Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency mongodb to v3 #102

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dimagwhitesourceapp[bot]
Copy link

@dimagwhitesourceapp dimagwhitesourceapp bot commented Dec 18, 2022

This PR contains the following updates:

Package Type Update Change
mongodb dependencies major 2.2.36 -> 3.1.13

By merging this PR, the issue #117 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2020-7610
Medium Medium 6.5 WS-2019-0311
Medium Medium 5.4 CVE-2019-2391

Release Notes

mongodb/node-mongodb-native (mongodb)

v3.1.13

Compare Source

Bug Fixes
  • restore ability to webpack by removing makeLazyLoader (050267d)
  • bulk: honor ignoreUndefined in initializeUnorderedBulkOp (e806be4)
  • changeStream: properly handle changeStream event mid-close (#​1902) (5ad9fa9)
  • db_ops: ensure we async resolve errors in createCollection (210c71d)

v3.1.12

Compare Source

Features
  • core: update to mongodb-core v3.1.11 (9bef6e7)

v3.1.11

Compare Source

Bug Fixes
  • bulk: fix error propagation in empty bulk.execute (a3adb3f)
  • bulk: make sure that any error in bulk write is propagated (bedc2d2)
  • bulk: properly calculate batch size for bulk writes (aafe71b)
  • operations: do not call require in a hot path (ff82ff4)

v3.1.10

Compare Source

Bug Fixes
  • auth: remember to default to admin database (c7dec28)
Features
  • core: update to mongodb-core v3.1.9 (bd3355b)

v3.1.9

Compare Source

Bug Fixes
  • db: move db constants to other file to avoid circular ref (#​1858) (239036f)
  • estimated-document-count: support options other than maxTimeMs (36c3c7d)
Features
  • core: update to mongodb-core v3.1.8 (80d7c79)

v3.1.8

Compare Source

Bug Fixes
  • connect: use reported default databse from new uri parser (811f8f8)
Features
  • core: update to mongodb-core v3.1.7 (dbfc905)

v3.1.7

Compare Source

Features
  • core: update mongodb-core to v3.1.6 (61b054e)

v3.1.6

Compare Source

Features
  • core: update to core v3.1.5 (c5f823d)

v3.1.5

Compare Source

Bug Fixes
  • cursor: allow $meta based sort when passing an array to sort() (f93a8c3)
  • utils: only set retryWrites to true for valid operations (3b725ef)
Features
  • core: bump core to v3.1.4 (805d58a)

v3.1.4

Compare Source

Bug Fixes
  • buffer: use safe-buffer polyfill to maintain compatibility (327da95)
  • change-stream: properly support resumablity in stream mode (c43a34b)
  • connect: correct replacement of topology on connect callback (918a1e0)
  • cursor: remove deprecated notice on forEach (a474158)
  • url-parser: bail early on validation when using domain socket (3cb3da3)
Features
  • client-ops: allow bypassing creation of topologies on connect (fe39b93)
  • core: update mongodb-core to 3.1.3 (a029047)
  • test: use connection strings for all calls to newClient (1dac18f)

v3.1.3

Compare Source

Features
  • core: update to mongodb-core 3.1.2 (337cb79)

v3.1.2

Compare Source

Bug Fixes
  • aggregate: support user-provided batchSize (ad10dee)
  • buffer: replace deprecated Buffer constructor (759dd85)
  • bulk: fixing retryable writes for mass-change ops (0604036)
  • bulk: handle MongoWriteConcernErrors (12ff392)
  • change_stream: do not check isGetMore if error[mongoErrorContextSymbol] is undefined (#​1720) (844c2c8)
  • change-stream: fix change stream resuming with promises (3063f00)
  • client-ops: return transform map to map rather than function (cfb7d83)
  • collection: correctly shallow clone passed in options (7727700)
  • collection: countDocuments throws error when query doesn't match docs (09c7d8e)
  • collection: depend on resolveReadPreference for inheritance (a649e35)
  • collection: ensure findAndModify always use readPreference primary (86344f4)
  • collection: isCapped returns false instead of undefined (b8471f1)
  • collection: only send bypassDocumentValidation if true (fdb828b)
  • count-documents: return callback on error case (fca1185)
  • cursor: cursor count with collation fix (71879c3)
  • cursor: cursor hasNext returns false when exhausted (184b817)
  • cursor: cursor.count not respecting parent readPreference (5a9fdf0)
  • cursor: set readPreference for cursor.count (13d776f)
  • db: don't send session down to createIndex command (559c195)
  • db: throw readable error when creating _id with background: true (b3ff3ed)
  • db_ops: call collection.find() with correct parameters (#​1795) (36e92f1)
  • db_ops: fix two incorrectly named variables (15dc808)
  • findOneAndUpdate: ensure that update documents contain atomic operators (eb68074)
  • index: export MongoNetworkError (98ab29e)
  • mongo_client: translate options for connectWithUrl (78f6977)
  • mongo-client: pass arguments to ctor when new keyword is used (d6c3417)
  • mongos: bubble up close events after the first one (#​1713) (3e91d77), closes Automattic/mongoose#6249 #​1685
  • parallelCollectionScan: do not use implicit sessions on cursors (2de470a)
  • retryWrites: fixes more bulk ops to not use retryWrites (69e5254)
  • server: remove unnecessary print statement (2bcbc12)
  • teardown: properly destroy a topology when initial connect fails (b8d2f1d)
  • topology-base: sending endSessions is always skipped now (a276cbe)
  • txns: omit writeConcern when in a transaction (b88c938)
  • utils: restructure inheritance rules for read preferences (6a7dac1)
Features
  • auth: add support for SCRAM-SHA-256 (f53195d)
  • changeStream: Adding new 4.0 ChangeStream features (2cb4894)
  • changeStream: allow resuming on getMore errors (4ba5adc)
  • changeStream: expanding changeStream resumable errors (49fbafd)
  • ChangeStream: update default startAtOperationTime (50a9f65)
  • collection: add colleciton level document mapping/unmapping (d03335e)
  • collection: Implement new count API (a5240ae)
  • Collection: warn if callback is not function in find and findOne (cddaba0)
  • core: bump core dependency to v3.1.0 (4937240)
  • cursor: new cursor.transformStream method (397fcd2)
  • deprecation: create deprecation function (4f907a0)
  • deprecation: wrap deprecated functions (a5d0f1d)
  • GridFS: add option to disable md5 in file upload (704a88e)
  • listCollections: add support for nameOnly option (d2d0367)
  • parallelCollectionScan: does not allow user to pass a session (4da9e03)
  • read-preference: add transaction to inheritance rules (18ca41d)
  • read-preference: unify means of read preference resolution (#​1738) (2995e11)
  • urlParser: use core URL parser (c1c5d8d)
  • withSession: add top level helper for session lifetime (9976b86)
Reverts

v3.1.1

Compare Source

Bug Fixes
  • restore ability to webpack by removing makeLazyLoader (050267d)
  • bulk: honor ignoreUndefined in initializeUnorderedBulkOp (e806be4)
  • changeStream: properly handle changeStream event mid-close (#​1902) (5ad9fa9)
  • db_ops: ensure we async resolve errors in createCollection (210c71d)

v3.1.0

Compare Source

Bug Fixes
  • aggregate: support user-provided batchSize (ad10dee)
  • bulk: fixing retryable writes for mass-change ops (0604036)
  • bulk: handle MongoWriteConcernErrors (12ff392)
  • change_stream: do not check isGetMore if error[mongoErrorContextSymbol] is undefined (#​1720) (844c2c8)
  • change-stream: fix change stream resuming with promises (3063f00)
  • collection: depend on resolveReadPreference for inheritance (a649e35)
  • collection: only send bypassDocumentValidation if true (fdb828b)
  • cursor: cursor count with collation fix (71879c3)
  • cursor: cursor hasNext returns false when exhausted (184b817)
  • cursor: cursor.count not respecting parent readPreference (5a9fdf0)
  • db: don't send session down to createIndex command (559c195)
  • db: throw readable error when creating _id with background: true (b3ff3ed)
  • findOneAndUpdate: ensure that update documents contain atomic operators (eb68074)
  • index: export MongoNetworkError (98ab29e)
  • mongo-client: pass arguments to ctor when new keyword is used (d6c3417)
  • mongos: bubble up close events after the first one (#​1713) (3e91d77), closes Automattic/mongoose#6249 #​1685
  • parallelCollectionScan: do not use implicit sessions on cursors (2de470a)
  • retryWrites: fixes more bulk ops to not use retryWrites (69e5254)
  • topology-base: sending endSessions is always skipped now (a276cbe)
  • txns: omit writeConcern when in a transaction (b88c938)
  • utils: restructure inheritance rules for read preferences (6a7dac1)
Features
  • auth: add support for SCRAM-SHA-256 (f53195d)
  • changeStream: Adding new 4.0 ChangeStream features (2cb4894)
  • changeStream: allow resuming on getMore errors (4ba5adc)
  • changeStream: expanding changeStream resumable errors (49fbafd)
  • ChangeStream: update default startAtOperationTime (50a9f65)
  • collection: add colleciton level document mapping/unmapping (d03335e)
  • collection: Implement new count API (a5240ae)
  • Collection: warn if callback is not function in find and findOne (cddaba0)
  • core: bump core dependency to v3.1.0 (855bfdb)
  • cursor: new cursor.transformStream method (397fcd2)
  • GridFS: add option to disable md5 in file upload (704a88e)
  • listCollections: add support for nameOnly option (d2d0367)
  • parallelCollectionScan: does not allow user to pass a session (4da9e03)
  • read-preference: add transaction to inheritance rules (18ca41d)
  • read-preference: unify means of read preference resolution (#​1738) (2995e11)
  • urlParser: use core URL parser (c1c5d8d)
  • withSession: add top level helper for session lifetime (9976b86)
Reverts

3.0.6 (2018-04-09)

Bug Fixes
  • db: ensure dropDatabase always uses primary read preference (e62e5c9)
  • driverBench: driverBench has default options object now (c557817)
Features
  • command-monitoring: support enabling command monitoring (5903680)
  • core: update to mongodb-core v3.0.6 (cfdd0ae)
  • driverBench: Implementing DriverBench (d10fbad)

3.0.5 (2018-03-23)

Bug Fixes
  • AggregationCursor: adding session tracking to AggregationCursor (baca5b7)
  • Collection: fix session leak in parallelCollectonScan (3331ec9)
  • comments: adding fixes for PR comments (ee110ac)
  • url_parser: support a default database on mongodb+srv uris (6d39b2a)
Features
  • sessions: adding implicit cursor session support (a81245b)

3.0.4 (2018-03-05)

Bug Fixes
  • collection: fix error when calling remove with no args (#​1657) (4c9b0f8)
  • executeOperation: don't mutate options passed to commands (934a43a)
  • jsdoc: mark db.collection callback as optional + typo fix (#​1658) (c519b9b)
  • sessions: move active session tracking to topology base (#​1665) (b1f296f)
  • utils: fixes executeOperation to clean up sessions (04e6ef6)
Features
  • default-db: use dbName from uri if none provided (23b1938)
  • mongodb-core: update to mongodb-core 3.0.4 (1fdbaa5)

3.0.3 (2018-02-23)

Bug Fixes
  • collection: fix error when calling remove with no args (#​1657) (4c9b0f8)
  • executeOperation: don't mutate options passed to commands (934a43a)
  • jsdoc: mark db.collection callback as optional + typo fix (#​1658) (c519b9b)
  • sessions: move active session tracking to topology base (#​1665) (b1f296f)

3.0.2 (2018-01-29)

Bug Fixes
  • collection: ensure dynamic require of db is wrapped in parentheses (efa78f0)
  • db: only callback with MongoError NODE-1293 (#​1652) (45bc722)
  • topology base: allow more than 10 event listeners (#​1630) (d9fb750)
  • url parser: preserve auth creds when composing conn string (#​1640) (eddca5e)
Features
  • bulk: forward 'checkKeys' option for ordered and unordered bulk operations (421a6b2)
  • collection: expose dbName property of collection (6fd05c1)

3.0.1 (2017-12-24)

