Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency mongodb to v3 - autoclosed #3

Closed
wants to merge 1 commit into from

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented Jul 27, 2022

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
mongodb ^2.1.18 -> ^3.0.0 age adoption passing confidence

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.8 CVE-2020-7610 #25
Medium 6.5 WS-2019-0311 #21
Medium 5.4 CVE-2019-2391 #12

Release Notes

mongodb/node-mongodb-native

v3.1.13

Compare Source

Bug Fixes
  • restore ability to webpack by removing makeLazyLoader (050267d)
  • bulk: honor ignoreUndefined in initializeUnorderedBulkOp (e806be4)
  • changeStream: properly handle changeStream event mid-close (#​1902) (5ad9fa9)
  • db_ops: ensure we async resolve errors in createCollection (210c71d)

v3.1.12

Compare Source

Features
  • core: update to mongodb-core v3.1.11 (9bef6e7)

v3.1.11

Compare Source

Bug Fixes
  • bulk: fix error propagation in empty bulk.execute (a3adb3f)
  • bulk: make sure that any error in bulk write is propagated (bedc2d2)
  • bulk: properly calculate batch size for bulk writes (aafe71b)
  • operations: do not call require in a hot path (ff82ff4)

v3.1.10

Compare Source

Bug Fixes
  • auth: remember to default to admin database (c7dec28)
Features
  • core: update to mongodb-core v3.1.9 (bd3355b)

v3.1.9

Compare Source

Bug Fixes
  • db: move db constants to other file to avoid circular ref (#​1858) (239036f)
  • estimated-document-count: support options other than maxTimeMs (36c3c7d)
Features
  • core: update to mongodb-core v3.1.8 (80d7c79)

v3.1.8

Compare Source

Bug Fixes
  • connect: use reported default databse from new uri parser (811f8f8)
Features
  • core: update to mongodb-core v3.1.7 (dbfc905)

v3.1.7

Compare Source

Features
  • core: update mongodb-core to v3.1.6 (61b054e)

v3.1.6

Compare Source

Features
  • core: update to core v3.1.5 (c5f823d)

v3.1.5

Compare Source

Bug Fixes
  • cursor: allow $meta based sort when passing an array to sort() (f93a8c3)
  • utils: only set retryWrites to true for valid operations (3b725ef)
Features
  • core: bump core to v3.1.4 (805d58a)

v3.1.4

Compare Source

Bug Fixes
  • buffer: use safe-buffer polyfill to maintain compatibility (327da95)
  • change-stream: properly support resumablity in stream mode (c43a34b)
  • connect: correct replacement of topology on connect callback (918a1e0)
  • cursor: remove deprecated notice on forEach (a474158)
  • url-parser: bail early on validation when using domain socket (3cb3da3)
Features
  • client-ops: allow bypassing creation of topologies on connect (fe39b93)
  • core: update mongodb-core to 3.1.3 (a029047)
  • test: use connection strings for all calls to newClient (1dac18f)

v3.1.3

Compare Source

Features
  • core: update to mongodb-core 3.1.2 (337cb79)

v3.1.2

Compare Source

Bug Fixes
  • aggregate: support user-provided batchSize (ad10dee)
  • buffer: replace deprecated Buffer constructor (759dd85)
  • bulk: fixing retryable writes for mass-change ops (0604036)
  • bulk: handle MongoWriteConcernErrors (12ff392)
  • change_stream: do not check isGetMore if error[mongoErrorContextSymbol] is undefined (#​1720) (844c2c8)
  • change-stream: fix change stream resuming with promises (3063f00)
  • client-ops: return transform map to map rather than function (cfb7d83)
  • collection: correctly shallow clone passed in options (7727700)
  • collection: countDocuments throws error when query doesn't match docs (09c7d8e)
  • collection: depend on resolveReadPreference for inheritance (a649e35)
  • collection: ensure findAndModify always use readPreference primary (86344f4)
  • collection: isCapped returns false instead of undefined (b8471f1)
  • collection: only send bypassDocumentValidation if true (fdb828b)
  • count-documents: return callback on error case (fca1185)
  • cursor: cursor count with collation fix (71879c3)
  • cursor: cursor hasNext returns false when exhausted (184b817)
  • cursor: cursor.count not respecting parent readPreference (5a9fdf0)
  • cursor: set readPreference for cursor.count (13d776f)
  • db: don't send session down to createIndex command (559c195)
  • db: throw readable error when creating _id with background: true (b3ff3ed)
  • db_ops: call collection.find() with correct parameters (#​1795) (36e92f1)
  • db_ops: fix two incorrectly named variables (15dc808)
  • findOneAndUpdate: ensure that update documents contain atomic operators (eb68074)
  • index: export MongoNetworkError (98ab29e)
  • mongo_client: translate options for connectWithUrl (78f6977)
  • mongo-client: pass arguments to ctor when new keyword is used (d6c3417)
  • mongos: bubble up close events after the first one (#​1713) (3e91d77), closes Automattic/mongoose#​6249 #​1685
  • parallelCollectionScan: do not use implicit sessions on cursors (2de470a)
  • retryWrites: fixes more bulk ops to not use retryWrites (69e5254)
  • server: remove unnecessary print statement (2bcbc12)
  • teardown: properly destroy a topology when initial connect fails (b8d2f1d)
  • topology-base: sending endSessions is always skipped now (a276cbe)
  • txns: omit writeConcern when in a transaction (b88c938)
  • utils: restructure inheritance rules for read preferences (6a7dac1)
Features
  • auth: add support for SCRAM-SHA-256 (f53195d)
  • changeStream: Adding new 4.0 ChangeStream features (2cb4894)
  • changeStream: allow resuming on getMore errors (4ba5adc)
  • changeStream: expanding changeStream resumable errors (49fbafd)
  • ChangeStream: update default startAtOperationTime (50a9f65)
  • collection: add colleciton level document mapping/unmapping (d03335e)
  • collection: Implement new count API (a5240ae)
  • Collection: warn if callback is not function in find and findOne (cddaba0)
  • core: bump core dependency to v3.1.0 (4937240)
  • cursor: new cursor.transformStream method (397fcd2)
  • deprecation: create deprecation function (4f907a0)
  • deprecation: wrap deprecated functions (a5d0f1d)
  • GridFS: add option to disable md5 in file upload (704a88e)
  • listCollections: add support for nameOnly option (d2d0367)
  • parallelCollectionScan: does not allow user to pass a session (4da9e03)
  • read-preference: add transaction to inheritance rules (18ca41d)
  • read-preference: unify means of read preference resolution (#​1738) (2995e11)
  • urlParser: use core URL parser (c1c5d8d)
  • withSession: add top level helper for session lifetime (9976b86)
Reverts

v3.1.1

Compare Source

Bug Fixes
  • restore ability to webpack by removing makeLazyLoader (050267d)
  • bulk: honor ignoreUndefined in initializeUnorderedBulkOp (e806be4)
  • changeStream: properly handle changeStream event mid-close (#​1902) (5ad9fa9)
  • db_ops: ensure we async resolve errors in createCollection (210c71d)

