[Snyk] Upgrade mongoose from 8.0.0 to 8.18.0 #97
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade mongoose from 8.0.0 to 8.18.0. See this package in npm: mongoose See this project in Snyk: https://app.snyk.io/org/dulransam/project/bfd56d0a-c1ff-4d09-a775-9796425bb7f2?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade mongoose from 8.0.0 to 8.18.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 81 versions ahead of your current version.
The recommended version was released a month ago.
Issues fixed by the recommended upgrade:
SNYK-JS-MONGOOSE-8446504
SNYK-JS-MONGOOSE-8623536
Release notes
Package name: mongoose
-
8.18.0 - 2025-08-22
- feat(schema): support for union types #15574 #10894
- fix: trim long strings in minLength and maxLength error messages and display the string length #15571 #15550
- types(connection+collection): make BaseCollection and BaseConnection usable as values #15575 #15548
- types: remove logic that omits timestamps when virtuals, methods, etc. options set #15577 #12807
-
8.17.2 - 2025-08-18
- fix: avoid Model.validate() hanging when all paths fail casting #15580 #15579 piotracalski
- types(document): better support for flattenObjectIds and versionKey options for toObject() and toJSON() #15582 #15578
- docs: fix docs jsdoc tags and add UUID to be listed #15585
- docs(document): fix code sample that errors with "Cannot set properties of undefined" #15589
-
8.17.1 - 2025-08-07
- fix(query): propagate read preference and read concern to populate if read() called after populate() #15567 #15553
- fix(model): call correct function in autoSearchIndex #15569 #15565
- fix(model): allow setting statics option on discriminator schema #15568 #15556
- fix(model): remove unnecessary conversion of undefined -> null in findById #15566 #15551
- types: allow passing in projections without as const #15564 #15557
- types: support maxLength and minLength in SchemaTypeOptions #15570 #4720
-
8.17.0 - 2025-07-30
- feat: upgrade mongodb -> 6.18.0 #15552
- feat(mongoose): export base Connection and Collection classes #15548
- feat: make Schema.prototype.$conditionalHandlers public #15497
- types: automatically infer discriminator type #15547 #15535
- types: make versionKey: false disable __v from hydrated document #15524 #15511
- types: indicate support for mongodb abort #15549 GalacticHypernova
- types: add options property to schemas #15524
- types(schematype): make defaultOptions static and add schemaOptions to DocumentArray #15529 #15524
-
8.16.5 - 2025-07-25
- fix(map): avoid throwing required error if saving map of primitives with required: true #15542
- types(model): export MongooseBulkWriteResult type #15546
- types(connection): add base to connection type #15544
-
8.16.4 - 2025-07-16
- fix(connection): avoid calling connection.close() internally with force: Object #15534 #15531
- types(schema): handle required: string in schema definitions #15538 #15536
- types(document): allow calling $isDefault() with no args #15528 #15522
- types: infer Typescript string enums #15530 ruiaraujo
- types: pass TModelType down to schema statics #15537
-
8.16.3 - 2025-07-10
- fix(document): clean modified subpaths if unsetting map #15520 #15519
- fix: make DocumentArray SchemaType pass all options to embedded SchemaType #15523
- types: support readonly array in query.select #15527 omermizr
-
8.16.2 - 2025-07-07
- fix(cursor): populate after hydrating in queryCursor so populated docs get parent() #15498 #15494
- fix(schema): support toJSONSchema() on mixed types and improve error message about unsupported types #15492 #15489
- types: add _id and __v to toObject/toJSON transform type #15501 #15479
- types(schema): use user-provided THydratedDocumentType as context for virtual get() and set() #15517 #15516
- types: improve typing for transform option to toJSON and toObject #15485
- docs: link to custom setter docs from lowercase, etc. options and note that setters run on query filters #15493 #15491
- docs(jest): add note about resetModules #15515
-
8.16.1 - 2025-06-26
-
8.16.0 - 2025-06-16
-
8.15.2 - 2025-06-12
-
8.15.1 - 2025-05-26
-
8.15.0 - 2025-05-16
-
8.14.3 - 2025-05-13
-
8.14.2 - 2025-05-08
-
8.14.1 - 2025-04-29
-
8.14.0 - 2025-04-25
-
8.13.3 - 2025-04-24
-
8.13.2 - 2025-04-03
-
8.13.1 - 2025-03-28
-
8.13.0 - 2025-03-24
-
8.12.2 - 2025-03-21
-
8.12.1 - 2025-03-04
-
8.12.0 - 2025-03-03
-
8.11.0 - 2025-02-26
-
8.10.2 - 2025-02-25
-
8.10.1 - 2025-02-14
-
8.10.0 - 2025-02-05
-
8.9.7 - 2025-02-04
-
8.9.6 - 2025-01-31
-
8.9.5 - 2025-01-13
-
8.9.4 - 2025-01-09
-
8.9.3 - 2024-12-30
-
8.9.2 - 2024-12-19
-
8.9.1 - 2024-12-16
-
8.9.0 - 2024-12-13
-
8.8.4 - 2024-12-05
-
8.8.3 - 2024-11-26
-
8.8.2 - 2024-11-18
-
8.8.1 - 2024-11-08
-
8.8.0 - 2024-10-31
-
8.7.3 - 2024-10-25
-
8.7.2 - 2024-10-17
-
8.7.1 - 2024-10-09
-
8.7.0 - 2024-09-27
-
8.6.4 - 2024-09-26
-
8.6.3 - 2024-09-17
-
8.6.2 - 2024-09-11
-
8.6.1 - 2024-09-03
-
8.6.0 - 2024-08-28
-
8.5.5 - 2024-08-28
-
8.5.4 - 2024-08-23
-
8.5.3 - 2024-08-13
-
8.5.2 - 2024-07-30
-
8.5.1 - 2024-07-12
-
8.5.0 - 2024-07-08
-
8.4.5 - 2024-07-05
-
8.4.4 - 2024-06-25
-
8.4.3 - 2024-06-17
-
8.4.2 - 2024-06-17
-
8.4.1 - 2024-05-31
-
8.4.0 - 2024-05-17
-
8.3.5 - 2024-05-15
-
8.3.4 - 2024-05-06
-
8.3.3 - 2024-04-29
-
8.3.2 - 2024-04-16
-
8.3.1 - 2024-04-08
-
8.3.0 - 2024-04-03
-
8.2.4 - 2024-03-28
-
8.2.3 - 2024-03-21
-
8.2.2 - 2024-03-15
-
8.2.1 - 2024-03-04
-
8.2.0 - 2024-02-22
-
8.1.3 - 2024-02-16
-
8.1.2 - 2024-02-11
-
8.1.1 - 2024-01-24
-
8.1.0 - 2024-01-16
-
8.0.4 - 2024-01-09
-
8.0.3 - 2023-12-07
-
8.0.2 - 2023-11-28
-
8.0.1 - 2023-11-15
-
8.0.0 - 2023-10-31
from mongoose GitHub release notes8.18.0 / 2025-08-22
8.17.2 / 2025-08-18
8.17.1 / 2025-08-07
8.17.0 / 2025-07-30
8.16.5 / 2025-07-25
8.16.4 / 2025-07-16
8.16.3 / 2025-07-10
8.16.2 / 2025-07-07
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: