Bump mongodb and mongoose in /backend/order-service #153

dependabot · 2024-09-16T07:35:27Z

Bumps mongodb to 5.9.2 and updates ancestor dependency mongoose. These dependencies need to be updated together.

Updates mongodb from 5.1.0 to 5.9.2

Release notes

v5.9.2

5.9.2 (2023-11-16)

The MongoDB Node.js team is pleased to announce version 5.9.2 of the mongodb package!

Release Notes

Fix connection leak when serverApi is enabled

When enabling serverApi the driver's RTT mesurment logic (used to determine the closest node) still sent the legacy hello command "isMaster" causing the server to return an error. Unfortunately, the error handling logic did not correctly destroy the socket which would cause a leak.

Both sending the correct hello command and the error handling connection clean up logic are fixed in this change.

Bug Fixes

NODE-5750: RTTPinger always sends legacy hello (#3922) (8e56872)

Documentation

Reference

API

Changelog

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

v5.9.1

5.9.1 (2023-10-18)

The MongoDB Node.js team is pleased to announce version 5.9.1 of the mongodb package!

Release Notes

insertedIds in bulk write now contain only successful insertions

Prior to this fix, the bulk write error's result.insertedIds property contained the _id of each attempted insert in a bulk operation.

Now, when a bulkwrite() or an insertMany() operation rejects one or more inserts, throwing an error, the error's result.insertedIds property will only contain the _id fields of successfully inserted documents.

Fixed edge case leak in findOne()

When running a findOne against a time series collection, the driver left the implicit session for the cursor un-ended due to the way the server returns the resulting cursor information. Now the cursor will always be cleaned up regardless of the outcome of the find operation.

Bug Fixes

NODE-5627: BulkWriteResult.insertedIds includes ids that were not inserted (#3870) (d766ae2)

NODE-5691: make findOne() close implicit session to avoid memory leak (#3889) (0d6c9cd)

Documentation

Reference

API

... (truncated)

Changelog

Sourced from mongodb's changelog.

5.9.2 (2023-11-16)

Bug Fixes

NODE-5750: RTTPinger always sends legacy hello (#3922) (8e56872)

5.9.1 (2023-10-18)

Bug Fixes

NODE-5627: BulkWriteResult.insertedIds includes ids that were not inserted (#3870) (d766ae2)

NODE-5691: make findOne() close implicit session to avoid memory leak (#3889) (0d6c9cd)

5.9.0 (2023-09-14)

Features

NODE-5564: bump bson version to ^5.5.0 (#3865) (dc110e0)

Bug Fixes

NODE-5550: set AWS region from environment variable for STSClient (#3851) (2fab06b)

NODE-5587: recursive calls to next cause memory leak (#3842) (f60f1b5)

5.8.1 (2023-08-23)

Bug Fixes

NODE-5572: fix saslprep import (#3837) (250dc21)

5.8.0 (2023-08-21)

Features

NODE-5399: use mongodb-js/saslprep instead of saslprep (#3818) (c0d3927)

NODE-5429: deprecate the AutoEncrypter interface (#3764) (9bb0d95)

NODE-5465,NODE-5538: lower @aws-sdk/credential-providers version to 3.188.0 and zstd to ^1.0.0 (#3821) (39ff81d)

NODE-5489: update kerberos dependency (8c25d6d)

Bug Fixes

NODE-5489: set kerberos compatibility to ^1.0.0 || ^2.0.0 (#3803) (c3b35b3)

NODE-5495: do not emit deprecation warning when tlsCertificateKeyFile is specified and tlsCertificateFile is not (#3810) (e81d4a2)

... (truncated)

Commits

5047328 chore(5.x): release 5.9.2 [skip-ci] (#3925)
8e56872 fix(NODE-5750): RTTPinger always sends legacy hello (#3922)
6266734 test(NODE-5739): update data lake test scripts (#3918)
eecdb6b test(NODE-5737): update aws ecs task definition (#3917)
a58f8ee test(NODE-5733): remove at() usage (#3900)
0c16582 chore(5.x): release 5.9.1 [skip-ci] (#3878)
0d6c9cd fix(NODE-5691): make findOne() close implicit session to avoid memory leak (#...
df0780e test(NODE-5705): fix failing explain tests (#3894)
efb5e93 test(NODE-5695): update azure configuration (#3892)
2ab2189 ci(NODE-5668): remove custom dep tests against master and fix prose test 14 (...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by dbx-node, a new releaser for mongodb since your current version.

Updates mongoose from 7.0.3 to 7.8.1

Release notes

Sourced from mongoose's releases.

7.6.3 / 2023-10-17

fix(populate): handle multiple spaces when specifying paths to populate using space-delimited paths #13984 #13951

fix(update): avoid applying defaults on query filter when upserting with empty update #13983 #13962

fix(model): add versionKey to bulkWrite when inserting or upserting #13981 #13944

docs: fix typo in timestamps docs #13976 danielcoker

7.6.2 / 2023-10-13

perf: avoid storing a separate entry in schema subpaths for every element in an array #13953 #13874

fix(document): avoid triggering setter when initializing Model.prototype.collection to allow defining collection as a schema path name #13968 #13956

fix(model): make bulkSave() save changes in discriminator paths if calling bulkSave() on base model #13959 #13907

fix(document): allow calling $model() with no args for TypeScript #13963 #13878

fix(schema): handle embedded discriminators defined using Schema.prototype.discriminator() #13958 #13898

types(model): make InsertManyResult consistent with return type of insertMany #13965 #13904

types(models): add cleaner type definitions for insertMany() with no generics to prevent errors when using insertMany() in generic classes #13964 #13957

types(schematypes): allow defining map path using type: 'Map' in addition to type: Map #13960 #13755

7.6.1 / 2023-10-09

fix: bump bson to match mongodb@5.9.0 exactly #13947 hasezoey

fix: raw result deprecation message #13954 simllll

type: add types for includeResultMetadata #13955 simllll

perf(npmignore): ignore newer files #13946 hasezoey

perf: move mocha config from package.json to mocharc #13948 hasezoey

7.6.0 / 2023-10-06

feat: upgrade mongodb node driver -> 5.9.0 #13927 #13926 sanguineti

fix: avoid CastError when passing different value of discriminator key in $or #13938 #13906

7.5.4 / 2023-10-04

fix: avoid stripping out id property when _id is set #13933 #13892 #13867

fix(QueryCursor): avoid double-applying schema paths so you can include select: false fields with + projection using cursors #13932 #13773

fix(query): allow deselecting discriminator key using - syntax #13929 #13760

fix(query): handle $round in $expr as array #13928 #13881

fix(document): call pre('validate') hooks when modifying a path underneath triply nested subdoc #13912 #13876

fix(mongoose): correctly handle global applyPluginsToChildSchemas option #13911 #13887

types: add insertMany array overload with options #13931 t1bb4r

docs(compatibility): add Mongoose 7 support to compatibility matrix #13875

docs: amend some awkward FAQ wording #13925 peteboere

7.5.3 / 2023-09-25

fix(document): handle MongoDB Long when casting BigInts #13869 #13791

fix(model): make bulkSave() persist changes that happen in pre('save') middleware #13885 #13799

fix: handle casting $elemMatch underneath $not underneath another $elemMatch #13893 #13880

fix(model): make bulkWrite casting respect global setDefaultsOnInsert #13870 #13823

fix(document): handle default values for discriminator key with embedded discriminators #13891 #13835

... (truncated)

Changelog

Sourced from mongoose's changelog.

7.8.1 / 2024-08-19

fix(query): handle casting $switch in $expr #14761

docs(mongoose): remove out-of-date callback-based example for mongoose.connect() #14811 #14810

8.5.3 / 2024-08-13

fix(document): call required functions on subdocuments underneath nested paths with correct context #14801 #14788

fix(populate): avoid throwing error when no result and lean() set #14799 #14794 #14759 MohOraby

fix(document): apply virtuals to subdocuments if parent schema has virtuals: true for backwards compatibility #14774 #14771 #14623 #14394

types: make HydratedSingleSubdocument and HydratedArraySubdocument merge types instead of using & #14800 #14793

types: support schema type inference based on schema options timestamps as well #14773 #13215 ark23CIS

types(cursor): indicate that cursor.next() can return null #14798 #14787

types: allow mongoose.connection.db to be undefined #14797 #14789

docs: add schema type widening advice #14790 JstnMcBrd

8.5.2 / 2024-07-30

perf(clone): avoid further unnecessary checks if cloning a primitive value #14762 #14394

fix: allow setting document array default to null #14769 #14717 #6691

fix(model): support session: null option for save() to opt out of automatic session option with transactionAsyncLocalStorage #14744 #14736

fix(model+document): avoid depopulating manually populated doc as getter value #14760 #14759

fix: correct shardkey access in buildBulkWriteOps #14753 #14752 adf0nt3s

fix(query): handle casting $switch in $expr #14755 #14751

types: allow calling SchemaType.cast() without parent and init parameters #14756 #14748 #9076

docs: fix a wrong example in v6 migration guide #14758 abdelrahman-elkady

7.8.0 / 2024-07-23

feat: add transactionAsyncLocalStorage option to opt in to automatically setting session on all transactions #14744 #14742 #14583 #13889

types(query): fix usage of "RawDocType" where "DocType" should be passed #14737 hasezoey

