chore(deps-dev): bump mongoose from 8.24.2 to 9.11.2

[dependabot]

Bumps mongoose from 8.24.2 to 9.11.2.

Release notes

Sourced from mongoose's releases.

9.11.2 / 2026-10-12

• perf: avoid applying saveSubdocs and sharding plugins to subdocuments #16585
• perf: upgrade to kareem@3.4.1 for mongoosejs/kareem#47 #16588
• fix(model): cast array filter values in bulkWrite() #16574 #16573 OmBhandwaldar
• fix(schema): allow function messages for number min/max and string minlength #16579 #16572 #8512 NotAFlightRisk
• types: make MergeType more efficiently handle MergeType<A, {}> #16581 #16580
• docs: fix broken API anchors and a malformed link #16583 SatvikMishra08

9.11.1 / 2026-10-07

• fix(document): call recursive toObject() when setting a path to a nested object #16571
• fix(update): keep casting array filters after a path not in the schema #16558 giaBaoJS
• fix(document): apply flattenDecimals when toObject() takes the shallow fast path #16569 #16568 jeremyml
• fix(query): cast operators under $not inside $elemMatch on primitive arrays #16542 #13880 breken-ai
• fix(query): use embedded discriminator schema when filter selects the key with $eq or $in #16543 breken-ai
• fix(documentarray): don't pass arrayPathIndex to subdocuments when initializing nested document arrays #16546 Mohamed-Elshesheny
• fix(cursor): await driver cleanup when destroying query cursors #16562 #16560 IbrahimHafez1
• fix(cursor): reject getDriverCursor after initialization errors #16563 #16561 IbrahimHafez1
• types(schema): treat Int32 paths as number #16565 #16564 lazerg
• types(models): align UpdateOneModel and UpdateManyModel update typing with UpdateQuery #16559 #16545 aipd506

9.11.0 / 2026-10-05

• feat: use MongoDB Node.js driver 7.7.x #16550
• feat(query): add Query.prototype.findAndCount() for composable paginated queries #16508 #16504 lokeshllkumar
• fix: avoid double-calling validators on document arrays underneath nested paths #16484 #16291 #5411
• types: pass TLeanResultType into query for type narrowing support with lean() #16523 #16519
• docs(guide): use async/await instead of removed callbacks #16566 joi-agent
• test: run TypeScript tests on typescript 5+7 with combinations of exactOptionalPropertyTypes, skipLibCheck, strict #16510 #16506

9.10.4 / 2026-10-02

• fix: handle MongoDB server 9.x returning collation: { locale: 'simple' } on all indexes #16557
• fix(populate): resolve dotted parent path when collecting deferred sub-populate children #16538 jfits
• fix(array): compare dates by value in indexOf() so pull() removes them #16535 giaBaoJS
• fix(map): register $set when Map#set() replaces an array #16540 #16539 luantaraschi
• fix(query): cast case and then expressions in $expr $switch branches #16534 kwy404
• docs(guide): fix read preference tag set example #16541 NotAFlightRisk

9.10.3 / 2026-09-29

• fix(model): preserve unsaved documents after ordered bulkSave errors #16533 #16532 IbrahimHafez1
• fix(model): don't mutate the caller's update object in bulkWrite updateMany #16526 fadiroot
• fix(schema): run setters declared on the union path itself #16528 giaBaoJS
• fix(collection): open collection if connection was already opened #16527 #16525 #16524
• fix(query+model): replace {MODEL} in cast error messages from update and bulkWrite casting #16529 #16502 #16480

9.10.2 / 2026-09-22

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.11.2 / 2026-10-12

• perf: avoid applying saveSubdocs and sharding plugins to subdocuments #16585
• perf: upgrade to kareem@3.4.1 for mongoosejs/kareem#47 #16588
• fix(model): cast array filter values in bulkWrite() #16574 #16573 OmBhandwaldar
• fix(schema): allow function messages for number min/max and string minlength #16579 #16572 #8512 NotAFlightRisk
• types: make MergeType more efficiently handle MergeType<A, {}> #16581 #16580
• docs: fix broken API anchors and a malformed link #16583 SatvikMishra08

9.11.1 / 2026-10-07

• fix(document): call recursive toObject() when setting a path to a nested object #16571
• fix(update): keep casting array filters after a path not in the schema #16558 giaBaoJS
• fix(document): apply flattenDecimals when toObject() takes the shallow fast path #16569 #16568 jeremyml
• fix(query): cast operators under $not inside $elemMatch on primitive arrays #16542 #13880 breken-ai
• fix(query): use embedded discriminator schema when filter selects the key with $eq or $in #16543 breken-ai
• fix(documentarray): don't pass arrayPathIndex to subdocuments when initializing nested document arrays #16546 Mohamed-Elshesheny
• fix(cursor): await driver cleanup when destroying query cursors #16562 #16560 IbrahimHafez1
• fix(cursor): reject getDriverCursor after initialization errors #16563 #16561 IbrahimHafez1
• types(schema): treat Int32 paths as number #16565 #16564 lazerg
• types(models): align UpdateOneModel and UpdateManyModel update typing with UpdateQuery #16559 #16545 aipd506

9.11.0 / 2026-10-05

• feat: use MongoDB Node.js driver 7.7.x #16550
• feat(query): add Query.prototype.findAndCount() for composable paginated queries #16508 #16504 lokeshllkumar
• fix: avoid double-calling validators on document arrays underneath nested paths #16484 #16291 #5411
• types: pass TLeanResultType into query for type narrowing support with lean() #16523 #16519
• docs(guide): use async/await instead of removed callbacks #16566 joi-agent
• test: run TypeScript tests on typescript 5+7 with combinations of exactOptionalPropertyTypes, skipLibCheck, strict #16510 #16506

9.10.4 / 2026-10-02

• fix: handle MongoDB server 9.x returning collation: { locale: 'simple' } on all indexes #16557
• fix(populate): resolve dotted parent path when collecting deferred sub-populate children #16538 jfits
• fix(array): compare dates by value in indexOf() so pull() removes them #16535 giaBaoJS
• fix(map): register $set when Map#set() replaces an array #16540 #16539 luantaraschi
• fix(query): cast case and then expressions in $expr $switch branches #16534 kwy404
• docs(guide): fix read preference tag set example #16541 NotAFlightRisk

9.10.3 / 2026-09-29

• fix(model): preserve unsaved documents after ordered bulkSave errors #16533 #16532 IbrahimHafez1
• fix(model): don't mutate the caller's update object in bulkWrite updateMany #16526 fadiroot
• fix(schema): run setters declared on the union path itself #16528 giaBaoJS
• fix(collection): open collection if connection was already opened #16527 #16525 #16524
• fix(query+model): replace {MODEL} in cast error messages from update and bulkWrite casting #16529 #16502 #16480

9.10.2 / 2026-09-22

... (truncated)

Commits

• a477fca chore: release 9.11.2
• 8111c11 Merge pull request #16574 from OmBhandwaldar/fix/bulkwrite-cast-array-filters
• 7944871 Merge pull request #16585 from Automattic/vkarpov15/perf-fixup
• 6b69ea4 Merge pull request #16579 from Automattic/vkarpov15/gh-16572
• d8ceee6 fix: address a couple of claude comments
• d2ea541 Merge pull request #16581 from Automattic/vkarpov15/query-typescript-perf-master
• 57b26b9 Merge pull request #16583 from SatvikMishra08/docs/fix-broken-api-anchors
• 98331b8 Merge pull request #16588 from Automattic/vkarpov15/20261012/upgrade-kareem
• d69c1a1 fix: handle skipping built-in plugins for subdocuments at the middleware defi...
• d30768b chore: remove min-release-age temporarily for kareem 3.4.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)