  • update mongodb-core to 3.0.1

v3.0.11

Compare Source

v3.0.10

Compare Source

v3.0.9

Compare Source

v3.0.8

Compare Source

v3.0.7

Compare Source

v3.0.6

Compare Source

Bug Fixes
  • db: ensure dropDatabase always uses primary read preference (e62e5c9)
  • driverBench: driverBench has default options object now (c557817)
Features
  • command-monitoring: support enabling command monitoring (5903680)
  • core: update to mongodb-core v3.0.6 (cfdd0ae)
  • driverBench: Implementing DriverBench (d10fbad)

v3.0.5

Compare Source

Bug Fixes
  • AggregationCursor: adding session tracking to AggregationCursor (baca5b7)
  • Collection: fix session leak in parallelCollectonScan (3331ec9)
  • comments: adding fixes for PR comments (ee110ac)
  • url_parser: support a default database on mongodb+srv uris (6d39b2a)
Features
  • sessions: adding implicit cursor session support (a81245b)

v3.0.4

Compare Source

Bug Fixes
  • collection: fix error when calling remove with no args (#​1657) (4c9b0f8)
  • executeOperation: don't mutate options passed to commands (934a43a)
  • jsdoc: mark db.collection callback as optional + typo fix (#​1658) (c519b9b)
  • sessions: move active session tracking to topology base (#​1665) (b1f296f)
  • utils: fixes executeOperation to clean up sessions (04e6ef6)
Features
  • default-db: use dbName from uri if none provided (23b1938)
  • mongodb-core: update to mongodb-core 3.0.4 (1fdbaa5)

v3.0.3

Compare Source

Bug Fixes
  • collection: fix error when calling remove with no args (#​1657) (4c9b0f8)
  • executeOperation: don't mutate options passed to commands (934a43a)
  • jsdoc: mark db.collection callback as optional + typo fix (#​1658) (c519b9b)
  • sessions: move active session tracking to topology base (#​1665) (b1f296f)

v3.0.2

Compare Source

Bug Fixes
  • collection: ensure dynamic require of db is wrapped in parentheses (efa78f0)
  • db: only callback with MongoError NODE-1293 (#​1652) (45bc722)
  • topology base: allow more than 10 event listeners (#​1630) (d9fb750)
  • url parser: preserve auth creds when composing conn string (#​1640) (eddca5e)
Features
  • bulk: forward 'checkKeys' option for ordered and unordered bulk operations (421a6b2)
  • collection: expose dbName property of collection (6fd05c1)

v3.0.1

Compare Source

  • update mongodb-core to 3.0.1

v3.0.0

Compare Source

Bug Fixes
Features
BREAKING CHANGES
  • topologies: Function signature for .connect method on replset and mongos has changed. You shouldn't have been using this anyway, but if you were, you only should pass options and callback.

Part of NODE-1089

  • keepAlive: option keepAlive is now split into boolean keepAlive and
    number keepAliveInitialDelay

Fixes NODE-998


  • If you want to rebase/retry this PR, check this box

@dimagwhitesourceapp dimagwhitesourceapp bot added the security fix Security fix generated by Mend label Dec 18, 2022
@dimagwhitesourceapp dimagwhitesourceapp bot force-pushed the whitesource-remediate/mongodb-3.x branch from d490218 to 87a9140 Compare April 13, 2023 14:28
@dimagwhitesourceapp dimagwhitesourceapp bot force-pushed the whitesource-remediate/mongodb-3.x branch from 87a9140 to 500648e Compare May 31, 2023 14:02
@dimagwhitesourceapp dimagwhitesourceapp bot force-pushed the whitesource-remediate/mongodb-3.x branch 2 times, most recently from 23087c1 to 11e6d47 Compare June 21, 2023 00:01
@dimagwhitesourceapp dimagwhitesourceapp bot force-pushed the whitesource-remediate/mongodb-3.x branch from 11e6d47 to c1da7cf Compare December 4, 2023 18:01
@dimagwhitesourceapp dimagwhitesourceapp bot changed the title Update dependency mongodb to v3 Update dependency mongodb to v3 - autoclosed Dec 4, 2023
@dimagwhitesourceapp dimagwhitesourceapp bot deleted the whitesource-remediate/mongodb-3.x branch December 4, 2023 23:30
@dimagwhitesourceapp dimagwhitesourceapp bot changed the title Update dependency mongodb to v3 - autoclosed Update dependency mongodb to v3 Dec 4, 2023
@dimagwhitesourceapp dimagwhitesourceapp bot reopened this Dec 4, 2023
@dimagwhitesourceapp dimagwhitesourceapp bot restored the whitesource-remediate/mongodb-3.x branch December 4, 2023 23:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants