[Snyk] Upgrade mongodb from 3.6.12 to 3.7.0

[snyk-bot]

Snyk has created this PR to upgrade mongodb from 3.6.12 to 3.7.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 21 days ago, on 2021-08-31.

Release notes

Package name: mongodb

• 3.7.0 - 2021-08-31
  

  The MongoDB Node.js team is pleased to announce version 3.7.0 of the mongodb package!

  Release Highlights

  Versioned API

  Versioned API is a new feature in MongoDB 5.0 that allows user-selectable API versions, subsets of MongoDB server semantics, to be declared on a client. During communication with a server, clients with a declared API version will force the server to behave in a manner compatible with the API version. Declaring an API version on a client can be used to ensure consistent responses from a server, providing long term API stability for an application. The declared API version is applied to all commands run through the client, including those sent through the generic RunCommand helper. Specifying versioned API options in the command document AND declaring an API version on the client is not supported and will lead to undefined behavior.

  Declare an API version on a client

  // Declare API version "1" for the client
  client = new MongoClient(uri, { serverApi: { version: '1' } });

  cursor = client.db('database').collection('coll').find(...);

  Strict mode

  Declaring a strict API version will cause the MongoDB server to reject all commands that are not part of the declared API version. This includes command options and aggregation pipeline stages. For example, the following find call would fail because the tailable option is not part of version 1:

  // Declare API version "1" for the client, with strict on
  client = new MongoClient(uri, { serverApi: { version: '1', strict: true } });

  // Fails with an error
  cursor = client.db('database').collection('coll').find({ ... }, { tailable: true });

  Deprecation Errors

  The deprecationErrors option can be used to enable command failures when using functionality that is deprecated from version 1. Note that at the time of this writing, no deprecations in version 1 exist.

  // Declare API version "1" for the client, with deprecationErrors on
  client = new MongoClient(uri, { serverApi: { version: '1', deprecationErrors: true } });

  // Note: since API version "1" is the initial version, there are no deprecated commands to provide as an example yet.

  Features

  • NODE-3191: backport versioned api (#2850) (93a47fd)

  Bug Fixes

  • NODE-3377: driver should allow arbitrary explain levels (#2961) (96c8ab4)
  • NODE-3463: pass explain error through to callback (#2949) (e5975af)

  Documentation

  • Reference: https://docs.mongodb.com/drivers/node/current/
  • API: https://mongodb.github.io/node-mongodb-native/3.7/api/
  • Changelog: https://github.com/mongodb/node-mongodb-native/blob/v3.7.0/HISTORY.md

  We invite you to try the mongodb library immediately, and report any issues to the NODE project.

• 3.6.12 - 2021-08-30
  

  The MongoDB Node.js team is pleased to announce version 3.6.12 of the mongodb package!

  Bug Fixes

  • NODE-3487: check for nullish aws mechanism property (#2957) (5902b4c)
  • NODE-3528: add support for snappy v7 (#2947) (54f5c2d)

  Documentation

  • Reference: https://docs.mongodb.com/drivers/node/current/
  • API: https://mongodb.github.io/node-mongodb-native/3.6/api/
  • Changelog: https://github.com/mongodb/node-mongodb-native/blob/v3.6.12/HISTORY.md

  We invite you to try the mongodb library immediately, and report any issues to the NODE project.

from mongodb GitHub release notes

Commit messages

Package name: mongodb

• 44df7d7 chore(release): 3.7.0
• 1a76618 fix: versioned api low node compat fix (#2970)
• 7602f68 docs(NODE-3406): add versioned api examples (#2969)
• a07aa56 test(NODE-3409): support AWS temp credentials in CSFLE tests (#2968)
• eae0e05 chore(NODE-3303): deprecate md5 hash and isConnected (#2960)
• 77ab63e test(NODE-3387): correctly extract findOneX values in unified operations (#2966)
• 96c8ab4 fix(NODE-3377): driver should allow arbitrary explain levels (#2961)
• 4c25984 chore: sync 3.6 changes to 3.7 (#2963)
• e5975af fix(NODE-3463): pass explain error through to callback (#2949)
• 238a4b0 fix(NODE-3290): versioned api validation and tests (#2869)
• 91a2fc9 Merge remote-tracking branch 'origin/3.6' into 3.7
• 93a47fd feat(NODE-3191): backport versioned api (#2850)
• 33e8248 test(NODE-3188): backport transaction pinning tests (#2839)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs