[Snyk] Upgrade mongodb from 3.0.11 to 3.7.3 #1
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade mongodb from 3.0.11 to 3.7.3. See this package in npm: https://www.npmjs.com/package/mongodb See this project in Snyk: https://app.snyk.io/org/andrei.baducu/project/dc40f07b-d368-464e-97f5-55a0057a6b18?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade mongodb from 3.0.11 to 3.7.3.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-MONGODB-473855
Why? Has a fix available, CVSS 7.5
SNYK-JS-BSON-561052
Why? Has a fix available, CVSS 7.5
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: mongodb
-
3.7.3 - 2021-10-20
- fix(NODE-3515): do proper opTime merging in bulk results by @ durran in #3011
- Reference: https://docs.mongodb.com/drivers/node
- API: https://mongodb.github.io/node-mongodb-native/3.7
- Changelog: https://github.com/mongodb/node-mongodb-native/blob/3.7/HISTORY.md
-
3.7.2 - 2021-10-05
- NODE-3622: bump optional-require for additional yarn berry pnp support (#2989) (ec23d6302)
- Reference: https://docs.mongodb.com/drivers/node
- API: https://mongodb.github.io/node-mongodb-native/3.7
- Changelog: https://github.com/mongodb/node-mongodb-native/blob/3.7/HISTORY.md
-
3.7.1 - 2021-09-14
- NODE-3424: use hello for monitoring commands (#2964) (910c564)
- Reference: https://docs.mongodb.com/drivers/node
- API: https://mongodb.github.io/node-mongodb-native/3.7
- Changelog: https://github.com/mongodb/node-mongodb-native/blob/3.7/HISTORY.md
-
3.7.0 - 2021-08-31
// Declare API version "1" for the client
// Declare API version "1" for the client, with strict on
// Declare API version "1" for the client, with deprecationErrors on
- NODE-3191: backport versioned api (#2850) (93a47fd)
- NODE-3377: driver should allow arbitrary explain levels (#2961) (96c8ab4)
- NODE-3463: pass explain error through to callback (#2949) (e5975af)
- Reference: https://docs.mongodb.com/drivers/node/current/
- API: https://mongodb.github.io/node-mongodb-native/3.7/api/
- Changelog: https://github.com/mongodb/node-mongodb-native/blob/v3.7.0/HISTORY.md
-
3.6.12 - 2021-08-30
- NODE-3487: check for nullish aws mechanism property (#2957) (5902b4c)
- NODE-3528: add support for snappy v7 (#2947) (54f5c2d)
- Reference: https://docs.mongodb.com/drivers/node/current/
- API: https://mongodb.github.io/node-mongodb-native/3.6/api/
- Changelog: https://github.com/mongodb/node-mongodb-native/blob/v3.6.12/HISTORY.md
-
3.6.11 - 2021-08-05
- NODE-1843: bulk operations ignoring provided sessions (#2898) (9244b17)
- NODE-3199: unable to bundle driver due to uncaught require (#2903) (60efe9d)
- Reference: https://docs.mongodb.com/drivers/node/current/
- API: http://mongodb.github.io/node-mongodb-native/3.6/api
- Changelog: https://github.com/mongodb/node-mongodb-native/blob/3.6/HISTORY.md
-
3.6.10 - 2021-07-06
-
3.6.9 - 2021-05-26
-
3.6.8 - 2021-05-21
-
3.6.7 - 2021-05-18
-
3.6.6 - 2021-04-06
-
3.6.5 - 2021-03-16
-
3.6.4 - 2021-02-02
-
3.6.3 - 2020-11-06
-
3.6.2 - 2020-09-10
-
3.6.1 - 2020-09-02
-
3.6.0 - 2020-07-30
-
3.6.0-beta.0 - 2020-04-14
-
3.5.11 - 2020-09-10
-
3.5.10 - 2020-07-30
-
3.5.9 - 2020-06-12
-
3.5.8 - 2020-05-28
-
3.5.7 - 2020-04-29
-
3.5.6 - 2020-04-14
-
3.5.5 - 2020-03-11
-
3.5.4 - 2020-02-25
-
3.5.3 - 2020-02-12
-
3.5.2 - 2020-01-20
-
3.5.1 - 2020-01-17
-
3.5.0 - 2020-01-14
-
3.4.1 - 2019-12-19
-
3.4.0 - 2019-12-10
-
3.3.5 - 2019-11-26
-
3.3.4 - 2019-11-11
-
3.3.4-rc0 - 2019-11-06
-
3.3.3 - 2019-10-16
-
3.3.2 - 2019-08-28
-
3.3.1 - 2019-08-23
-
3.3.0 - 2019-08-13
-
3.3.0-beta2 - 2019-07-18
-
3.3.0-beta1 - 2019-06-18
-
3.2.7 - 2019-06-04
-
3.2.6 - 2019-05-24
-
3.2.5 - 2019-05-17
-
3.2.4 - 2019-05-08
-
3.2.3 - 2019-04-05
-
3.2.2 - 2019-03-22
-
3.2.1 - 2019-03-21
-
3.2.0-beta2 - 2019-03-10
-
3.2.0-beta1 - 2019-02-27
-
3.1.13 - 2019-01-23
-
3.1.12 - 2019-01-16
-
3.1.11 - 2019-01-15
-
3.1.10 - 2018-11-16
-
3.1.9 - 2018-11-06
-
3.1.8 - 2018-10-10
-
3.1.7 - 2018-10-09
-
3.1.6 - 2018-09-15
-
3.1.5 - 2018-09-14
-
3.1.4 - 2018-08-25
-
3.1.3 - 2018-08-13
-
3.1.2 - 2018-08-13
-
3.1.1 - 2018-07-05
-
3.1.0 - 2018-06-27
-
3.1.0-beta4 - 2018-05-11
-
3.1.0-beta3 - 2018-05-08
-
