The MongoDB Node.js team is pleased to announce version 4.17.0 of the mongodb package!
Release Notes
mongodb-js/saslprep is now installed by default
Until v6, the driver included the saslprep package as an optional dependency for SCRAM-SHA-256 authentication. saslprep breaks when bundled with webpack because it attempted to read a file relative to the package location and consequently the driver would throw errors when using SCRAM-SHA-256 if it were bundled.
The driver now depends on mongodb-js/saslprep, a fork of saslprep that can be bundled with webpack because it includes the necessary saslprep data in memory upon loading. This will be installed by default but will only be used if SCRAM-SHA-256 authentication is used.
Remove credential availability on ConnectionPoolCreatedEvent
In order to avoid mistakenly printing credentials the ConnectionPoolCreatedEvent will replace the credentials option with an empty object. The credentials are still accessble via MongoClient options: client.options.credentials.
types(models+query): return lean type when passing QueryOptions with lean: true to relevant model functions like find() and findOne() #13721#13705
types(schema): correct return type for Schema.prototype.indexes() #13718#13702
types: allow accessing options from pre middleware #13708#13633
types: add UpdateQueryKnownOnly type for stricter UpdateQuery type checking #13699#13630
types(schema): support required: { isRequired: true } syntax in schema definition #13680
docs(middleware): clarify that doc.deleteOne() doesn't run query middleware currently #13707#13669
7.4.2 / 2023-08-03
fix(model): avoid hanging on empty bulkWrite() with ordered: false #13684#13664
fix: Document.prototype.isModified support for a string of keys as first parameter #13674#13667gastoncasini
fix: disable id virtual if alias:id set #13654#13650
fix: support timestamps:false on bulkWrite with updateOne and updateMany #13649#13611
docs(typescript): highlight auto type inference for methods and statics, add info on using methods with generics #13696#12942
docs(middleware): fix old example using post('remove') #13683#13518
docs(deprecations): quick fix for includeResultMetadata docs #13695
6.11.5 / 2023-08-01
fix(schema): make Schema.prototype.clone() avoid creating different copies of subdocuments and single nested paths underneath single nested paths #13671#13626
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/SophiaH67/xi-jinping-bot/network/alerts).
Bumps mongodb to 4.17.1 and updates ancestor dependency mongoose. These dependencies need to be updated together.
Updates
mongodbfrom 4.1.2 to 4.17.1Release notes
Sourced from mongodb's releases.
... (truncated)
Changelog
Sourced from mongodb's changelog.
... (truncated)
Commits
cdc3d53chore(4.x): release 4.17.1 [skip-ci] (#3840)ff6c293fix(NODE-5573): fix saslprep import (#3838)c83a801chore(4.x): release 4.17.0 [skip-ci] (#3763)1b59955chore: update release automation scripts 4.x (#3824)5244711feat(NODE-5398): use mongodb-js/saslprep instead of saslprep (#3820)2910dcafix(NODE-5536): remove credentials from ConnectionPoolCreatedEvent options (#...0c1b654chore(NODE-5400): add@octokit/coreas a devDep (#3750)4adff37chore(NODE-5382): backport release automation scripts (#3747)2d028affix(NODE-5356): prevent scram auth from throwing TypeError if saslprep is not...0e1afc0ci(Node 5335): clean up instance profile from instance after CI runs (#3719)Maintainer changes
This version was pushed to npm by dbx-node, a new releaser for mongodb since your current version.
Updates
mongoosefrom 6.0.11 to 6.12.0Release notes
Sourced from mongoose's releases.
... (truncated)
Changelog
Sourced from mongoose's changelog.
... (truncated)
Commits
eb34bd3chore: release 6.12.0ec74347feat: use mongodb driver v4.17.14f79ce2Merge pull request #13770 from Automattic/vkarpov15/gh-13664-217c31b7fix(model): make Model.bulkWrite() with empty array and ordered false not thr...0229ffdMerge pull request #13763 from Automattic/vkarpov15/gh-1372044f3f0dfix(document): correctly handle inclusive/exclusive projections when applying...0604133chore: release 6.11.6c1109acMerge pull request #13723 from Automattic/IslandRhythms/backport-13515557a472Update mongo.test.tsbab0e9eUpdate package.jsonDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show