8.5.1 / 2024-07-12

perf(model): performance improvements for insertMany() #14724

fix(model): avoid leaving subdoc defaults on top-level doc when setting subdocument to same value #14728 #14722

fix(model): handle transactionAsyncLocalStorage option with insertMany() #14743

types: make _id required on Document type #14735 #14660

types: fix ChangeStream.close to return a Promise like the driver #14740 orgads

8.5.0 / 2024-07-08

perf: memoize toJSON / toObject default options #14672

feat(document): add $createModifiedPathsSnapshot(), $restoreModifiedPathsSnapshot(), $clearModifiedPaths() #14699 #14268

feat(query): make sanitizeProjection prevent projecting in paths deselected in the schema #14691

feat: allow setting array default value to null #14717 #6691

feat(mongoose): allow drivers to set global plugins #14682

feat(connection): bubble up monitorCommands events to Mongoose connection if monitorCommands option set #14681 #14611

fix(document): ensure post('deleteOne') hooks are called when calling save() after subdoc.deleteOne() #14732 #9885

fix(query): remove count() and findOneAndRemove() from query chaining #14692 #14689

... (truncated)

Commits

9dcd8aa chore: release 7.8.1
343a1d3 Merge pull request #14811 from Automattic/vkarpov15/gh-14810
b446a2e docs(mongoose): remove out-of-date callback-based example for `mongoose.conne...
87fb382 add id setter to changelog re: #13517
fdc7c7e Merge pull request #14761 from Automattic/vkarpov15/gh-14755-backport
e8b0933 chore: release 7.8.0
0c11d12 fix(query): handle casting $switch in $expr
5a71c3e Merge pull request #14742 from Automattic/vkarpov15/gh-13889-7.x
e909e0b fix: support session: null option for save() to opt out of automatic session ...
3f21bfa fix: backport #14743
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [mongodb](https://github.com/mongodb/node-mongodb-native) to 5.9.2 and updates ancestor dependency [mongoose](https://github.com/Automattic/mongoose). These dependencies need to be updated together. Updates `mongodb` from 5.1.0 to 5.9.2 - [Release notes](https://github.com/mongodb/node-mongodb-native/releases) - [Changelog](https://github.com/mongodb/node-mongodb-native/blob/v5.9.2/HISTORY.md) - [Commits](mongodb/node-mongodb-native@v5.1.0...v5.9.2) Updates `mongoose` from 7.0.3 to 7.8.1 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@7.0.3...7.8.1) --- updated-dependencies: - dependency-name: mongodb dependency-type: indirect - dependency-name: mongoose dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Sep 16, 2024

dependabot bot mentioned this pull request Sep 16, 2024

Bump mongoose from 7.0.3 to 7.3.3 in /backend/order-service #150

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump mongodb and mongoose in /backend/order-service #153

Bump mongodb and mongoose in /backend/order-service #153

dependabot bot commented on behalf of github Sep 16, 2024

Bump mongodb and mongoose in /backend/order-service #153

Are you sure you want to change the base?

Bump mongodb and mongoose in /backend/order-service #153

Conversation

dependabot bot commented on behalf of github Sep 16, 2024

v5.9.2

5.9.2 (2023-11-16)

Release Notes

Fix connection leak when serverApi is enabled

Bug Fixes

Documentation

v5.9.1

5.9.1 (2023-10-18)

Release Notes

insertedIds in bulk write now contain only successful insertions

Fixed edge case leak in findOne()

Bug Fixes

Documentation

5.9.2 (2023-11-16)

Bug Fixes

5.9.1 (2023-10-18)

Bug Fixes

5.9.0 (2023-09-14)

Features

Bug Fixes

5.8.1 (2023-08-23)

Bug Fixes

5.8.0 (2023-08-21)

Features

Bug Fixes

7.6.3 / 2023-10-17

7.6.2 / 2023-10-13

7.6.1 / 2023-10-09

7.6.0 / 2023-10-06

7.5.4 / 2023-10-04

7.5.3 / 2023-09-25

7.8.1 / 2024-08-19

8.5.3 / 2024-08-13

8.5.2 / 2024-07-30

7.8.0 / 2024-07-23

8.5.1 / 2024-07-12

8.5.0 / 2024-07-08

`insertedIds` in bulk write now contain only successful insertions

Fixed edge case leak in `findOne()`