3.1.0-beta2 - 2018-04-19
-
3.1.0-beta1 - 2018-04-18
-
3.0.11 - 2018-06-28
from mongodb GitHub release notesThe MongoDB Node.js team is pleased to announce version 3.7.3 of the mongodb package!
What's Changed
Full Changelog: v3.7.2...v3.7.3
Documentation
We invite you to try the mongodb library immediately, and report any issues to the NODE project.
The MongoDB Node.js team is pleased to announce version 3.7.2 of the mongodb package!
Release Highlights
This release contains a fix for optional require of dependencies on yarn berry.
Bug Fixes
Documentation
We invite you to try the mongodb library immediately, and report any issues to the NODE project.
The MongoDB Node.js team is pleased to announce version 3.7.1 of the mongodb package!
Release Highlights
This release contains an internal improvement that makes our monitor utilize the new hello handshake for monitoring when available.
Features
Documentation
We invite you to try the mongodb library immediately, and report any issues to the NODE project.
The MongoDB Node.js team is pleased to announce version 3.7.0 of the mongodb package!
Release Highlights
Versioned API
Versioned API is a new feature in MongoDB 5.0 that allows user-selectable API versions, subsets of MongoDB server semantics, to be declared on a client. During communication with a server, clients with a declared API version will force the server to behave in a manner compatible with the API version. Declaring an API version on a client can be used to ensure consistent responses from a server, providing long term API stability for an application. The declared API version is applied to all commands run through the client, including those sent through the generic RunCommand helper. Specifying versioned API options in the command document AND declaring an API version on the client is not supported and will lead to undefined behavior.
Declare an API version on a client
client = new MongoClient(uri, { serverApi: { version: '1' } });
cursor = client.db('database').collection('coll').find(...);
Strict mode
Declaring a
strictAPI version will cause the MongoDB server to reject all commands that are not part of the declared API version. This includes command options and aggregation pipeline stages. For example, the followingfindcall would fail because thetailableoption is not part of version 1:client = new MongoClient(uri, { serverApi: { version: '1', strict: true } });
// Fails with an error
cursor = client.db('database').collection('coll').find({ ... }, { tailable: true });
Deprecation Errors
The
deprecationErrorsoption can be used to enable command failures when using functionality that is deprecated from version 1. Note that at the time of this writing, no deprecations in version 1 exist.client = new MongoClient(uri, { serverApi: { version: '1', deprecationErrors: true } });
// Note: since API version "1" is the initial version, there are no deprecated commands to provide as an example yet.
Features
Bug Fixes
Documentation
We invite you to try the mongodb library immediately, and report any issues to the NODE project.
The MongoDB Node.js team is pleased to announce version 3.6.12 of the mongodb package!
Bug Fixes
Documentation
We invite you to try the mongodb library immediately, and report any issues to the NODE project.
The MongoDB Node.js team is pleased to announce version 3.6.11 of the mongodb package!
Release Highlights
This patch addresses a few bugs listed below.
Notably, we fixed an issue with the way we imported one of our optional dependencies that blocked webpack bundling.
If you are a webpack user you will still get warnings for our optional dependencies (if you don't use them).
You can hush the warnings by adding this option to your webpack config:
It is important to note that this will leave the imports in place and not pull in the code to your bundle. If you later do adopt using these dependencies you'll want to revert the relevant setting.
Bug Fixes
Documentation
We invite you to try the mongodb package immediately, and report any issues to the NODE project.
Commit messages
Package name: mongodb
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs