[Snyk] Upgrade mongoose from 8.7.1 to 8.15.1

[cyri113]

Snyk has created this PR to upgrade mongoose from 8.7.1 to 8.15.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 32 versions ahead of your current version.

• The recommended version was released a month ago.

Release notes

Package name: mongoose

• 8.15.1 - 2025-05-26
  

  8.15.1 / 2025-05-26

  • types: correct handling of _id in ProjectionType #15432 #15418
  • types: fix definition of VectorSearch.$vectorSearch #15429 chriskrycho
  • docs: add Document#save to list of function with callbacks removed #15433 SethFalco
• 8.15.0 - 2025-05-16
  

  8.15.0 / 2025-05-16

  • feat: CSFLE support #15390 baileympearson
  • feat: add strictFilter option to findOneAndUpdate (#14913) #15402 #14913 muazahmed-dev
  • feat(error): set cause to MongoDB error reason on ServerSelection errors #15420 #15416
  • fix(model): make bulkSave() rely on document.validateSync() to validate docs and skip bulkWrite casting #15415 #15410
  • types: stricter projection typing with 1-level deep nesting #15418 #15327 #13840 pshaddel
  • docs: emphasize automatic type inference in TypeScript intro and statics/methods, remove duplicated statics.md #15421
• 8.14.3 - 2025-05-13
  

  8.14.3 / 2025-05-13

  • types(schema): allow post('init') #15413 #15412 #15333
  • types: fix signature of DocumentArray.id #15414 Sainan
  • docs: fix typo - change 'prodecure' to 'procedure' #15419 0xEbrahim
• 8.14.2 - 2025-05-08
  

  8.14.2 / 2025-05-08

  • fix(query): handle casting array filter paths underneath array filter paths with embedded discriminators #15388 #15386
  • docs(typescript): correct schema and model generic params in TS virtuals docs #15391
  • docs+types(schema): add alternative optimisticConcurrency syntaxes to docs + types #15405 #10591
  • chore: add Node 24 to CI matrix #15408 stscoundrel
• 8.14.1 - 2025-04-29
  

  8.14.1 / 2025-04-29

  • fix: correct change tracking with maps of arrays of primitives and maps of maps #15374 #15350
  • fix(populate): consistently convert Buffer representation of UUID to hex string to avoid confusing populate assignment #15383 #15382
  • docs: add TypeScript Query guide with info on lean() + transform() #15377 #15311
• 8.14.0 - 2025-04-25
  

  8.14.0 / 2025-04-25

  • feat: upgrade MongoDB driver -> 6.16 #15371
  • feat: implement Query findById methods #15337 sderrow
  • feat(subdocument): support schematype-level minimize option to disable minimizing empty subdocuments #15336 #15313
  • feat: add skipOriginalStackTraces option to avoid stack trace performance overhead #15345 #15194
  • fix(model): disallow Model.findOneAndUpdate(update) and fix TypeScript types re: findOneAndUpdate #15365 #15363
  • types: correctly recurse in InferRawDocType #15357 #14954 JavaScriptBach
  • types: include virtuals in toJSON and toObject output if virtuals: true set #15346 #15316
  • types: make init hooks types accurately reflect runtime behavior #15331 #15301
• 8.13.3 - 2025-04-24
  

  8.13.3 / 2025-04-24

  • fix: export MongooseBulkSaveIncompleteError #15370 #15369
  • fix: clone POJOs and arrays when casting query filter to avoid mutating objects #15367 #15364
  • types(connection): add Connection.prototype.bulkWrite() to types #15368 #15359
  • docs: add version requirements to v7 migration docs #15361 SethFalco
  • docs: update links in deleteOne & deleteMany API def #15360 Elliot67
  • docs: adds Model#count to list of fns callback removed from #15349 SethFalco
• 8.13.2 - 2025-04-03
• 8.13.1 - 2025-03-28
• 8.13.0 - 2025-03-24
• 8.12.2 - 2025-03-21
• 8.12.1 - 2025-03-04
• 8.12.0 - 2025-03-03
• 8.11.0 - 2025-02-26
• 8.10.2 - 2025-02-25
• 8.10.1 - 2025-02-14
• 8.10.0 - 2025-02-05
• 8.9.7 - 2025-02-04
• 8.9.6 - 2025-01-31
• 8.9.5 - 2025-01-13
• 8.9.4 - 2025-01-09
• 8.9.3 - 2024-12-30
• 8.9.2 - 2024-12-19
• 8.9.1 - 2024-12-16
• 8.9.0 - 2024-12-13
• 8.8.4 - 2024-12-05
• 8.8.3 - 2024-11-26
• 8.8.2 - 2024-11-18
• 8.8.1 - 2024-11-08
• 8.8.0 - 2024-10-31
• 8.7.3 - 2024-10-25
• 8.7.2 - 2024-10-17
• 8.7.1 - 2024-10-09

from mongoose GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Explain this complex logic.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai explain this code block.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and explain its main purpose.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai generate docstrings to generate docstrings for this PR.
• @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.