build(deps): bump mongoose from 8.24.4 to 9.10.3 in /backend

[dependabot]

Bumps mongoose from 8.24.4 to 9.10.3.

Release notes

Sourced from mongoose's releases.

9.10.3 / 2026-09-29

• fix(model): preserve unsaved documents after ordered bulkSave errors #16533 #16532 IbrahimHafez1
• fix(model): don't mutate the caller's update object in bulkWrite updateMany #16526 fadiroot
• fix(schema): run setters declared on the union path itself #16528 giaBaoJS
• fix(collection): open collection if connection was already opened #16527 #16525 #16524
• fix(query+model): replace {MODEL} in cast error messages from update and bulkWrite casting #16529 #16502 #16480

9.10.2 / 2026-09-22

• fix(schema): drop subpaths and singleNestedPaths when a path is removed #16521 #16520 luantaraschi
• fix(schema): register path-level setters on Map paths #16518 giaBaoJS
• fix(model): replace {MODEL} in castObject() cast error messages #16502 #16480 dylanpulver
• fix: preserve circular arrays when cloning with a seen map #16514 Shubham-Padkonde
• docs(async-await): fix broken link to Mongoose API docs #16517 joshuablac

9.10.1 / 2026-09-14

• types: relax populate Model generics to allow typed virtuals to be passed to populate in TypeScript 7 with skipLibCheck #16503

9.10.0 / 2026-09-10

• feat: upgrade mongodb driver -> 7.6.0
• feat(model): add Model.findAndCount() wrapper for limit+skip based pagination with countDocuments #16460 #16454
• feat(schema): add Schema.prototype.queryHelper() to make it easier to define query helpers in TypeScript #16464 #16410
• feat: support middleware skip option for cursors and custom hooks #16350 #15883 #8768 AbdelrahmanHafez
• fix: apply defaults to undefined array elements #16542 #9232
• types: support for type narrowing when using projection in find and findOne #16500 #15545
• types: make Schema.prototype.static() return type with new static #16464

9.9.5 / 2026-09-04

• fix(query): pass schema through when casting a nested $expr comparison #16496 rajanpanth
• fix(projection): build the dotted path correctly in isPathSelectedInclusive #16495 rajanpanth
• fix(document): replace {MODEL} in custom cast error messages from document validation #16480 #8300 AbinMadathil-Celigo
• types(model): add missing properties to listSearchIndexes() return type #16486 lazerg

9.9.4 / 2026-08-25

• fix(query): set strictQuery and strict on _mongooseOptions consistently #16451 #16447
• fix(hydration): use the doc model for looking up a ref #16453 rawmind
• fix(schema): drop the map values subpath when removing a map path #16457 rawmind
• fix(schema): remove a map that lives under a nested path #16461 #16457 luantaraschi
• fix(schema): do not repeat null in a toJSONSchema enum that already lists null #16456 luantaraschi
• fix(schema): clone a document array element with its own constructor signature #16463 #16462 luantaraschi
• fix(schema): keep the map value schematype a single object when cloning #16473 luantaraschi
• fix(schema): clarify duplicate index warning to note index is not created #16476 vjymisal0
• perf(model): index bulkSave write errors by document id #16474 yoominho91
• docs: add Atlas Vector Search and Atlas Search documentation #16395
• docs: fix dead MongoDB driver Collection link #16458 rajanpanth

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.10.3 / 2026-09-29

• fix(model): preserve unsaved documents after ordered bulkSave errors #16533 #16532 IbrahimHafez1
• fix(model): don't mutate the caller's update object in bulkWrite updateMany #16526 fadiroot
• fix(schema): run setters declared on the union path itself #16528 giaBaoJS
• fix(collection): open collection if connection was already opened #16527 #16525 #16524
• fix(query+model): replace {MODEL} in cast error messages from update and bulkWrite casting #16529 #16502 #16480

9.10.2 / 2026-09-22

• fix(schema): drop subpaths and singleNestedPaths when a path is removed #16521 #16520 luantaraschi
• fix(schema): register path-level setters on Map paths #16518 giaBaoJS
• fix(model): replace {MODEL} in castObject() cast error messages #16502 #16480 dylanpulver
• fix: preserve circular arrays when cloning with a seen map #16514 Shubham-Padkonde
• docs(async-await): fix broken link to Mongoose API docs #16517 joshuablac

9.10.1 / 2026-09-14

• types: relax populate Model generics to allow typed virtuals to be passed to populate in TypeScript 7 with skipLibCheck #16503

9.10.0 / 2026-09-10

• feat: upgrade mongodb driver -> 7.6.0
• feat(model): add Model.findAndCount() wrapper for limit+skip based pagination with countDocuments #16460 #16454
• feat(schema): add Schema.prototype.queryHelper() to make it easier to define query helpers in TypeScript #16464 #16410
• feat: support middleware skip option for cursors and custom hooks #16350 #15883 #8768 AbdelrahmanHafez
• fix: apply defaults to undefined array elements #16542 #9232
• types: support for type narrowing when using projection in find and findOne #16500 #15545
• types: make Schema.prototype.static() return type with new static #16464

9.9.5 / 2026-09-04

• fix(query): pass schema through when casting a nested $expr comparison #16496 rajanpanth
• fix(projection): build the dotted path correctly in isPathSelectedInclusive #16495 rajanpanth
• fix(document): replace {MODEL} in custom cast error messages from document validation #16480 #8300 AbinMadathil-Celigo
• types(model): add missing properties to listSearchIndexes() return type #16486 lazerg

9.9.4 / 2026-08-25

• fix(query): set strictQuery and strict on _mongooseOptions consistently #16451 #16447
• fix(hydration): use the doc model for looking up a ref #16453 rawmind
• fix(schema): drop the map values subpath when removing a map path #16457 rawmind
• fix(schema): remove a map that lives under a nested path #16461 #16457 luantaraschi
• fix(schema): do not repeat null in a toJSONSchema enum that already lists null #16456 luantaraschi
• fix(schema): clone a document array element with its own constructor signature #16463 #16462 luantaraschi
• fix(schema): keep the map value schematype a single object when cloning #16473 luantaraschi
• fix(schema): clarify duplicate index warning to note index is not created #16476 vjymisal0
• perf(model): index bulkSave write errors by document id #16474 yoominho91
• docs: add Atlas Vector Search and Atlas Search documentation #16395
• docs: fix dead MongoDB driver Collection link #16458 rajanpanth

Commits

• d5841fe chore: release 9.10.3
• 6779047 Merge pull request #16537 from Automattic/vkarpov15/gh-16529
• 5ed18f4 Merge pull request #16533 from IbrahimHafez1/fix/ordered-bulk-save-state
• 780de3f refactor(model): track bulkSave document indexes
• 04a985a refactor(model): separate ordered and unordered bulkSave results
• 519f399 fix(query+model): replace {MODEL} in cast error messages from update and bulk...
• 4093445 Merge pull request #16528 from giaBaoJS/fix/union-path-setters
• dd91af4 Merge pull request #16527 from Automattic/vkarpov15/gh-16524
• 3d905bb fix(model): preserve unsaved documents after ordered bulkSave errors
• 5d3bafd fix(schema): run setters declared on the union path itself
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.