gin-contrib / sessions

Gin middleware for session management
MIT License
1.46k stars 196 forks source link

chore(deps): bump go.mongodb.org/mongo-driver from 1.11.1 to 1.11.3 #229

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps go.mongodb.org/mongo-driver from 1.11.1 to 1.11.3.

Release notes

Sourced from go.mongodb.org/mongo-driver's releases.

MongoDB Go Driver 1.11.3

The MongoDB Go Driver Team is pleased to release version 1.11.3 of the official Go driver.

Release Notes

This release reduces memory usage under some query workloads and fixes a bug that can cause undefined behavior when reading the Raw field on database error types, including CommandError and WriteException.


For a full list of tickets included in this release, please see the links below:

Documentation for the Go driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go driver is greatly appreciated!

MongoDB Go Driver 1.11.2

:warning: Retracted

This release has been retracted due to a bug that can cause undefined behavior when reading the Raw field on database error types, including CommandError and WriteException.

Please use version 1.11.3 or higher.


The MongoDB Go Driver Team is pleased to release version 1.11.2 of the official Go driver.

Release Notes

This release includes various bug fixes.

Fix timestamp format when converting bson.Raw to Extended JSON

Previously, calling bson.Raw.String would output the wrong Extended JSON type if the BSON document contained a "UTC timestamp" field. This release updates String to output the correct Extended JSON type for timestamps.

Fix retryable reads when using read concerns "linearizable" or "available"

Previously, retried reads could fail if an operation used read concern "linearizable" or "available" because the Go driver set a conflicting configuration for implicit sessions. This release resolves conflicts with "linearizable" or "available" read concerns in retried reads.


For a full list of tickets included in this release, please see the links below:

Documentation for the Go driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go driver is greatly appreciated!

Commits
  • 20a7983 Update version to v1.11.3
  • a38beea GODRIVER-2773 Retract v1.11.0 through v1.11.2. (#1203)
  • 53b6815 GODRIVER-2730 Remove blocking channel in update recovering. (#1196)
  • 0ffab78 GODRIVER-2677 Improve memory pooling. (#1157)
  • 596c496 GODRIVER-2764 update fle2 tests (#1197)
  • f444b06 Update version to v1.11.2
  • 9944eff GODRIVER-2497 Always set causalConsistency=false for implicit sessions. (#1176)
  • 4d68f59 GODRIVER-2570 update bsoncore value string to preserve timestamp type (#1150)
  • 667bfcf GODRIVER-2658 Better guard against nil pinned connections. (#1153)
  • af212d0 Update version to v1.11.2-prerelease
  • See full diff in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
codecov-commenter commented 1 year ago

Codecov Report

Merging #229 (58a631e) into master (189b96f) will not change coverage. The diff coverage is n/a.

:mega: This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@           Coverage Diff           @@
##           master     #229   +/-   ##
=======================================
  Coverage   64.00%   64.00%           
=======================================
  Files           8        8           
  Lines          75       75           
=======================================
  Hits           48       48           
  Misses         25       25           
  Partials        2        2           

:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more

dependabot[bot] commented 1 year ago

Superseded by #232.