chore(deps): bump mongoose from 8.20.1 to 8.21.0 in /backend

[dependabot]

Bumps mongoose from 8.20.1 to 8.21.0.

Release notes

Sourced from mongoose's releases.

8.21.0 / 2025-12-29

• feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817
• feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870
• fix: add support for typescript style enums #15914 #15913 mjfwebb

8.20.4 / 2025-12-18

• fix(model): ensure $isDeleted is set after calling doc.deleteOne() successfully #15898
• fix(document): use bitwise OR to accumulate version mode flags #15893 #15888 AbdelrahmanHafez

8.20.3 / 2025-12-15

• perf: use Object.hasOwn instead of Object#hasOwnProperty #15875 AbdelrahmanHafez
• fix: improve error when calling Document.prototype.init() with null/undefined #15812 Vegapunk-debug
• types(schema): avoid treating paths with default: null as required #15889
• types(schema): allow partial statics to schema.statics() #15780

8.20.2 / 2025-12-05

• fix(model): bump version if necessary after successful bulkSave() #15809 #15800
• fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15789 #15782 #15781
• types(schema): allow calling schema.static() with as TStatics #15794 #15780

Changelog

Sourced from mongoose's changelog.

8.21.0 / 2025-12-29

• feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #15908 #15870
• feat(document): add support for getAtomics() to allow custom container types to utilize atomics #15817
• fix: add support for typescript style enums #15914 #15913 mjfwebb

8.20.4 / 2025-12-18

• fix(model): ensure $isDeleted is set after calling doc.deleteOne() successfully #15898
• fix(document): use bitwise OR to accumulate version mode flags #15893 #15888 AbdelrahmanHafez

9.0.2 / 2025-12-17

• fix(model): trigger error post hook on bulkwrite when pre-hook throws an error #15882 AbdelrahmanHafez
• fix(document): use bitwise OR to accumulate version mode flags #15893 AbdelrahmanHafez
• types(queries): apply Mongoose casting to default MongoDB driver _id in RootFilterOperators #15891 #15887 #15779
• types(schema): correctly infer virtuals, methods on hydrated doc type from schema options #15892
• types: fixed this parameter type detection for methods with arguments #15885 I-Enderlord-I
• types: export InferRawDocTypeWithout_id to replicate Mongoose 8 InferRawDocType behavior #15815 #15814 JavaScriptBach
• docs: improve colors on dark mode #15879 AbdelrahmanHafez
• docs(model): add overwriteImmutable option #15884 AbdelrahmanHafez
• refactor: remove internal callbacks for buffering #15890

8.20.3 / 2025-12-15

• perf: use Object.hasOwn instead of Object#hasOwnProperty #15875 AbdelrahmanHafez
• fix: improve error when calling Document.prototype.init() with null/undefined #15812 Vegapunk-debug
• types(schema): avoid treating paths with default: null as required #15889
• types(schema): allow partial statics to schema.statics() #15780

9.0.1 / 2025-12-05

• perf: use native Buffer.equals() for buffer comparison #15821 AbdelrahmanHafez
• fix(model): fix overwriteImmutable not working with timestamps: true, add overwriteImmutable types re #15781 #15819 AbdelrahmanHafez
• fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15782 #15781 jhaayushkumar
• fix(schema): Add enumValues property to Number enum for consistency with String enum #15824 AkaHarshit
• fix: incorrect variable bug in double casting #15849 #15848 lomesh2312
• fix: clear timeout in collection operations #15852 techcodie
• types(query+model): use function overrides instead of | Query<any, any> to support using Query as filter #15791 #15779
• docs(migrating_to_9): clarify removing next() from pre middleware #15813
• docs: add dark mode support and CSS improvements #15753
• docs: Mongoose compatibility page updates #15797 alexbevi
• docs: Add closing backticks to code block in migration guide #15783 isnifer
• docs: fix documentation link in connection.js #15804 salittle0

8.20.2 / 2025-12-05

• fix(model): bump version if necessary after successful bulkSave() #15809 #15800
• fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15789 #15782 #15781
• types(schema): allow calling schema.static() with as TStatics #15794 #15780

... (truncated)

Commits

• 560d02e chore: release 8.21.0
• a410e0e Merge pull request #15924 from Automattic/8.21
• 5fe843c Merge pull request #15908 from Automattic/vkarpov15/gh-15870
• abf1941 Merge branch '8.x' into 8.21
• afbe2fb fix: add support for typescript style enums (#15914)
• 1b6c430 fix lint
• c7eaaee fix: set document deleteOne and updateOne query parameters after document mid...
• 6d34581 fix tests
• 3c52a59 feat(document+model): pass options to pre('deleteOne') and update+options to ...
• bca78fe chore: release 8.20.4
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.