jorgearanda / fish

A fish banks simulator to conduct environmental psychology studies
MIT License
5 stars 5 forks source link

Bump bson and connect-mongo #240

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps bson to 4.7.0 and updates ancestor dependency connect-mongo. These dependencies need to be updated together.

Updates bson from 1.0.9 to 4.7.0

Release notes

Sourced from bson's releases.

v4.7.0

The MongoDB Node.js team is pleased to announce version 4.7.0 of the bson package!

Release Highlights

This release adds automatic UUID support. Now when serializing or deserializing BSON you can work directly with the UUID type without explicit conversion methods. The UUID class is now a subclass of binary so all existing code will continue to work (including the explicit conversion methods .toUUID/.toBinary). The same automatic support for UUID is also present in EJSON .parse/.stringify.

Take a look at the following for the expected behavior:

const document = BSON.deserialize(bytes)
// { uuid: UUID('xxx') }
BSON.serialize(document)
// Buffer < document with uuid (binary subtype 4) >

Special thanks to @​aditi-khare-mongoDB for all her hard work on this feature!! 🎉

Features

  • NODE-4405: support serializing UUID class (#508) (f5dc9ed)
  • NODE-4419: UUID class deserialization (#509) (ff2b975)
  • NODE-4506: Make UUID a subclass of binary (#512) (e9afa9d)
  • NODE-4535: automatically promote UUIDs when deserializing and parsing UUIDs (#513) (1dc7eae)

Documentation

We invite you to try the bson library immediately, and report any issues to the NODE project.

v4.6.5

The MongoDB Node.js team is pleased to announce version 4.6.5 of the bson package!

Release Highlights

Along with some other bug fixes listed below in this release we've fixed the float parser logic for both deserialize and serialize to use JS Dataview APIs. The most delightful part of this change is an improvement to performance of serializing 64-bit floats. :tada: 🐎

- cpu: Apple M1
- cores: 8
- os: darwin
- ram: 16GB
- iterations: 1,000,000
testing: Double Serialization

current - v 4.6.5 - avg 0.00024913ms previous release - v 4.6.4 - avg 0.00036335ms previous major - v 1.1.6 - avg 0.00036459ms </tr></table>

... (truncated)

Changelog

Sourced from bson's changelog.

4.7.0 (2022-08-18)

Features

  • NODE-4405: support serializing UUID class (#508) (f5dc9ed)
  • NODE-4419: UUID class deserialization (#509) (ff2b975)
  • NODE-4506: Make UUID a subclass of binary (#512) (e9afa9d)
  • NODE-4535: automatically promote UUIDs when deserializing and parsing UUIDs (#513) (1dc7eae)

4.6.5 (2022-07-07)

Bug Fixes

  • NODE-3630: remove float parser and test edge cases for Double (#502) (54ca603)
  • NODE-4211: Do not require crypto in browser builds (#500) (b32ab40)
  • NODE-4302: remove downlevel ts and typesVersions (#501) (651b60e)
  • NODE-4381: handle __proto__ well in EJSON (#506) (4bda57d)

4.6.4 (2022-05-19)

4.6.3 (2022-04-20)

4.6.2 (2022-03-22)

Bug Fixes

  • MONGOSH-1155: update error message in ObjectId class (#493) (67fbc7c)
  • NODE-3015: ObjectId.equals should use Buffer.equals for better performance (#478) (8305bdf)
  • NODE-3962: correct type for ObjectiId._bsontype (#480) (9671773)

4.6.1 (2022-01-06)

Bug Fixes

  • NODE-3760: ObjectId.isValid string and byte length match (#475) (187d1c4)
  • NODE-3815: update Decimal128 constructor validation (#476) (95e8293)
  • NODE-3821: nullish check before using toBSON override function (#477) (1d898b6)

4.6.0 (2021-11-23)

Features

  • NODE-3740: Implement root and top level key utf-8 validation settings for BSON (#472) (07019a0)

... (truncated)

Commits
  • 853bbb0 chore(release): 4.7.0
  • 1dc7eae feat(NODE-4535): automatically promote UUIDs when deserializing and parsing U...
  • e9afa9d feat(NODE-4506): Make UUID a subclass of binary (#512)
  • ff2b975 feat(NODE-4419): UUID class deserialization (#509)
  • f5dc9ed feat(NODE-4405): support serializing UUID class (#508)
  • 4d75481 test(NODE-4357): delete windows tests (#510)
  • 4d13309 chore(NODE-4401): enable isolatedModules tsc compiler option (#507)
  • 32f5f2c chore(release): 4.6.5
  • 54ca603 fix(NODE-3630): remove float parser and test edge cases for Double (#502)
  • 4bda57d fix(NODE-4381): handle __proto__ well in EJSON (#506)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by nbbeeken, a new releaser for bson since your current version.


Updates connect-mongo from 2.0.3 to 4.6.0

Changelog

Sourced from connect-mongo's changelog.

[4.6.0] - 2021-09-17

Changed

  • Moved mongodb to a peer dependency (and also as a dev dependency for connect-mongo developers). connect-mongo is no longer pinned to a specific version of mongodb. This allows end users to avoid errors due to Typescript definition changes when moving to new versions of mongodb. Users can use any version of mongodb that provides a compatible (non-breaking) interface to mongodb ^4.1.0. Tested on mongodb 4.1.0 and 4.1.1. Should fix: #433 #434 #436

Fixed

  • Fixed "Callback was already called" when some code throws immediately after calling the set function

[4.5.0] - 2021-08-17

BREAKING CHANGES

  • Drop Node 10 support

Changed

Fixed

  • Move writeConcern away from top-level option to fix deprecation warning #422

[4.4.1] - 2021-03-23

Fixed

  • store.all() method not working with encrypted store #410 #411
  • Update and unpin mongodb dependency due to upstream fix has been deployed #409

[4.4.0] - 2021-03-11

BREAKING CHANGES

  • Use export = for better cjs require without .default

Added

  • Add typescript example

[4.3.1] - 2021-03-09

Fixed

  • Fix incorrect assertion checking after adding client options

[4.3.0] - 2021-03-08

Added

... (truncated)

Commits
  • 8908b1c chore: bump version to 4.6.0 for release
  • 9847304 fix: callback was already called when code throw after set function (#440)
  • 2a2cd78 fix: move mongodb to peerDependencies (#435)
  • 3e27376 chore: bump version to 4.5.0 for release
  • fa8826d Merge pull request #430 from jdesboeufs/feat/upgrade-mongodb-depns
  • 472c003 test: ignore test file on code coverage
  • 83480c2 chore: drop node 10 support due to mongodb upgrade
  • 8bdc9e0 docs: update CHANGELOG
  • 788f603 fix: createIndex should have correct async dependency setup
  • ccd716a fix: upgrade mongodb driver to v4
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by mingchuno, a new releaser for connect-mongo since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/jorgearanda/fish/network/alerts).
dependabot[bot] commented 1 year ago

Looks like these dependencies are no longer updatable, so this is no longer needed.