 Jaybhade
• perf(document): inline the type checks in $__hasOnlyPrimitiveValues() #14394 yogesh968
• types(document): respect schema toObject and toJSON options #16431 #15594 samuelmbabhazi
• types: import BSON from mongodb instead of bson #16434 #16434 orgads
• docs(populate): document that skip needs sort to paginate reliably #16442 #7579
• docs: remove unused jobs.pug #16437 #16430

9.9.1 / 2026-07-31

• fix(query): avoid path collision when excluding subdocuments with nested select: false paths #12798
• types(model): support overriding schema-level lean with lean: false #16413

9.9.0 / 2026-07-30

• perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.9.5 / 2026-09-04

• fix(query): pass schema through when casting a nested $expr comparison #16496 rajanpanth
• fix(projection): build the dotted path correctly in isPathSelectedInclusive #16495 rajanpanth
• fix(document): replace {MODEL} in custom cast error messages from document validation #16480 #8300 AbinMadathil-Celigo
• types(model): add missing properties to listSearchIndexes() return type #16486 lazerg

9.9.4 / 2026-08-25

• fix(query): set strictQuery and strict on _mongooseOptions consistently #16451 #16447
• fix(hydration): use the doc model for looking up a ref #16453 rawmind
• fix(schema): drop the map values subpath when removing a map path #16457 rawmind
• fix(schema): remove a map that lives under a nested path #16461 #16457 luantaraschi
• fix(schema): do not repeat null in a toJSONSchema enum that already lists null #16456 luantaraschi
• fix(schema): clone a document array element with its own constructor signature #16463 #16462 luantaraschi
• fix(schema): keep the map value schematype a single object when cloning #16473 luantaraschi
• fix(schema): clarify duplicate index warning to note index is not created #16476 vjymisal0
• perf(model): index bulkSave write errors by document id #16474 yoominho91
• docs: add Atlas Vector Search and Atlas Search documentation #16395
• docs: fix dead MongoDB driver Collection link #16458 rajanpanth

8.24.4 / 2026-08-21

• fix(discriminator): prevent indexes and callQueue duplication with shared nested schemas #16467 #16466 #15966 (8.x backport) AbinMadathil-Celigo

9.9.3 / 2026-08-17

• perf(document): cache projection metadata and avoid scanning all projected paths for flat projections #16439 #16407 #16373 yogesh968
• fix(cast): reject arrays when casting to Int32 or Double #16446 rajanpanth
• docs: document new/returnOriginal deprecation from 9.2.0 #16449 #16008 #15972 alimughal95
• docs(schematypes): clarify that array default applies to the level it is declared on #16441 #9232

8.24.3 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()

9.9.2 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()
• fix(document): support map wildcards in optimistic concurrency paths option #16436 #16383
• fix(model): set document session in bulkSave() so transaction retries restore document state #16438 #16432 yogesh968
• fix(connection): restore delete state across transaction retries #16435 #16433 snowyukitty
• fix(schema): put enum on array elements and support the object enum form in toJSONSchema #16444 #16443 Jaybhade
• perf(document): inline the type checks in $__hasOnlyPrimitiveValues() #14394 yogesh968
• types(document): respect schema toObject and toJSON options #16431 #15594 samuelmbabhazi
• types: import BSON from mongodb instead of bson #16434 #16434 orgads
• docs(populate): document that skip needs sort to paginate reliably #16442 #7579
• docs: remove unused jobs.pug #16437 #16430

... (truncated)

Commits

• 86292f0 chore: release 9.9.5
• 85e32e2 Merge pull request #16496 from rajanpanth/fix/cast-expr-nested-args
• 51ca33e Merge pull request #16495 from rajanpanth/fix/is-path-selected-inclusive-dotted
• 2baeeb4 Merge pull request #16486 from lazerg/gh-16485-list-search-indexes-types
• 605e328 fix(query): pass schema through when casting a nested $expr comparison
• 18ef9e1 fix(projection): build the dotted path correctly in isPathSelectedInclusive
• 4c1c6bf Merge branch 'master' into gh-16485-list-search-indexes-types
• e55d4ce Merge pull request #16487 from Automattic/dependabot/npm_and_yarn/master/esli...
• eb9fa48 test(schema): remove stray pasted URL that broke lint
• cf9a5d3 Merge pull request #16490 from Automattic/dependabot/npm_and_yarn/master/mark...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mongoose since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
codenames	Ready	Preview	Sep 7, 2026 11:44pm UTC

[github-actions]

Thank you for submitting your pull request! 🙌 We'll review it as soon as possible. In the meantime, please ensure that your changes align with our CONTRIBUTING.md. If there are any specific instructions or feedback regarding your PR, we'll provide them here. Thanks again for your contribution! 😊