Bumps the pip group with 2 updates in the / directory: pymongo and idna.
Bumps the pip group with 2 updates in the /buildscripts/cost_model directory: pymongo and pillow.
PyMongo 4.7 brings a number of improvements including:
Added the :class:pymongo.hello.Hello.connection_id,
:attr:pymongo.monitoring.CommandStartedEvent.server_connection_id,
:attr:pymongo.monitoring.CommandSucceededEvent.server_connection_id, and
:attr:pymongo.monitoring.CommandFailedEvent.server_connection_id properties.
Fixed a bug where inflating a :class:~bson.raw_bson.RawBSONDocument containing a :class:~bson.code.Code would cause an error.
Significantly improved the performance of encoding BSON documents to JSON.
Support for named KMS providers for client side field level encryption.
Previously supported KMS providers were only: aws, azure, gcp, kmip, and local.
The KMS provider is now expanded to support name suffixes (e.g. local:myname).
Named KMS providers enables more than one of each KMS provider type to be configured.
See the docstring for :class:~pymongo.encryption_options.AutoEncryptionOpts.
Note that named KMS providers requires pymongocrypt >=1.9 and libmongocrypt >=1.9.
:meth:~pymongo.encryption.ClientEncryption.encrypt and
:meth:~pymongo.encryption.ClientEncryption.encrypt_expression now allow key_id
to be passed in as a :class:uuid.UUID.
Fixed a bug where :class:~bson.int64.Int64 instances could not always be encoded by orjson_. The following now
works::
import orjson
from bson import json_util
orjson.dumps({'a': Int64(1)}, default=json_util.default, option=orjson.OPT_PASSTHROUGH_SUBCLASS)
Fixed a bug appearing in Python 3.12 where "RuntimeError: can't create new thread at interpreter shutdown"
could be written to stderr when a MongoClient's thread starts as the python interpreter is shutting down.
Added a warning when connecting to DocumentDB and CosmosDB clusters.
For more information regarding feature compatibility and support please visit
mongodb.com/supportability/documentdb <https://mongodb.com/supportability/documentdb>_ and
mongodb.com/supportability/cosmosdb <https://mongodb.com/supportability/cosmosdb>_.
Added the :attr:pymongo.monitoring.ConnectionCheckedOutEvent.duration,
:attr:pymongo.monitoring.ConnectionCheckOutFailedEvent.duration, and
:attr:pymongo.monitoring.ConnectionReadyEvent.duration properties.
Added the type and kwargs arguments to :class:~pymongo.operations.SearchIndexModel to enable
creating vector search indexes in MongoDB Atlas.
Fixed a bug where read_concern and write_concern were improperly added to
:meth:~pymongo.collection.Collection.list_search_indexes queries.
Fix issue where specially crafted inputs to encode() could
take exceptionally long amount of time to process. [CVE-2024-3651]
Thanks to Guido Vranken for reporting the issue.
3.6 (2023-11-25)
++++++++++++++++
Fix regression to include tests in source distribution.
3.5 (2023-11-24)
++++++++++++++++
Update to Unicode 15.1.0
String codec name is now "idna2008" as overriding the system codec
"idna" was not working.
Fix typing error for codec encoding
"setup.cfg" has been added for this release due to some downstream
lack of adherence to PEP 517. Should be removed in a future release
so please prepare accordingly.
Removed reliance on a symlink for the "idna-data" tool to comport
with PEP 517 and the Python Packaging User Guide for sdist archives.
Added security reporting protocol for project
Thanks Jon Ribbens, Diogo Teles Sant'Anna, Wu Tingfeng for contributions
to this release.
PyMongo 4.7 brings a number of improvements including:
Added the :class:pymongo.hello.Hello.connection_id,
:attr:pymongo.monitoring.CommandStartedEvent.server_connection_id,
:attr:pymongo.monitoring.CommandSucceededEvent.server_connection_id, and
:attr:pymongo.monitoring.CommandFailedEvent.server_connection_id properties.
Fixed a bug where inflating a :class:~bson.raw_bson.RawBSONDocument containing a :class:~bson.code.Code would cause an error.
Significantly improved the performance of encoding BSON documents to JSON.
Support for named KMS providers for client side field level encryption.
Previously supported KMS providers were only: aws, azure, gcp, kmip, and local.
The KMS provider is now expanded to support name suffixes (e.g. local:myname).
Named KMS providers enables more than one of each KMS provider type to be configured.
See the docstring for :class:~pymongo.encryption_options.AutoEncryptionOpts.
Note that named KMS providers requires pymongocrypt >=1.9 and libmongocrypt >=1.9.
:meth:~pymongo.encryption.ClientEncryption.encrypt and
:meth:~pymongo.encryption.ClientEncryption.encrypt_expression now allow key_id
to be passed in as a :class:uuid.UUID.
Fixed a bug where :class:~bson.int64.Int64 instances could not always be encoded by orjson_. The following now
works::
import orjson
from bson import json_util
orjson.dumps({'a': Int64(1)}, default=json_util.default, option=orjson.OPT_PASSTHROUGH_SUBCLASS)
Fixed a bug appearing in Python 3.12 where "RuntimeError: can't create new thread at interpreter shutdown"
could be written to stderr when a MongoClient's thread starts as the python interpreter is shutting down.
Added a warning when connecting to DocumentDB and CosmosDB clusters.
For more information regarding feature compatibility and support please visit
mongodb.com/supportability/documentdb <https://mongodb.com/supportability/documentdb>_ and
mongodb.com/supportability/cosmosdb <https://mongodb.com/supportability/cosmosdb>_.
Added the :attr:pymongo.monitoring.ConnectionCheckedOutEvent.duration,
:attr:pymongo.monitoring.ConnectionCheckOutFailedEvent.duration, and
:attr:pymongo.monitoring.ConnectionReadyEvent.duration properties.
Added the type and kwargs arguments to :class:~pymongo.operations.SearchIndexModel to enable
creating vector search indexes in MongoDB Atlas.
Fixed a bug where read_concern and write_concern were improperly added to
:meth:~pymongo.collection.Collection.list_search_indexes queries.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/sarvex/mongo/network/alerts).
Bumps the pip group with 2 updates in the / directory: pymongo and idna. Bumps the pip group with 2 updates in the /buildscripts/cost_model directory: pymongo and pillow.
Updates
pymongo
from 4.6.1 to 4.6.3Release notes
Sourced from pymongo's releases.
Changelog
Sourced from pymongo's changelog.
... (truncated)
Commits
8da192f
BUMP 4.6.356b6b6d
PYTHON-4305 Fix bson size check (#1564)449d0f3
BUMP to 4.6.3.dev0e04576d
DEVPROD-3871 Use teardown_task when there is one function/command (#1533)cf1c6a1
PYTHON-4219 Prep for 4.6.2 Release (#1530)d29b2b7
PYTHON-4147 [v4.6]: Silence noisy thread.start() RuntimeError at shutdown (#1...0477b9b
PYTHON-4077 [v4.6]: Ensure there is a MacOS wheel for Python 3.7 (#1527)ecad17d
BUMP 4.6.2.dev0Updates
idna
from 3.4 to 3.7Release notes
Sourced from idna's releases.
Changelog
Sourced from idna's changelog.
Commits
1d365e1
Release v3.7c1b3154
Merge pull request #172 from kjd/optimize-contextj0394ec7
Merge branch 'master' into optimize-contextjcd58a23
Merge pull request #152 from elliotwutingfeng/dev5beb28b
More efficient resolution of joiner contexts1b12148
Update ossf/scorecard-action to v2.3.1d516b87
Update Github actions/checkout to v4c095c75
Merge branch 'master' into dev60a0a4c
Fix typo in GitHub Actions workflow key5918a0e
Merge branch 'master' into devUpdates
pymongo
from 4.5.0 to 4.6.3Release notes
Sourced from pymongo's releases.
Changelog
Sourced from pymongo's changelog.
... (truncated)
Commits
8da192f
BUMP 4.6.356b6b6d
PYTHON-4305 Fix bson size check (#1564)449d0f3
BUMP to 4.6.3.dev0e04576d
DEVPROD-3871 Use teardown_task when there is one function/command (#1533)cf1c6a1
PYTHON-4219 Prep for 4.6.2 Release (#1530)d29b2b7
PYTHON-4147 [v4.6]: Silence noisy thread.start() RuntimeError at shutdown (#1...0477b9b
PYTHON-4077 [v4.6]: Ensure there is a MacOS wheel for Python 3.7 (#1527)ecad17d
BUMP 4.6.2.dev0Updates
pillow
from 10.0.1 to 10.3.0Release notes
Sourced from pillow's releases.
... (truncated)
Changelog
Sourced from pillow's changelog.
... (truncated)
Commits
5c89d88
10.3.0 version bump63cbfcf
Update CHANGES.rst [ci skip]2776126
Merge pull request #7928 from python-pillow/lcmsaeb51cb
Merge branch 'main' into lcms5beb0b6
Update CHANGES.rst [ci skip]cac6ffa
Merge pull request #7927 from python-pillow/imagemathf5eeeac
Name as 'options' in lambda_eval and unsafe_eval, but '_dict' in deprecated evalfacf3af
Added release notes2a93aba
Use strncpy to avoid buffer overflowa670597
Update CHANGES.rst [ci skip]Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show