Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump mongodb from 6.13.0 to 6.13.1 #2137

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 21, 2025

Bumps mongodb from 6.13.0 to 6.13.1.

Release notes

Sourced from mongodb's releases.

v6.13.1

6.13.1 (2025-02-20)

The MongoDB Node.js team is pleased to announce version 6.13.1 of the mongodb package!

Release Notes

Remove extraneous Promise<Document> in Collection.replaceOne return type

The return type signature of the replaceOne method no longer includes the general Promise<Document> type. Thanks to @​arturmuller, the replaceOne type signature is now more accurate! 🎉

Fix writeConcern omitted when timeoutMS is provided

When timeoutMS and a write concern were provided, the writeConcern was incorrectly omitted from the final command executed by the driver.

Thanks @​stepanho for contributing the fix!

Update BSON version requirement to 6.10.3

This pulls in fixes made in bson versions 6.10.3 and 6.10.2 into the driver.

BSON 6.10.2 fixed an issue in calculateObjectSize ignoring the size contributed by BigInt values to a BSON document. This impacted batch splitting logic in bulkWrite operations: if the actual BSON was over the size returned by calculateObjectSize the server would return an error.

[!WARNING] BSON 6.10.3 addresses a potential data corruption risk with the use of useBigInt64 flag introduced in BSON 6.4.0, where negative Long values would be deserialized into BigInt as unsigned integers when the useBigInt64 flag was enabled. (Thanks to @​rkistner for reporting this issue!)

Bug Fixes

  • NODE-6407: use conversationId returned from server in saslContinue (#4368) (fbefa6b)
  • NODE-6613: Update error messages when primaries go stale (#4397) (6528c8d)
  • NODE-6690: Remove extraneous Document in replaceOne return type (#4383) (6c81d4e)
  • NODE-6763: pass WriteConcernOptions instead on WriteConcernSettings (#4421) (26f15d7)
  • NODE-6777: update BSON to 6.10.3 (#4428) (db5b9e0)

Documentation

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

Changelog

Sourced from mongodb's changelog.

6.13.1 (2025-02-20)

Bug Fixes

  • NODE-6407: use conversationId returned from server in saslContinue (#4368) (fbefa6b)
  • NODE-6613: Update error messages when primaries go stale (#4397) (6528c8d)
  • NODE-6690: Remove extraneous Document in replaceOne return type (#4383) (6c81d4e)
  • NODE-6763: pass WriteConcernOptions instead on WriteConcernSettings (#4421) (26f15d7)
  • NODE-6777: update BSON to 6.10.3 (#4428) (db5b9e0)
Commits
  • 21f2cb9 chore(main): release 6.13.1 [skip-ci] (#4391)
  • db5b9e0 fix(NODE-6777): update BSON to 6.10.3 (#4428)
  • 0789dff ci(NODE-6570): re-enable azure oidc auth tests (#4424)
  • a2998d5 ci(NODE-6768): regenerate lockfile (#4425)
  • 45233da test(NODE-6745): only find python when installing native (#4422)
  • efea166 ci(NODE-6728): test FLE on Alpine linux (#4417)
  • 26f15d7 fix(NODE-6763): pass WriteConcernOptions instead on WriteConcernSettings (#4421)
  • 94122fb ci(NODE-6749): make Atlas cluster prefix < 23 characters long (#4420)
  • d18108c ci: dont test aws on all server versions (#4418)
  • ae234a8 ci(NODE-6748): unskip serverless tests (#4416)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [mongodb](https://github.com/mongodb/node-mongodb-native) from 6.13.0 to 6.13.1.
- [Release notes](https://github.com/mongodb/node-mongodb-native/releases)
- [Changelog](https://github.com/mongodb/node-mongodb-native/blob/main/HISTORY.md)
- [Commits](mongodb/node-mongodb-native@v6.13.0...v6.13.1)

---
updated-dependencies:
- dependency-name: mongodb
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 21, 2025
@shopify-github-actions-access shopify-github-actions-access bot requested a review from a team as a code owner February 21, 2025 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant