chore(deps-dev): bump mongodb from 3.3.3 to 3.5.4

[dependabot-preview[bot]]

Bumps mongodb from 3.3.3 to 3.5.4.

Release notes

Sourced from mongodb's releases.

v3.5.4

The MongoDB Node.js team is pleased to announce version 3.5.4 of the driver

Release Highlights

Regression in hasNext when piping a cursor

Pierre Mallet and @Sintendo helped identify a regression with our cursors which did not properly rewind a cursor when hasNext was called before the cursor was piped.

Regression in server selection queue processing

A change introduced in v3.5.3 converted the server selection loop from a loop with timers to a queue of callbacks. A subtle bug was introduced to the code to process the quere where the upper bound of a for loop was using a dynamically decreasing length, leading to some operations being ignored, and ultimately timing out. Many thanks to Frederic Maillasson, @paulrobinson, and @adityapatadia for helping uncover this issue

Only ensure minimum connection pool size if a size is specified

User @millerick submitted a PR short circuiting the background task for ensuring a minimum pool size if no minimum size was set.

Release Notes

Bug

• [NODE-2454] - Cursor.hasNext() seems to consume first document when the cursor is piped in a writable stream
• [NODE-2464] - max election ID comparison uses invalid comparison for tracking
• [NODE-2466] - Driver does not seem to properly recover from a long disconnection with primary server
• [NODE-2467] - MongoServerSelectionError when using useUnifiedTopology: true

Improvement

• [NODE-2459] - Do not run minimum connection size task if there is no minimum pool size

v3.5.3

The MongoDB Node.js team is pleased to announce version 3.5.3 of the driver

Release Highlights

This patch release fixes one issue with command error handling during network errors, and one minor issue with multiple incoming wire messages not being properly processed.

Release Notes

Bug

... (truncated)

Commits

• 582d3e2 chore(release): 3.5.4
• e08b358 chore: disable test using CodeWScope with a $where clause
• 3dd726c chore: upate EVG macos runs to use 10.14 boxes
• 494dffb fix(topology): enter STATE_CLOSING before draining waitQueue
• bf701d6 fix(topology): ensure selection wait queue is always processed
• 361bc1e refactor: remove SKIP_SESSION aspect
• f6a8ceb refactor: use maybePromise for all MongoClient fake operations
• 6f71507 chore: move sdam spec unit tests from unit/core to unit/sdam
• a1e0849 fix(sdam): use ObjectId comparison to track maxElectionId
• 2d1b713 fix(cmap): don't run min connection thread if no minimum specified
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in the `.dependabot/config.yml` file in this repo: - Update frequency - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)

[dependabot-preview[bot]]

Superseded by #94.