chore(deps): [Snyk] Upgrade bson from 5.1.0 to 5.4.0

[tshuli]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade bson from 5.1.0 to 5.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2023-07-05.

Release notes

Package name: bson

• 5.4.0 - 2023-07-05
  

  5.4.0 (2023-07-03)

  The MongoDB Node.js team is pleased to announce version 5.4.0 of the bson package!

  Release Notes

  Improved React Native experience

  The BSON package now ships a bundle made to work on React Native without additional polyfills preconfigured. The necessary APIs (TextEncoder/TextDecoder & atob/btoa) are now vendored into the RN bundle directly. Users should still install react-native-get-random-values themselves to get securely generated UUIDs and ObjectIds. Read more in the React Native section of our readme.

  Improved BSON UTF8 Decoding Performance

  In the v5 major release of BSON we internally abstracted the different byte manipulation APIs used based on whether the library is running in Node.js or in a browser. This abstraction required us to create a subarray before invoking the environment's UTF8 decoding API. Creating the subarray before invoking Node.js' Buffer.prototype.toString API turns out to cause an unnecessary slow down. We have now updated the UTF8 stringification step on Node.js to invoke Buffer.prototype.toString with the start and end offsets. See #585 for our research.

  Features

  • NODE-4938: improve react native bundle experience (#578) (7e16636)

  Bug Fixes

  • NODE-5363: defer byte slicing to utf8 decoding API in nodejs (#585) (e087042)

  Documentation

  • API
  • Changelog

  We invite you to try the bson library immediately, and report any issues to the NODE project.

• 5.3.0 - 2023-05-10
  

  The MongoDB Node.js team is pleased to announce version 5.3.0 of the bson package!

  Release Highlights

  This release fixes a strictness issue with our UUID class. The UUID class has and will continue to generate UUID v4 bytes. However, now when reading UUIDs from MongoDB the UUID can be whatever format was inserted to the database, instead of throwing an error. This will notably help with data that has empty GUID values.

  Deprecation

  • NODE-5224: deprecate UUID hex string cache control (#573) (70aea75)

  Bug Fix

  • NODE-4960: UUID validation too strict (#572) (d239cd1)

  Documentation

  • API: https://github.com/mongodb/js-bson#readme
  • Changelog: https://github.com/mongodb/js-bson/blob/main/HISTORY.md#change-log

  We invite you to try the bson library immediately, and report any issues to the NODE project.

• 5.2.0 - 2023-04-04
  

  The MongoDB Node.js team is pleased to announce version 5.2.0 of the bson package!

  Release Highlights

  With this release we've added APIs to create BSON Binary / UUID / ObjectId types from hex and base64 strings.

  class ObjectId {
  static createFromHexString(hex: string): ObjectId;
  static createFromBase64(base64: string): ObjectId;
  }

  class Binary {
  static createFromHexString(hex: string, subType? number): Binary;
  static createFromBase64(base64: string, subType? number): Binary;
  }

  class UUID extends Binary {
  static override createFromHexString(hex: string): UUID;
  static override createFromBase64(base64: string): UUID;
  }

  Features

  • NODE-4855: add hex and base64 ctor methods to Binary and ObjectId (#569) (0d49a63)

  Documentation

  • API: https://github.com/mongodb/js-bson#readme
  • Changelog: https://github.com/mongodb/js-bson/blob/main/HISTORY.md#change-log

  We invite you to try the bson library immediately, and report any issues to the NODE project.

• 5.1.0 - 2023-03-16
  

  The MongoDB Node.js team is pleased to announce version 5.1.0 of the bson package!

  Release Highlights

  EJSON.stringify now supports ES Map!

  import { EJSON } from 'bson';

  const m = new Map([
  ['a', new Map([['b', 1]])],
  ['b', 2]
  ]);

  console.log(EJSON.stringify(m))
  // '{"a":{"b":1},"b":2}'

  Features

  • NODE-4789: support Map stringification in EJSON (#567) (c70c82d)

  Documentation

  • API: https://github.com/mongodb/js-bson#readme
  • Changelog: https://github.com/mongodb/js-bson/blob/main/HISTORY.md#change-log

  We invite you to try the bson library immediately, and report any issues to the NODE project.

from bson GitHub release notes

Commit messages

Package name: bson

• 4c1db9a chore(main): release 5.4.0 (chore(deps-dev): bump @types/node from 14.11.2 to 14.14.6 #588)
• 5483367 chore: fix pr number url regex for pr_list (feat: move public spcp login form messaging #589)
• dcbd43c chore: fix package-name
• e087042 fix(NODE-5363): defer byte slicing to utf8 decoding API in nodejs (fix: overflow when printing responses #585)
• 2ea58cf chore(NODE-5383): add release automation (feat: remove exclamation when user updates contact #586)
• bc95ab4 chore(NODE-5362): update benchmark tooling (feat: update landing page footer #584)
• b0898fb ci(NODE-5329): install npm to `node_artifacts` directory (chore: merge release 4.44.0 into develop #581)
• 7e16636 feat(NODE-4938): improve react native bundle experience (chore(deps-dev): bump ngrok from 3.2.7 to 3.3.0 #578)
• 81227bf chore(NODE-5324): update to typescript 5 (fix(deps): bump libphonenumber-js from 1.7.55 to 1.8.5 #579)
• 259547d ci(NODE-5271): add node 20 (fix: breakage of add collaborator styling on ie11 #577)
• 915c517 chore(NODE-5277): add definition clean up script (build: release 4.44.0 #576)
• c74d177 chore(release): 5.3.0
• ca31e3e chore(NODE-5256): update dependencies (refactor: migrate GET /adminform endpoint to Typescript #575)
• 52cc4bb docs(NODE-5227): add defaults to doc comments (chore: set datepicker default view to minimum date #574)
• 2f5d919 docs(NODE-5204): document promoteValues default value as true (ux fixes #571)
• 70aea75 feat(NODE-5224): deprecate UUID hex string cache control (Migrate from TravisCI to GitHub Actions #573)
• d239cd1 fix(NODE-4960): UUID validation too strict (fix(deps): upgrade Chromium and puppeteer-core #572)
• 91b84ed chore(release): 5.2.0
• 0d49a63 feat(NODE-4855): add hex and base64 ctor methods to Binary and ObjectId (fix: resolve & in url upon redirect, shift prefill to textfield component #569)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs