Bump mongoose from 8.3.2 to 8.5.1

[dependabot[bot]]

Bumps mongoose from 8.3.2 to 8.5.1.

Release notes

Sourced from mongoose's releases.

8.5.1 / 2024-07-12

• perf(model): performance improvements for insertMany() #14724
• fix(model): avoid leaving subdoc defaults on top-level doc when setting subdocument to same value #14728 #14722
• fix(model): handle transactionAsyncLocalStorage option with insertMany() #14743
• types: make _id required on Document type #14735 #14660
• types: fix ChangeStream.close to return a Promise like the driver #14740 orgads

8.5.0 / 2024-07-08

• perf: memoize toJSON / toObject default options #14672
• feat(document): add $createModifiedPathsSnapshot(), $restoreModifiedPathsSnapshot(), $clearModifiedPaths() #14699 #14268
• feat(query): make sanitizeProjection prevent projecting in paths deselected in the schema #14691
• feat: allow setting array default value to null #14717 #6691
• feat(mongoose): allow drivers to set global plugins #14682
• feat(connection): bubble up monitorCommands events to Mongoose connection if monitorCommands option set #14681 #14611
• fix(document): ensure post('deleteOne') hooks are called when calling save() after subdoc.deleteOne() #14732 #9885
• fix(query): remove count() and findOneAndRemove() from query chaining #14692 #14689
• fix: remove default connection if setting createInitialConnection to false after Mongoose instance created #14679 #8302
• types(models+query): infer return type from schema for 1-level deep nested paths #14632
• types(connection): make transaction() return type match the executor function #14661 #14656
• docs: fix docs links in index.md mirasayon

8.4.5 / 2024-07-05

• types: correct this for validate.validator schematype option #14720 #14696
• docs(model): note that insertMany() with lean skips applying defaults #14723 #14698

8.4.4 / 2024-06-25

• perf: avoid unnecesary get() call and use faster approach for converting to string #14673 #14394
• fix(projection): handle projections on arrays in Model.hydrate() projection option #14686 #14680
• fix(document): avoid passing validateModifiedOnly to subdocs so subdocs get fully validating if they're directly modified #14685 #14677
• fix: handle casting primitive array with $elemMatch in bulkWrite() #14687 #14678
• fix(query): cast $pull using embedded discriminator schema when discriminator key is set in filter #14676 #14675
• types(connection): fix return type of withSession() #14690 tt-public
• types: add $documents pipeline stage and fix $unionWith type #14666 nick-statsig
• docs(findoneandupdate): improve example that shows findOneAndUpdate() returning doc before updates were applied #14671 #14670

8.4.3 / 2024-06-17

• fix: remove 0x flamegraph files from release

8.4.2 / 2024-06-17

• perf: more toObject() perf improvements #14623 #14606 #14394
• fix(model): check the value of overwriteModels in options when calling discriminator() #14646 uditha-g
• fix: avoid throwing TypeError when deleting an null entry on a populated Map #14654 futurliberta
• fix(connection): fix up some inconsistencies in operation-end event and add to docs #14659 #14648
• types: avoid inferring Boolean, Buffer, ObjectId as Date in schema definitions under certain circumstances #14667 #14630

... (truncated)

Changelog

Sourced from mongoose's changelog.

8.5.1 / 2024-07-12

• perf(model): performance improvements for insertMany() #14724
• fix(model): avoid leaving subdoc defaults on top-level doc when setting subdocument to same value #14728 #14722
• fix(model): handle transactionAsyncLocalStorage option with insertMany() #14743
• types: make _id required on Document type #14735 #14660
• types: fix ChangeStream.close to return a Promise like the driver #14740 orgads

8.5.0 / 2024-07-08

• perf: memoize toJSON / toObject default options #14672
• feat(document): add $createModifiedPathsSnapshot(), $restoreModifiedPathsSnapshot(), $clearModifiedPaths() #14699 #14268
• feat(query): make sanitizeProjection prevent projecting in paths deselected in the schema #14691
• feat: allow setting array default value to null #14717 #6691
• feat(mongoose): allow drivers to set global plugins #14682
• feat(connection): bubble up monitorCommands events to Mongoose connection if monitorCommands option set #14681 #14611
• fix(document): ensure post('deleteOne') hooks are called when calling save() after subdoc.deleteOne() #14732 #9885
• fix(query): remove count() and findOneAndRemove() from query chaining #14692 #14689
• fix: remove default connection if setting createInitialConnection to false after Mongoose instance created #14679 #8302
• types(models+query): infer return type from schema for 1-level deep nested paths #14632
• types(connection): make transaction() return type match the executor function #14661 #14656
• docs: fix docs links in index.md mirasayon

8.4.5 / 2024-07-05

• types: correct this for validate.validator schematype option #14720 #14696
• docs(model): note that insertMany() with lean skips applying defaults #14723 #14698

8.4.4 / 2024-06-25

• perf: avoid unnecesary get() call and use faster approach for converting to string #14673 #14394
• fix(projection): handle projections on arrays in Model.hydrate() projection option #14686 #14680
• fix(document): avoid passing validateModifiedOnly to subdocs so subdocs get fully validating if they're directly modified #14685 #14677
• fix: handle casting primitive array with $elemMatch in bulkWrite() #14687 #14678
• fix(query): cast $pull using embedded discriminator schema when discriminator key is set in filter #14676 #14675
• types(connection): fix return type of withSession() #14690 tt-public
• types: add $documents pipeline stage and fix $unionWith type #14666 nick-statsig
• docs(findoneandupdate): improve example that shows findOneAndUpdate() returning doc before updates were applied #14671 #14670

8.4.3 / 2024-06-17

• fix: remove 0x flamegraph files from release

8.4.2 / 2024-06-17

• perf: more toObject() perf improvements #14623 #14606 #14394
• fix(model): check the value of overwriteModels in options when calling discriminator() #14646 uditha-g
• fix: avoid throwing TypeError when deleting an null entry on a populated Map #14654 futurliberta
• fix(connection): fix up some inconsistencies in operation-end event and add to docs #14659 #14648
• types: avoid inferring Boolean, Buffer, ObjectId as Date in schema definitions under certain circumstances #14667 #14630

... (truncated)

Commits

• 1972f7f chore: release 8.5.1
• 70e8e19 Merge pull request #14743 from Automattic/vkarpov15/gh-14738
• 3646952 fix(model): handle transactionAsyncLocalStorage option with insertMany()
• 090297e Merge pull request #14740 from orgads/stream-close-promise
• 0fbe1d4 Fix ChangeStream.close to return a Promise<void> like the driver
• d30a3b9 Merge pull request #14724 from Automattic/vkarpov15/gh-14719
• 8223f91 refactor: rename to $__toObjectShallow() based on code review comments
• 9dc2e8a Merge branch 'master' into vkarpov15/gh-14719
• 7d742e2 style: fix lint
• b698c28 perf(model): skip $toObject() for insertMany with only primitive values
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security[bot]]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@mongodb-js/saslprep@1.1.7	None	0	648 kB	devtoolsbot
npm/@types/whatwg-url@11.0.5	None	0	14.9 kB	types
npm/bson@6.8.0	None	0	2.4 MB	dbx-node
npm/mongodb-connection-string-url@3.0.1	None	0	38.4 kB	addaleax
npm/mongodb@6.7.0	environment, filesystem, network, shell	0	3.04 MB	dbx-node
npm/mongoose@8.5.1	environment, network	+1	2.72 MB	vkarpov15
npm/sift@17.1.3	None	0	372 kB	crcn

🚮 Removed packages: npm/@mongodb-js/saslprep@1.1.5, npm/@types/whatwg-url@11.0.4, npm/bson@6.6.0, npm/mongodb-connection-string-url@3.0.0, npm/mongodb@6.5.0, npm/mongoose@8.3.2, npm/sift@16.0.1

View full report↗︎

[dependabot[bot]]

Superseded by #565.