v3.1.0

Compare Source

Bug Fixes
  • aggregate: support user-provided batchSize (ad10dee)
  • bulk: fixing retryable writes for mass-change ops (0604036)
  • bulk: handle MongoWriteConcernErrors (12ff392)
  • change_stream: do not check isGetMore if error[mongoErrorContextSymbol] is undefined (#​1720) (844c2c8)
  • change-stream: fix change stream resuming with promises (3063f00)
  • collection: depend on resolveReadPreference for inheritance (a649e35)
  • collection: only send bypassDocumentValidation if true (fdb828b)
  • cursor: cursor count with collation fix (71879c3)
  • cursor: cursor hasNext returns false when exhausted (184b817)
  • cursor: cursor.count not respecting parent readPreference (5a9fdf0)
  • db: don't send session down to createIndex command (559c195)
  • db: throw readable error when creating _id with background: true (b3ff3ed)
  • findOneAndUpdate: ensure that update documents contain atomic operators (eb68074)
  • index: export MongoNetworkError (98ab29e)
  • mongo-client: pass arguments to ctor when new keyword is used (d6c3417)
  • mongos: bubble up close events after the first one (#​1713) (3e91d77), closes Automattic/mongoose#​6249 #​1685
  • parallelCollectionScan: do not use implicit sessions on cursors (2de470a)
  • retryWrites: fixes more bulk ops to not use retryWrites (69e5254)
  • topology-base: sending endSessions is always skipped now (a276cbe)
  • txns: omit writeConcern when in a transaction (b88c938)
  • utils: restructure inheritance rules for read preferences (6a7dac1)
Features
  • auth: add support for SCRAM-SHA-256 (f53195d)
  • changeStream: Adding new 4.0 ChangeStream features (2cb4894)
  • changeStream: allow resuming on getMore errors (4ba5adc)
  • changeStream: expanding changeStream resumable errors (49fbafd)
  • ChangeStream: update default startAtOperationTime (50a9f65)
  • collection: add colleciton level document mapping/unmapping (d03335e)
  • collection: Implement new count API (a5240ae)
  • Collection: warn if callback is not function in find and findOne (cddaba0)
  • core: bump core dependency to v3.1.0 (855bfdb)
  • cursor: new cursor.transformStream method (397fcd2)
  • GridFS: add option to disable md5 in file upload (704a88e)
  • listCollections: add support for nameOnly option (d2d0367)
  • parallelCollectionScan: does not allow user to pass a session (4da9e03)
  • read-preference: add transaction to inheritance rules (18ca41d)
  • read-preference: unify means of read preference resolution (#​1738) (2995e11)
  • urlParser: use core URL parser (c1c5d8d)
  • withSession: add top level helper for session lifetime (9976b86)
Reverts

3.0.6 (2018-04-09)

Bug Fixes
  • db: ensure dropDatabase always uses primary read preference (e62e5c9)
  • driverBench: driverBench has default options object now (c557817)
Features
  • command-monitoring: support enabling command monitoring (5903680)
  • core: update to mongodb-core v3.0.6 (cfdd0ae)
  • driverBench: Implementing DriverBench (d10fbad)

3.0.5 (2018-03-23)

Bug Fixes
  • AggregationCursor: adding session tracking to AggregationCursor (baca5b7)
  • Collection: fix session leak in parallelCollectonScan (3331ec9)
  • comments: adding fixes for PR comments (ee110ac)
  • url_parser: support a default database on mongodb+srv uris (6d39b2a)
Features
  • sessions: adding implicit cursor session support (a81245b)

3.0.4 (2018-03-05)

Bug Fixes
  • collection: fix error when calling remove with no args (#​1657) (4c9b0f8)
  • executeOperation: don't mutate options passed to commands (934a43a)
  • jsdoc: mark db.collection callback as optional + typo fix (#​1658) (c519b9b)
  • sessions: move active session tracking to topology base (#​1665) (b1f296f)
  • utils: fixes executeOperation to clean up sessions (04e6ef6)
Features
  • default-db: use dbName from uri if none provided (23b1938)
  • mongodb-core: update to mongodb-core 3.0.4 (1fdbaa5)

3.0.3 (2018-02-23)

Bug Fixes
  • collection: fix error when calling remove with no args (#​1657) (4c9b0f8)
  • executeOperation: don't mutate options passed to commands (934a43a)
  • jsdoc: mark db.collection callback as optional + typo fix (#​1658) (c519b9b)
  • sessions: move active session tracking to topology base (#​1665) (b1f296f)

3.0.2 (2018-01-29)

Bug Fixes
  • collection: ensure dynamic require of db is wrapped in parentheses (efa78f0)
  • db: only callback with MongoError NODE-1293 (#​1652) (45bc722)
  • topology base: allow more than 10 event listeners (#​1630) (d9fb750)
  • url parser: preserve auth creds when composing conn string (#​1640) (eddca5e)
Features
  • bulk: forward 'checkKeys' option for ordered and unordered bulk operations (421a6b2)
  • collection: expose dbName property of collection (6fd05c1)

3.0.1 (2017-12-24)

  • update mongodb-core to 3.0.1

v3.0.11

Compare Source

v3.0.10

Compare Source

v3.0.9

Compare Source

v3.0.8

Compare Source

v3.0.7

Compare Source

v3.0.6

Compare Source

Bug Fixes
  • db: ensure dropDatabase always uses primary read preference (e62e5c9)
  • driverBench: driverBench has default options object now (c557817)
Features
  • command-monitoring: support enabling command monitoring (5903680)
  • core: update to mongodb-core v3.0.6 (cfdd0ae)
  • driverBench: Implementing DriverBench (d10fbad)

v3.0.5

Compare Source

Bug Fixes
  • AggregationCursor: adding session tracking to AggregationCursor (baca5b7)
  • Collection: fix session leak in parallelCollectonScan (3331ec9)
  • comments: adding fixes for PR comments (ee110ac)
  • url_parser: support a default database on mongodb+srv uris (6d39b2a)
Features
  • sessions: adding implicit cursor session support (a81245b)

v3.0.4

Compare Source

Bug Fixes
  • collection: fix error when calling remove with no args (#​1657) (4c9b0f8)
  • executeOperation: don't mutate options passed to commands (934a43a)
  • jsdoc: mark db.collection callback as optional + typo fix (#​1658) (c519b9b)
  • sessions: move active session tracking to topology base (#​1665) (b1f296f)
  • utils: fixes executeOperation to clean up sessions (04e6ef6)
Features
  • default-db: use dbName from uri if none provided (23b1938)
  • mongodb-core: update to mongodb-core 3.0.4 (1fdbaa5)

v3.0.3

Compare Source

Bug Fixes
  • collection: fix error when calling remove with no args (#​1657) (4c9b0f8)
  • executeOperation: don't mutate options passed to commands (934a43a)
  • jsdoc: mark db.collection callback as optional + typo fix (#​1658) (c519b9b)
  • sessions: move active session tracking to topology base (#​1665) (b1f296f)

v3.0.2

Compare Source

Bug Fixes
  • collection: ensure dynamic require of db is wrapped in parentheses (efa78f0)
  • db: only callback with MongoError NODE-1293 (#​1652) (45bc722)
  • topology base: allow more than 10 event listeners (#​1630) (d9fb750)
  • url parser: preserve auth creds when composing conn string (#​1640) (eddca5e)
Features
  • bulk: forward 'checkKeys' option for ordered and unordered bulk operations (421a6b2)
  • collection: expose dbName property of collection (6fd05c1)

v3.0.1

Compare Source

  • update mongodb-core to 3.0.1

v3.0.0

Compare Source

Bug Fixes
Features
BREAKING CHANGES
  • topologies: Function signature for .connect method on replset and mongos has changed. You shouldn't have been using this anyway, but if you were, you only should pass options and callback.

Part of NODE-1089

  • keepAlive: option keepAlive is now split into boolean keepAlive and
    number keepAliveInitialDelay

Fixes NODE-998


  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Jul 27, 2022
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mongodb-3.x branch from 3c0424e to 0ecc838 Compare July 27, 2022 06:42
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mongodb-3.x branch from 0ecc838 to 749b303 Compare July 27, 2022 06:55
@mend-for-github-com mend-for-github-com bot changed the title Update dependency mongodb to v3 Update dependency mongodb to v3 - autoclosed Aug 23, 2022
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/mongodb-3.x branch August 23, 2022 06:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants