Bump mongoose from 8.7.0 to 8.13.1 in /backend

[dependabot]

Bumps mongoose from 8.7.0 to 8.13.1.

Release notes

Sourced from mongoose's releases.

8.13.1 / 2025-03-28

• fix(populate): handle virtual populate on array of UUIDs #15329 #15315
• types: allow default function returning undefined with DocType override #15328

8.13.0 / 2025-03-24

• feat: bump mongodb driver -> 6.15.0
• feat: support custom types exported from driver #15321

8.12.2 / 2025-03-21

• fix(document): avoid stripping out fields in discriminator schema after select: false field #15322 #15308
• fix(AggregationCursor): make next() error if schema pre('aggregate') middleware throws error #15293 #15279
• fix(populate): correctly get schematypes when deep populating under a map #15302 #9359
• fix(model): avoid returning null from bulkSave() if error doesn't have writeErrors property #15323
• types: add WithTimestamps utility type #15318 baruchiro
• docs: update references to the ms module in date schema documentation #15319 baruchiro
• docs: fix typo in schematypes.md #15305 skyran1278

8.12.1 / 2025-03-04

• fix: match bson version with mongodb's bson version #15297 hasezoey

8.12.0 / 2025-03-03

• feat: bump mongodb driver to 6.14
• feat: expose "SchemaTypeOptions" in browser #15277 hasezoey
• docs: update field-level-encryption.md #15272 dphrag

8.11.0 / 2025-02-26

• feat(model): make bulkWrite results include MongoDB bulk write errors as well as validation errors #15271 #15265
• feat(document): add schemaFieldsOnly option to toObject() and toJSON() #15259 #15218
• feat: introduce populate ordered option for populating in series rather than in parallel for transactions #15239 #15231 #15210
• fix(bigint): throw error when casting BigInt that's outside of the bounds of what MongoDB can safely store #15230 #15200

8.10.2 / 2025-02-25

• fix(model+connection): return MongoDB BulkWriteResult instance even if no valid ops #15266 #15265
• fix(debug): avoid printing trusted symbol in debug output #15267 #15263
• types: make type inference logic resilient to no Buffer type due to missing @​types/node #15261

8.10.1 / 2025-02-14

• perf(document): only call undoReset() 1x/document #15257 #15255
• perf(schema): clear childSchemas when overwriting existing path to avoid performance degradations #15256 #15253
• perf: some more micro optimizations for find() and findOne() #14906 #15250
• fix(model): avoid adding timeout on Model.init() buffering to avoid unintentional dangling open handles #15251 #15241
• fix: avoid connection buffering on init if autoCreate: false #15247 #15241

... (truncated)

Changelog

Sourced from mongoose's changelog.

8.13.1 / 2025-03-28

• fix(populate): handle virtual populate on array of UUIDs #15329 #15315
• types: allow default function returning undefined with DocType override #15328

8.13.0 / 2025-03-24

• feat: bump mongodb driver -> 6.15.0
• feat: support custom types exported from driver #15321

8.12.2 / 2025-03-21

• fix(document): avoid stripping out fields in discriminator schema after select: false field #15322 #15308
• fix(AggregationCursor): make next() error if schema pre('aggregate') middleware throws error #15293 #15279
• fix(populate): correctly get schematypes when deep populating under a map #15302 #9359
• fix(model): avoid returning null from bulkSave() if error doesn't have writeErrors property #15323
• types: add WithTimestamps utility type #15318 baruchiro
• docs: update references to the ms module in date schema documentation #15319 baruchiro
• docs: fix typo in schematypes.md #15305 skyran1278

8.12.1 / 2025-03-04

• fix: match bson version with mongodb's bson version #15297 hasezoey

8.12.0 / 2025-03-03

• feat: bump mongodb driver to 6.14
• feat: expose "SchemaTypeOptions" in browser #15277 hasezoey
• docs: update field-level-encryption.md #15272 dphrag

8.11.0 / 2025-02-26

• feat(model): make bulkWrite results include MongoDB bulk write errors as well as validation errors #15271 #15265
• feat(document): add schemaFieldsOnly option to toObject() and toJSON() #15259 #15218
• feat: introduce populate ordered option for populating in series rather than in parallel for transactions #15239 #15231 #15210
• fix(bigint): throw error when casting BigInt that's outside of the bounds of what MongoDB can safely store #15230 #15200

8.10.2 / 2025-02-25

• fix(model+connection): return MongoDB BulkWriteResult instance even if no valid ops #15266 #15265
• fix(debug): avoid printing trusted symbol in debug output #15267 #15263
• types: make type inference logic resilient to no Buffer type due to missing @​types/node #15261

8.10.1 / 2025-02-14

• perf(document): only call undoReset() 1x/document #15257 #15255
• perf(schema): clear childSchemas when overwriting existing path to avoid performance degradations #15256 #15253
• perf: some more micro optimizations for find() and findOne() #14906 #15250
• fix(model): avoid adding timeout on Model.init() buffering to avoid unintentional dangling open handles #15251 #15241
• fix: avoid connection buffering on init if autoCreate: false #15247 #15241

... (truncated)

Commits

• 0aa9983 chore: release 8.13.1
• 1a308de Merge pull request #15332 from Automattic/revert-15331-vkarpov15/gh-15301
• a384ead Revert "types: make init hooks types accurately reflect runtime behavior"
• 3e5533e Merge pull request #15331 from Automattic/vkarpov15/gh-15301
• 08346a0 fix lint
• c53f5a2 Merge branch 'master' into vkarpov15/gh-15301
• b33698e add back removed tests from code review comments
• 63b5d76 Merge pull request #15329 from Automattic/vkarpov15/gh-15315
• ae3cc59 fix lint
• dd44c37 Update test/model.populate.test.js
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #324.