Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade mongodb from 4.9.1 to 4.10.0 #4

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade mongodb from 4.9.1 to 4.10.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 21 days ago, on 2022-09-19.
Release notes
Package name: mongodb
  • 4.10.0 - 2022-09-19

    The MongoDB Node.js team is pleased to announce version 4.10.0 of the mongodb package!

    Release Highlights

    Callback Deprecation

    Looking to improve our API's consistency and handling of errors we are planning to remove callback support in the next major release of the driver. Today marks the notice of their removal. Migrating to a promise only API allows us to offer uniform error handling and better native support for automatic promise construction. In this release you will notice deprecation warnings in doc comments for all our callback overloads and if you are working in VSCode you should notice strikethroughs on these APIs. We encourage you to migrate to promises where possible:

    • Using async/await syntax can yield the best experience with promise usage.
    • Using Node.js' callbackify utility is one approach:
      • require('util').callbackify(() => collection.findOne())(callback)
    • Using .then syntax is another:
      • collection.findOne().then(res => callback(null, res), err => callback(err))
    • And lastly, for large codebases still intertwined with callbacks we have an alternative package prepared.

    MongoDB-Legacy Callback Support

    While the 4.10.0 version only deprecates our support of callbacks, there will be a major version that removes the support altogether. In order to keep using callbacks after v5 is released, we recommend migrating your driver version to mongodb-legacy (github link). This package wraps every single async API our driver offers and is designed to provide the exact behavior of the MongoDB 4.10.0 release (both callbacks and promises are supported). Any new features added to MongoDB will be automatically inherited but will only support promises. This package is fully tested against our current suite and adoption should be confined to changing an import require('mongodb') -> require('mongodb-legacy'). If this package is useful to you and your use case we encourage you to adopt it before v5 to ensure it continues to work as expected.

    Read more about it on the package's readme here:

    Features

    Bug Fixes

    Documentation

    We invite you to try the mongodb library immediately, and report any issues to the NODE project.

  • 4.9.1 - 2022-08-31

    The MongoDB Node.js team is pleased to announce version 4.9.1 of the mongodb package!

    Release Highlights

    This is a bug fix release as noted below.

    Bug Fixes

from mongodb GitHub release notes
Commit messages
Package name: mongodb
  • dc34388 chore(release): 4.10.0
  • 23537e6 test(NODE-4648): pull prepare shell out to script and fix reporter error handling (#3418)
  • 5eb3978 fix(NODE-4621): ipv6 address handling in HostAddress (#3410)
  • 9883993 refactor(NODE-4637): clean up async interval (#3411)
  • 64b3ee9 refactor(NODE-4617): use promise apis in benchmarks (#3399)
  • 8758890 feat(NODE-4634): add support for bulk FindOperators.hint() (#3408)
  • d29b3d9 fix(NODE-4639): allow PromiseProvider to be null (#3412)
  • bdc0d67 fix(NODE-3144): pool clear event ordering and retryability tests (#3407)
  • b8b765b docs: generate docs from latest main (#3371)
  • a983f14 feat(NODE-4547): mark all callback APIs as deprecated (#3388)
  • 5c322b6 feat(NODE-4519): deprecate promiseLibrary and PromiseProvider (#3403)
  • 12e951b test(NODE-4605, NODE-4597, NODE-4618): sync latest change stream unified tests (#3402)
  • 085471d test(NODE-4607): add ConnectionPoolReadyEvent to exports unit test (#3401)
  • 972f760 feat(NODE-4607): add exports needed by legacy client (#3396)
  • 5676f81 fix(NODE-3986): unskip MONGODB-AWS test (#3397)
  • 0a2ad07 test(NODE-4590): add parallel driver benchmarks (#3389)
  • f5f24f2 ci(NODE-4276): add rapid release target (#3398)
  • 335ee55 feat(NODE-4385): add cmap pool pausing functionality (#3321)
  • f4702f4 test(NODE-4585): ensure empty aws env variables (#3393)
  • ddcfa49 fix(NODE-4557): randomize servers when there are only 2 eligible servers (#3390)
  • d2b3ce1 test(NODE-4160): add aws lambda examples (#3369)
  • e53be7c chore: add new benchmark files (#3395)
  • 6658433 ci(NODE-4589): add benchmark testing task to CI (#3385)
  • c245d82 chore(NODE-4593): fix mongosh integration tests (#3387)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant