Bump MongoDB.Driver from 3.7.1 to 3.9.0

[dependabot]

Updated MongoDB.Driver from 3.7.1 to 3.9.0.

Release notes

Sourced from MongoDB.Driver's releases.

3.9.0

This is the general availability release for the 3.9.0 version of the driver.

[!IMPORTANT]
Next minor release will raise the minimum supported MongoDB Server version from 4.2 to 4.4. This is in accordance with MongoDB Software Lifecycle Schedules. Support for MongoDB Server 4.2 will be dropped in a future release!

The main new features in 3.9.0 include:

• CSHARP-5567: Add a LINQ equivalent for $toHashedIndexKey
• CSHARP-4901: Add support for SearchMeta facet without operator
• CSHARP-5930: Allow registering the same encryption provider multiple times
• CSHARP-5899: Add support for "flat" indexing method in vector search index builders
• CSHARP-5931: Add builder support for $scoreFusion stage

Improvements:

• CSHARP-3556: Use EndPointServerSelector in SingleServerBinding instead of busy wait
• CSHARP-5611: Support ReadOnlySpan in ObjectId and eliminate the temporary byte array allocations

Fixes:

• CSHARP-5967: Ensure SerializerFinder proper support of Parse method
• CSHARP-5966: Add support of string.TrimStart and TrimEnd methods to SerializerFinder
• CSHARP-5942: Fix serializer resolution for dictionary paths with numeric string keys
• CSHARP-2868: Allow maxIdleTimeMS=0 and treat it as no idle time limit
• CSHARP-5762: Avoid changing "filter" to "parentFilter" in previously supported case
• CSHARP-5629: Respect BsonElement attribute in NamedIdMemberConvention
• CSHARP-6029: Execute endSessions on ServerSessionPool close
• CSHARP-6043: NullReferenceException in IEnumerableSerializerBase.Serialize when projecting nullable array with conditional Select
• CSHARP-6040: Fix StackOverflowException in convention CouldApply on self-referencing IEnumerable<T> types

Maintenance:

• CSHARP-6055: Update SharpCompress to remedy vulnerability
• CSHARP-6023: Update libmongocrypt URLs for 1.18.0+
• CSHARP-5943: Initial small AGENTS.md file for the C# driver
• CSHARP-5671: Replace Artifactory with ECR for container image pulls

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

3.8.1

This is a patch release that addresses a security issue:

• CSHARP-6034: Update Snappier to fix a security issue (GHSA-pggp-6c3x-2xmx)

Known warning when restoring: SharpCompress NU1902

When restoring a project that references this driver with the .NET 8 SDK or newer, NuGet may emit the NU1902 audit warning for the transitive SharpCompress 0.30.1 dependency (GHSA-6c8g-7p36-r338 — directory traversal via IArchive.WriteToDirectory()). The driver does not use that API; SharpCompress is only used for in-memory ZLib stream compression of MongoDB wire-protocol messages, so the driver's usage does not expose consumers to this advisory. This issue will be addressed in an upcoming release (CSHARP-6037).

Documentation on the .NET driver can be found here.

3.8.0

This is the general availability release for the 3.8.0 version of the driver.

The main new features in 3.8.0 include:

[!IMPORTANT]
Added support for MongoDB ’s Intelligent Workload Management (IWM) and ingress connection rate limiting features. The driver now gracefully handles write-blocking scenarios and optimizes connection establishment during high-load conditions to maintain application availability. More details in CSHARP-5802: Client Backpressure Support

• CSHARP-5882: Support storedSource in vector search indexes and returnStoredSource in $vectorSearch queries
• CSHARP-5769: Implement hasAncestor, hasRoot, and returnScope for Atlas Search
• CSHARP-5646: Implement vector similarity match expressions
• CSHARP-5762: MongoDB Vector Search now supports vector search against nested embeddings and arrays of embeddings.
• CSHARP-5884: Add new fields for Auto embedding in Atlas Vector search indexes

MongoDB v8.3 Compatible Features:

• CSHARP-5852: Expression to determine the subtype of BinData field
• CSHARP-5713: Allow native conversion from string to BSON object
• CSHARP-5949: $convert should allow any type to be converted to string
• CSHARP-5818: Allow users to generate a hash from a UTF-8 string or binary data
• CSHARP-5950: Support base conversion in $convert
• CSHARP-5847: Support Select/SelectMany/Where index overloads in LINQ provider
• CSHARP-5828: Add Rerank stage builder
• CSHARP-5656: Support Aggregation Operator to generate random object ids
• CSHARP-5973: Support SkipWhile/TakeWhile index overloads in LINQ provider
• CSHARP-5825: Support (de)serialization between BSON and EJSON
• CSHARP-5655: Support regular expressions in $replaceAll search string and $split delimiter

Improvements:

• CSHARP-5887: Simplify retryable read and writes
• CSHARP-2593: Add numeric error code to default error message in NativeMethods.CreateException
• CSHARP-2150: Add check that the serializer's ValueType matches the type when registering the serializer

Fixes:

• CSHARP-5947: Increase SingleServerReadBinding timeout
• CSHARP-2862: Check that max pool size is never less than min pool size in connection string
• CSHARP-5935: Command activities may be skipped when using pooled connection
• CSHARP-5952: SerializerFinder resolve wrong serializer for BsonDocument members

Maintenance:

• CSHARP-5957: Bump maxWireVersion to 9.0

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)