npm: bump mongoose from 9.1.3 to 9.3.2

[dependabot]

Bumps mongoose from 9.1.3 to 9.3.2.

Release notes

Sourced from mongoose's releases.

9.3.2 / 2026-03-23

• fix(mongoose): throw error when trying to set null or undefined as options #16130 #16140
• fix(cast): include array value in query filter error message #16127 White-Devil2839
• fix(cast): replace assert.ok with descriptive Error in castNumber #16110 mrsandy1965
• fix(connection): standardize throw new Error to MongooseError #16142 techcodie
• fix(query): use MongooseError instead of Error #16132 ace-tk
• docs: add production environment example for autoIndex #16151 mrsandy1965
• docs: upgrade self-referencing http:// links to https:// #16150 mrsandy1965
• docs: fix incorrect Double cast comment and upgrade insecure plugin link #16148 mrsandy1965
• docs: fix redundant text and http link in installation section #16146 Puxhkar
• docs: fix typo 'mutiple' → 'multiple' in queries.md #16147 mrsandy1965
• docs: use HTTPS for external links in docs navigation #16133 ace-tk
• docs: use HTTPS for external links in CONTRIBUTING and homepage #16134 ace-tk
• docs(populate): replace removed mapReduce() API link #16135 ace-tk
• docs(models): replace removed count() and mapReduce() references #16123 White-Devil2839
• docs: fix broken count() and update() links in queries docs White-Devil2839
• docs: fix broken update() link in validation docs #16121 White-Devil2839
• docs: update GitHub link to use https #16120 White-Devil2839
• docs(documents): fix incorrect variable name in nullish coalescing example #16119 White-Devil2839
• docs: fix missing quotes in populate path examples #16118 White-Devil2839
• docs: fix missing comma in populate dynamic ref example #16117 White-Devil2839
• docs: clarify that transaction rollback marks fields as modified to allow re-saving #16112 ramanverse

9.3.1 / 2026-03-17

• fix(model): handle passing string projection to hydrate() #16082
• fix(model): fix bulkWrite() sorting #16079 #16080 pnkov
• fix(QueryCursor): fix wrong this context in QueryCursor close callback #16104 techcodie
• types(schema): infer schema options correctly for model context in statics #16046 #16102
• types(schema): fix type definition for HydratedDocType in autoTypedVirtuals #16083
• types(plugin): allow passing model with custom TStatics into Schema.prototype.plugin() #16090 #16086
• chore: use MongooseError instead of Error in schema, model, and aggregate #15995 mahmoodhamdi
• docs(projection): clean up jsdoc for parseProjection()

9.3.0 / 2026-03-10

• feat(schema): support discriminators option inline for better TypeScript support #16053
• feat(aggregate): add pipelineForUnionWith() helper to allow reusing pipelines with $unionWith in TypeScript #16033
• feat(setDefaultsOnInsert): pass query as context to default functions #16041 #16025
• fix: resolve deeply nested discriminator paths in arrayFilters #16072 Yatin81
• fix(changeStream): emit ready on next tick to allow stream to initialize
• fix(connection): handle calling watch() on disconnected connection
• fix: remove references to mongodb option "promiseLibrary" hasezoey
• fix(model+query): backwards compatible validateBeforeSave handling and avoid TypeError in removeUnusedArrayFilters on nullish update
• perf(model): remove unnecessary overhead when saving new doc
• types(InferRawDocType): fall back to using InferRawDocType instead of pulling non-raw inferred doc type if EnforcedDocType not set #16053
• types: add type constraints for Document#$model() and Document#model() mrazauskas
• docs: fix broken links and update MongoDB documentation links #16037 hasezoey
• docs(contributing): update issue tracker links to Automattic org AkaHarshit

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.3.2 / 2026-03-23

• fix(mongoose): throw error when trying to set null or undefined as options #16130 #16140
• fix(cast): include array value in query filter error message #16127 White-Devil2839
• fix(cast): replace assert.ok with descriptive Error in castNumber #16110 mrsandy1965
• fix(connection): standardize throw new Error to MongooseError #16142 techcodie
• fix(query): use MongooseError instead of Error #16132 ace-tk
• docs: add production environment example for autoIndex #16151 mrsandy1965
• docs: upgrade self-referencing http:// links to https:// #16150 mrsandy1965
• docs: fix incorrect Double cast comment and upgrade insecure plugin link #16148 mrsandy1965
• docs: fix redundant text and http link in installation section #16146 Puxhkar
• docs: fix typo 'mutiple' → 'multiple' in queries.md #16147 mrsandy1965
• docs: use HTTPS for external links in docs navigation #16133 ace-tk
• docs: use HTTPS for external links in CONTRIBUTING and homepage #16134 ace-tk
• docs(populate): replace removed mapReduce() API link #16135 ace-tk
• docs(models): replace removed count() and mapReduce() references #16123 White-Devil2839
• docs: fix broken count() and update() links in queries docs White-Devil2839
• docs: fix broken update() link in validation docs #16121 White-Devil2839
• docs: update GitHub link to use https #16120 White-Devil2839
• docs(documents): fix incorrect variable name in nullish coalescing example #16119 White-Devil2839
• docs: fix missing quotes in populate path examples #16118 White-Devil2839
• docs: fix missing comma in populate dynamic ref example #16117 White-Devil2839
• docs: clarify that transaction rollback marks fields as modified to allow re-saving #16112 ramanverse

9.3.1 / 2026-03-17

• fix(model): handle passing string projection to hydrate() #16082
• fix(model): fix bulkWrite() sorting #16079 #16080 pnkov
• fix(QueryCursor): fix wrong this context in QueryCursor close callback #16104 techcodie
• types(schema): infer schema options correctly for model context in statics #16046 #16102
• types(schema): fix type definition for HydratedDocType in autoTypedVirtuals #16083
• types(plugin): allow passing model with custom TStatics into Schema.prototype.plugin() #16090 #16086
• chore: use MongooseError instead of Error in schema, model, and aggregate #15995 mahmoodhamdi
• docs(projection): clean up jsdoc for parseProjection()

9.3.0 / 2026-03-10

• feat(schema): support discriminators option inline for better TypeScript support #16053
• feat(aggregate): add pipelineForUnionWith() helper to allow reusing pipelines with $unionWith in TypeScript #16033
• feat(setDefaultsOnInsert): pass query as context to default functions #16041 #16025
• fix: resolve deeply nested discriminator paths in arrayFilters #16072 Yatin81
• fix(changeStream): emit ready on next tick to allow stream to initialize
• fix(connection): handle calling watch() on disconnected connection
• fix: remove references to mongodb option "promiseLibrary" hasezoey
• fix(model+query): backwards compatible validateBeforeSave handling and avoid TypeError in removeUnusedArrayFilters on nullish update
• perf(model): remove unnecessary overhead when saving new doc
• types(InferRawDocType): fall back to using InferRawDocType instead of pulling non-raw inferred doc type if EnforcedDocType not set #16053
• types: add type constraints for Document#$model() and Document#model() mrazauskas
• docs: fix broken links and update MongoDB documentation links #16037 hasezoey
• docs(contributing): update issue tracker links to Automattic org AkaHarshit

... (truncated)

Commits

• fa46994 chore: release 9.3.2
• 3a5adb1 Merge pull request #16140 from Automattic/vkarpov15/gh-16130
• d342e9f Merge pull request #16151 from mrsandy1965/docs/autoindex-production-example
• 271e94f Merge pull request #16150 from mrsandy1965/fix/upgrade-self-referencing-http-...
• 24010ed docs: add production environment example for autoIndex
• c11d8a1 docs: upgrade self-referencing http:// links to https://
• d8fb047 Merge pull request #16146 from Puxhkar/docs/fix-installation-instructions
• 163e21f Merge pull request #16148 from mrsandy1965/fix/schematypes-double-comment-and...
• bb8619d Merge pull request #16147 from mrsandy1965/fix/typo-mutiple-queries-doc
• f7f711e docs: fix incorrect Double cast comment and upgrade insecure plugin link
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)