Bump mongoose from 9.1.0 to 9.10.0 in /backend

[dependabot]

Bumps mongoose from 9.1.0 to 9.10.0.

Release notes

Sourced from mongoose's releases.

9.10.0 / 2026-09-10

• feat: upgrade mongodb driver -> 7.6.0
• feat(model): add Model.findAndCount() wrapper for limit+skip based pagination with countDocuments #16460 #16454
• feat(schema): add Schema.prototype.queryHelper() to make it easier to define query helpers in TypeScript #16464 #16410
• feat: support middleware skip option for cursors and custom hooks #16350 #15883 #8768 AbdelrahmanHafez
• fix: apply defaults to undefined array elements #16542 #9232
• types: support for type narrowing when using projection in find and findOne #16500 #15545
• types: make Schema.prototype.static() return type with new static #16464

9.9.5 / 2026-09-04

• fix(query): pass schema through when casting a nested $expr comparison #16496 rajanpanth
• fix(projection): build the dotted path correctly in isPathSelectedInclusive #16495 rajanpanth
• fix(document): replace {MODEL} in custom cast error messages from document validation #16480 #8300 AbinMadathil-Celigo
• types(model): add missing properties to listSearchIndexes() return type #16486 lazerg

9.9.4 / 2026-08-25

• fix(query): set strictQuery and strict on _mongooseOptions consistently #16451 #16447
• fix(hydration): use the doc model for looking up a ref #16453 rawmind
• fix(schema): drop the map values subpath when removing a map path #16457 rawmind
• fix(schema): remove a map that lives under a nested path #16461 #16457 luantaraschi
• fix(schema): do not repeat null in a toJSONSchema enum that already lists null #16456 luantaraschi
• fix(schema): clone a document array element with its own constructor signature #16463 #16462 luantaraschi
• fix(schema): keep the map value schematype a single object when cloning #16473 luantaraschi
• fix(schema): clarify duplicate index warning to note index is not created #16476 vjymisal0
• perf(model): index bulkSave write errors by document id #16474 yoominho91
• docs: add Atlas Vector Search and Atlas Search documentation #16395
• docs: fix dead MongoDB driver Collection link #16458 rajanpanth

9.9.3 / 2026-08-17

• perf(document): cache projection metadata and avoid scanning all projected paths for flat projections #16439 #16407 #16373 yogesh968
• fix(cast): reject arrays when casting to Int32 or Double #16446 rajanpanth
• docs: document new/returnOriginal deprecation from 9.2.0 #16449 #16008 #15972 alimughal95
• docs(schematypes): clarify that array default applies to the level it is declared on #16441 #9232

9.9.2 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()
• fix(document): support map wildcards in optimistic concurrency paths option #16436 #16383
• fix(model): set document session in bulkSave() so transaction retries restore document state #16438 #16432 yogesh968
• fix(connection): restore delete state across transaction retries #16435 #16433 snowyukitty
• fix(schema): put enum on array elements and support the object enum form in toJSONSchema #16444 #16443 Jaybhade
• perf(document): inline the type checks in $__hasOnlyPrimitiveValues() #14394 yogesh968
• types(document): respect schema toObject and toJSON options #16431 #15594 samuelmbabhazi
• types: import BSON from mongodb instead of bson #16434 #16434 orgads
• docs(populate): document that skip needs sort to paginate reliably #16442 #7579

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.10.0 / 2026-09-10

• feat: upgrade mongodb driver -> 7.6.0
• feat(model): add Model.findAndCount() wrapper for limit+skip based pagination with countDocuments #16460 #16454
• feat(schema): add Schema.prototype.queryHelper() to make it easier to define query helpers in TypeScript #16464 #16410
• feat: support middleware skip option for cursors and custom hooks #16350 #15883 #8768 AbdelrahmanHafez
• fix: apply defaults to undefined array elements #16542 #9232
• types: support for type narrowing when using projection in find and findOne #16500 #15545
• types: make Schema.prototype.static() return type with new static #16464

9.9.5 / 2026-09-04

• fix(query): pass schema through when casting a nested $expr comparison #16496 rajanpanth
• fix(projection): build the dotted path correctly in isPathSelectedInclusive #16495 rajanpanth
• fix(document): replace {MODEL} in custom cast error messages from document validation #16480 #8300 AbinMadathil-Celigo
• types(model): add missing properties to listSearchIndexes() return type #16486 lazerg

9.9.4 / 2026-08-25

• fix(query): set strictQuery and strict on _mongooseOptions consistently #16451 #16447
• fix(hydration): use the doc model for looking up a ref #16453 rawmind
• fix(schema): drop the map values subpath when removing a map path #16457 rawmind
• fix(schema): remove a map that lives under a nested path #16461 #16457 luantaraschi
• fix(schema): do not repeat null in a toJSONSchema enum that already lists null #16456 luantaraschi
• fix(schema): clone a document array element with its own constructor signature #16463 #16462 luantaraschi
• fix(schema): keep the map value schematype a single object when cloning #16473 luantaraschi
• fix(schema): clarify duplicate index warning to note index is not created #16476 vjymisal0
• perf(model): index bulkSave write errors by document id #16474 yoominho91
• docs: add Atlas Vector Search and Atlas Search documentation #16395
• docs: fix dead MongoDB driver Collection link #16458 rajanpanth

8.24.4 / 2026-08-21

• fix(discriminator): prevent indexes and callQueue duplication with shared nested schemas #16467 #16466 #15966 (8.x backport) AbinMadathil-Celigo

9.9.3 / 2026-08-17

• perf(document): cache projection metadata and avoid scanning all projected paths for flat projections #16439 #16407 #16373 yogesh968
• fix(cast): reject arrays when casting to Int32 or Double #16446 rajanpanth
• docs: document new/returnOriginal deprecation from 9.2.0 #16449 #16008 #15972 alimughal95
• docs(schematypes): clarify that array default applies to the level it is declared on #16441 #9232

8.24.3 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()

9.9.2 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()
• fix(document): support map wildcards in optimistic concurrency paths option #16436 #16383

... (truncated)

Commits

• 396a2a6 chore: add 9.10 changelog
• 7b28d7a chore: release 9.10.0
• bbc3fd1 Merge pull request #16455 from Automattic/9.10
• f9cef50 Update error handling in findAndCount method
• 0dd4091 Initialize options with an empty object if undefined
• b10301d Merge pull request #16488 from Automattic/dependabot/npm_and_yarn/master/moch...
• a23f167 Merge pull request #16500 from Automattic/vkarpov15/gh-15545
• 97052b4 bump max instantiations to 420k for now
• 8d74b51 perf: hydrated doc cleanup
• d1aa32a refactor: remove ProjectedLeanDocument
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mongoose since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
codenames	Ready	Preview	Sep 14, 2026 11:44pm UTC

[github-actions]

Thank you for submitting your pull request! 🙌 We'll review it as soon as possible. In the meantime, please ensure that your changes align with our CONTRIBUTING.md. If there are any specific instructions or feedback regarding your PR, we'll provide them here. Thanks again for your contribution! 😊