chore(deps): bump mongoose from 8.24.1 to 9.9.4

[dependabot]

Bumps mongoose from 8.24.1 to 9.9.4.

Release notes

Sourced from mongoose's releases.

9.9.4 / 2026-08-25

• fix(query): set strictQuery and strict on _mongooseOptions consistently #16451 #16447
• fix(hydration): use the doc model for looking up a ref #16453 rawmind
• fix(schema): drop the map values subpath when removing a map path #16457 rawmind
• fix(schema): remove a map that lives under a nested path #16461 #16457 luantaraschi
• fix(schema): do not repeat null in a toJSONSchema enum that already lists null #16456 luantaraschi
• fix(schema): clone a document array element with its own constructor signature #16463 #16462 luantaraschi
• fix(schema): keep the map value schematype a single object when cloning #16473 luantaraschi
• fix(schema): clarify duplicate index warning to note index is not created #16476 vjymisal0
• perf(model): index bulkSave write errors by document id #16474 yoominho91
• docs: add Atlas Vector Search and Atlas Search documentation #16395
• docs: fix dead MongoDB driver Collection link #16458 rajanpanth

9.9.3 / 2026-08-17

• perf(document): cache projection metadata and avoid scanning all projected paths for flat projections #16439 #16407 #16373 yogesh968
• fix(cast): reject arrays when casting to Int32 or Double #16446 rajanpanth
• docs: document new/returnOriginal deprecation from 9.2.0 #16449 #16008 #15972 alimughal95
• docs(schematypes): clarify that array default applies to the level it is declared on #16441 #9232

9.9.2 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()
• fix(document): support map wildcards in optimistic concurrency paths option #16436 #16383
• fix(model): set document session in bulkSave() so transaction retries restore document state #16438 #16432 yogesh968
• fix(connection): restore delete state across transaction retries #16435 #16433 snowyukitty
• fix(schema): put enum on array elements and support the object enum form in toJSONSchema #16444 #16443 Jaybhade
• perf(document): inline the type checks in $__hasOnlyPrimitiveValues() #14394 yogesh968
• types(document): respect schema toObject and toJSON options #16431 #15594 samuelmbabhazi
• types: import BSON from mongodb instead of bson #16434 #16434 orgads
• docs(populate): document that skip needs sort to paginate reliably #16442 #7579
• docs: remove unused jobs.pug #16437 #16430

9.9.1 / 2026-07-31

• fix(query): avoid path collision when excluding subdocuments with nested select: false paths #12798
• types(model): support overriding schema-level lean with lean: false #16413

9.9.0 / 2026-07-30

• perf(document): improve toObject perf with faster string checks and avoiding unnecessary isSelected on paths with no getters #16407 #16373 #16385
• perf(model): improve insertMany() performance and general change tracking performance #16370
• perf(timestamps): avoid adding $setOnInsert for createdAt unless upsert set #16411
• perf: improve toObject() performance #16408 #16405 #16378 #14394 BIGSUS24
• types: add discriminator key to each member of embedded discriminator enum- #16412 #16045

9.8.1 / 2026-07-27

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.9.4 / 2026-08-25

• fix(query): set strictQuery and strict on _mongooseOptions consistently #16451 #16447
• fix(hydration): use the doc model for looking up a ref #16453 rawmind
• fix(schema): drop the map values subpath when removing a map path #16457 rawmind
• fix(schema): remove a map that lives under a nested path #16461 #16457 luantaraschi
• fix(schema): do not repeat null in a toJSONSchema enum that already lists null #16456 luantaraschi
• fix(schema): clone a document array element with its own constructor signature #16463 #16462 luantaraschi
• fix(schema): keep the map value schematype a single object when cloning #16473 luantaraschi
• fix(schema): clarify duplicate index warning to note index is not created #16476 vjymisal0
• perf(model): index bulkSave write errors by document id #16474 yoominho91
• docs: add Atlas Vector Search and Atlas Search documentation #16395
• docs: fix dead MongoDB driver Collection link #16458 rajanpanth

8.24.4 / 2026-08-21

• fix(discriminator): prevent indexes and callQueue duplication with shared nested schemas #16467 #16466 #15966 (8.x backport) AbinMadathil-Celigo

9.9.3 / 2026-08-17

• perf(document): cache projection metadata and avoid scanning all projected paths for flat projections #16439 #16407 #16373 yogesh968
• fix(cast): reject arrays when casting to Int32 or Double #16446 rajanpanth
• docs: document new/returnOriginal deprecation from 9.2.0 #16449 #16008 #15972 alimughal95
• docs(schematypes): clarify that array default applies to the level it is declared on #16441 #9232

8.24.3 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()

9.9.2 / 2026-08-10

• fix(query): apply sanitizeFilter on countDocuments and cursor()
• fix(document): support map wildcards in optimistic concurrency paths option #16436 #16383
• fix(model): set document session in bulkSave() so transaction retries restore document state #16438 #16432 yogesh968
• fix(connection): restore delete state across transaction retries #16435 #16433 snowyukitty
• fix(schema): put enum on array elements and support the object enum form in toJSONSchema #16444 #16443 Jaybhade
• perf(document): inline the type checks in $__hasOnlyPrimitiveValues() #14394 yogesh968
• types(document): respect schema toObject and toJSON options #16431 #15594 samuelmbabhazi
• types: import BSON from mongodb instead of bson #16434 #16434 orgads
• docs(populate): document that skip needs sort to paginate reliably #16442 #7579
• docs: remove unused jobs.pug #16437 #16430

9.9.1 / 2026-07-31

• fix(query): avoid path collision when excluding subdocuments with nested select: false paths #12798 BIGSUS24
• types(model): apply schema-level lean to find() #16413
• types(model): support overriding schema-level lean with lean: false #16413

9.9.0 / 2026-07-30

... (truncated)

Commits

• a4b8a60 chore: release 9.9.4
• 9ffac59 Merge pull request #16474 from yoominho91/perf/bulksave-error-index
• e57f554 Merge pull request #16478 from vjymisal0/fix/duplicate-index-warning-message
• aa68225 docs: fix markdown lint
• e3b2db6 Merge pull request #16395 from RaschidJFR/docs/mongodb-sync-20260708-151113
• e76ea0a Clarify embedded_movies collection usage
• 72c9d59 Improve search example
• 5e57227 perf(model): only index bulkSave errors for large batches
• ec2d92d docs(schema): clarify duplicate index warning to note index is not created (g...
• 5e98644 Merge pull request #16473 from luantaraschi/fix/clone-map-value-schematype
• Additional commits viewable in compare view

[github-actions]

No updates since 2026-08-28T10:11:13Z (over 1 days), so this PR has been converted to draft. That stops it holding CI runners.

Nothing is lost — gh pr ready 3131, or the "Ready for review" button, picks it straight back up. Add the keep-ready label to exempt it permanently.

Converting to draft disables auto-merge, so PRs with auto-merge enabled are excluded from this entirely.

[github-actions]

No updates since 2026-08-30T12:01:00Z (over 1 days), so this PR has been converted to draft. That stops it holding CI runners.

Nothing is lost — gh pr ready 3131, or the "Ready for review" button, picks it straight back up. Add the keep-ready label to exempt it permanently.

Converting to draft disables auto-merge, so PRs with auto-merge enabled are excluded from this entirely.

[HughParry]

Superseded by #3164, which lands this bump together with the other nine open dependabot PRs against a single lockfile.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.