Skip to content

chore(deps): bump mongoose from 8.24.0 to 8.24.1#138

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mongoose-8.24.1
Open

chore(deps): bump mongoose from 8.24.0 to 8.24.1#138
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mongoose-8.24.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 25, 2026

Copy link
Copy Markdown
Contributor

Bumps mongoose from 8.24.0 to 8.24.1.

Release notes

Sourced from mongoose's releases.

8.24.1

  • fix(documentarray): reindex subdocs after array reordering and removal so subsequent nested changes save using the correct path #16282 AbdelrahmanHafez
  • fix(document): avoid accessing special properties in Document.prototype.get()
  • fix(schema): avoid returning inherited properties from schema path lookups, including paths underneath maps of subdocuments
  • fix(clone): isolate cloned arrays from source documents #16281 AbdelrahmanHafez
  • types: enable exactOptionalPropertyTypes in TypeScript tests #16287
Changelog

Sourced from mongoose's changelog.

8.24.1 / 2026-06-22

  • fix(documentarray): reindex subdocs after array reordering and removal so subsequent nested changes save using the correct path #16282 AbdelrahmanHafez
  • fix(document): avoid accessing special properties in Document.prototype.get()
  • fix(schema): avoid returning inherited properties from schema path lookups, including paths underneath maps of subdocuments
  • fix(clone): isolate cloned arrays from source documents #16281 AbdelrahmanHafez
  • types: enable exactOptionalPropertyTypes in TypeScript tests #16287
Commits
  • d5dd19e chore: release 8.24.1
  • 0c346a4 fix(documentarray): reindex subdocs after reordering (#16282)
  • 550b803 fix(document): additional defensive checks in Document.prototype.get()
  • 953d085 fix(schema): only return own properties in schematype lookups
  • 1e1679f types: use exactOptionalPropertyTypes in tests (#16287)
  • 051b095 fix(clone): isolate cloned arrays from source documents (#16281)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [mongoose](https://github.com/Automattic/mongoose) from 8.24.0 to 8.24.1.
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/8.24.1/CHANGELOG.md)
- [Commits](Automattic/mongoose@8.24.0...8.24.1)

---
updated-dependencies:
- dependency-name: mongoose
  dependency-version: 8.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependabot dependencies Pull requests that update a dependency file web-team labels Jun 25, 2026
@dependabot dependabot Bot requested a review from a team as a code owner June 25, 2026 04:04
@dependabot dependabot Bot requested review from falric and perlan and removed request for a team June 25, 2026 04:04
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 25, 2026
@dependabot dependabot Bot requested review from joni9kth and ssandru June 25, 2026 04:04
@dependabot dependabot Bot added the web-team label Jun 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies Pull requests that update a dependency file web-team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants