[Snyk] Upgrade mongoose from 8.6.1 to 8.6.4

[Tobsukka]

Snyk has created this PR to upgrade mongoose from 8.6.1 to 8.6.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2024-09-26.

Release notes

Package name: mongoose

• 8.6.4 - 2024-09-26
  

  8.6.4 / 2024-09-26

  • fix(document): avoid massive perf degradation when saving new doc with 10 level deep subdocs #14910 #14897
  • fix(model): skip applying static hooks by default if static name conflicts with aggregate middleware #14904 dragontaek-lee
  • fix(model): filter applying static hooks by default if static name conflicts with mongoose middleware #14908 dragontaek-lee
• 8.6.3 - 2024-09-17
  

  8.6.3 / 2024-09-17

  • fix: make getters convert uuid to string when calling toObject() and toJSON() #14890 #14869
  • fix: fix missing Aggregate re-exports for ESM #14886 wongsean
  • types(document): add generic param to depopulate() to allow updating properties #14891 #14876
• 8.6.2 - 2024-09-11
  

  8.6.2 / 2024-09-11

  • fix: make set merge deeply nested objects #14870 #14861 ianHeydoc
  • types: allow arbitrary keys in query filters again (revert #14764) #14874 #14863 #14862 #14842
  • types: make SchemaType static setters property accessible in TypeScript #14881 #14879
  • type(inferrawdoctype): infer Date types as JS dates rather than Mongoose SchemaType Date #14882 #14839
• 8.6.1 - 2024-09-03

from mongoose GitHub release notes

Commit messages

Package name: mongoose

• c4d96ea chore: release 8.6.4
• c6bd31d Merge branch '7.x'
• 3ede837 chore: release 7.8.2
• 34ed360 Merge pull request #14910 from Automattic/vkarpov15/gh-14897
• d273278 Merge branch 'master' into vkarpov15/gh-14897
• 8522f39 style: fix lint
• 95500b6 perf(document): remove unnecessary reset logic
• cc60077 Merge pull request #14908 from dragontaek-lee/skip-applying-static-hooks-model-document-middleware
• 1f7c742 Update applyStaticHooks.js
• 5ebe00a Merge pull request #14894 from Automattic/vkarpov15/gh-14893
• 5851261 perf(document): avoid unnecessarily pulling all subdocs when validating a subdoc
• 0426329 perf: add createDeepNestedDocArray benchmark re: #14897
• 328ddaa fix(document): avoid massive perf degradation when saving new doc with 10 level deep subdocs
• a06debe fix: remove redundant async
• c647a05 fix(model): skip applying static hooks by default if static name conflicts with model,document middleware
• 8655c6c fix(model): skip applying static hooks by default if static name conflicts with model,document middleware
• f9ca745 Merge pull request #14904 from dragontaek-lee/skip-applying-static-hooks-aggregate-middleware
• 0b81c6e Merge pull request #14899 from Automattic/IslandRhythms/fix-comments
• cf768dc fix: add clarifying comment
• c2caa0f fix(model): add test to skip applying static hooks by default when static name conflicts with aggregate middleware
• cd930c7 fix(model): skip applying static hooks by default if static name conflicts with aggregate middleware
• 42ffada standardize comment placement
• bd4440a fix(projection): also handle value objects in isInclusive
• 062016e fix(projection): avoid setting projection to unknown exclusive/inclusive if elemMatch on a Date, ObjectId, etc.

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs