Skip to content

fix(deps): update dependency mongodb to v7 - #163

Open
renovate[bot] wants to merge 1 commit into
devfrom
renovate/mongodb-7.x
Open

fix(deps): update dependency mongodb to v7#163
renovate[bot] wants to merge 1 commit into
devfrom
renovate/mongodb-7.x

Conversation

@renovate

@renovate renovate Bot commented Nov 22, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
mongodb ^6.18.0 → ^7.0.0 age confidence

Release Notes

mongodb/node-mongodb-native (mongodb)

v7.6.0

Compare Source

Features
  • NODE-7546: add HTTP Proxy support for QE & CSFLE (#​5007) (3366c21)
  • NODE-7547: bump minimum support server/wire versions to '4.4' & '9' respectively (#​4994) (3d97028)
  • NODE-7624: support baseBackoffMS and update client backpressure backoff (#​5020) (560837b)
Bug Fixes
Performance Improvements
  • NODE-7660: serialize bulk write documents a single time (#​4999) (1217aa1)

v7.5.0

Compare Source

Features
  • NODE-7537: promote QE string queries (prefix/suffix/substring) (#​4996) (dc4900c)
Bug Fixes

v7.4.0

Compare Source

Features
  • NODE-7634: remove experimental tag from async dispose methods (#​4976) (43ce3eb)
  • NODE-7549: send afterClusterTime on writes in causally-consistent sessions (#​4963) (3abfd26)

v7.3.0

Compare Source

Features
Bug Fixes
  • NODE-7548: SCRAM authentication fails on non-Node runtimes (#​4932) (a10d2c9)

v7.2.0

Compare Source

Features
  • NODE-7142: Exponential backoff and jitter in retry loops (#​4871) (22c6031)
  • NODE-7315: Use BSON ByteUtils instead of Nodejs Buffer (#​4840) (1add538)
  • NODE-7335: Create dedicated mocha runner with isolated vm context (#​4876) (a4cba4c)
  • NODE-7379: Refactor Crypto to Web Crypto API (#​4862) (ac98f4a)
  • NODE-7385: add experimental os runtime adapter (#​4851) (d2ad07f)
  • NODE-7441: add ChangeStream.bufferedCount (#​4870) (f7ea421)
  • NODE-7452: restrict server deprioritization on replica sets to overload errors (#​4875) (87a3465)
  • NODE-7467: make token bucket optional in client backpressure (#​4878) (4fb0a0a)
  • NODE-7491: finalize client backpressure implementation for phase 1 rollout (#​4920) (2cc7983)
Bug Fixes
  • NODE-7430: throw timeout error when withTransaction retries exceed deadline (#​4897) (16a899d)
  • NODE-7459: explicitly call setKeepAlive and setNoDelay on socket (#​4879) (778a2a1)
  • NODE-7469: overload retry when retryReads/Writes=false (#​4888) (4157b26)
  • NODE-7478: OIDC host allowlist fix (#​4905) (f36b754)

v7.1.1

Compare Source

The MongoDB Node.js team is pleased to announce version 7.1.1 of the mongodb package!

Release Notes
Tighten OIDC ALLOWED_HOSTS wildcard matching

The OIDC ALLOWED_HOSTS wildcard handling has been fixed to require full subdomain/path matches for *. and */ entries, preventing partial suffix matches from being incorrectly accepted.

Fixed TCP keep-alive and no-delay settings not being applied on TLS connections

Due to a Node.js bug, tls.connect() silently ignores keepAlive, keepAliveInitialDelay, and noDelay options passed through its constructor. This could cause idle connections - particularly through cloud load balancers like Azure (240s idle timeout) or AWS PrivateLink/NLB - to be dropped unexpectedly due to missing TCP keep-alive probes.

The driver now explicitly calls setKeepAlive() and setNoDelay() on the socket after creation, ensuring these settings are always applied regardless of whether TLS is used.

Bug Fixes
Documentation

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

v7.1.0

Compare Source

Features
  • NODE-5393: aws4 no longer required for AWS authentication (#​4824) (0f46db8)
  • NODE-7121: prevent connection churn on backpressure errors when establishing connections (#​4800) (4cb2b87)
  • NODE-7122: exponential backoff between retries in convenient transaction API (#​4765) (e70fdc9)
  • NODE-7304: remove usages in src of promisify (#​4799) (761b9bf)
  • NODE-7306: Replace global process with import node:process (#​4820) (cc503cb)
  • NODE-7310: Replace process.arch with os.arch() (#​4823) (f0af829)
  • NODE-7311: Replace process.platform with os.platform() (#​4822) (c58ca1f)
  • NODE-7317: use BSON.NumberUtils to determine endianness (#​4808) (4e9467e)
  • NODE-7319: update allowed hosts list with *.mongo.com (#​4802) (bfb7160)
  • NODE-7330: deprecate RenameCollectionOptions.new_collection (#​4815) (a96fa26)
  • NODE-7333: add support for deprioritized servers to all topologies (#​4821) (a4211e7)
Bug Fixes
  • NODE-7290: use valueof for error code check (#​4791) (1cc3d1c)
  • NODE-7298: ensure commonWireVersion is computed from server maxWireVersion (#​4805) (2b2366d)
  • NODE-7307: Replace node:process.hrtime() with performance.now() (#​4816) (ae2e037)
  • NODE-7308: replace process.nextTick with queueMicrotask (#​4817) (b1b6e81)

v7.0.0

Compare Source

⚠ BREAKING CHANGES
  • NODE-7259: use alphas of all supporting packages (#​4746)
  • NODE-5510: dont filter change stream options (#​4723)
  • NODE-6296: remove cursor default batch size of 1000 (#​4729)
  • NODE-7150: update peer dependency matrix for 3rd party peer deps (#​4720)
  • NODE-7046: remove AWS uri/options support (#​4689)
  • NODE-4808: remove support for stream() transform on cursors and change streams (#​4728)
  • NODE-6377: remove noResponse option (#​4724)
  • NODE-6473: remove MONGODB-CR auth (#​4717)
  • NODE-5994: Remove metadata-related properties from public driver API (#​4716)
  • NODE-7016: remove beta namespace and move resource management into driver (#​4719)
  • NODE-4184: don't throw on aggregate with write concern and explain (#​4718)
  • NODE-7043, NODE-7217: adopt mongodb-client-encryption v7 (#​4705)
  • NODE-6065: throw MongoRuntimeError instead of MissingDependencyError in crypto connection (#​4711)
  • NODE-6584: improve typing for filepaths in AutoEncryptionOptions (#​4341)
  • NODE-6334: rename PoolRequstedRetry to PoolRequestedRetry (#​4696)
  • NODE-7174: drop support for Node16 and Node18 (#​4668)
  • NODE-7047: use custom credential provider first after URI (#​4656)
  • NODE-6988: require aws sdk for aws auth (#​4659)
Features
Bug Fixes
  • NODE-7067: Wrap socket write in a try/catch to ensure errors can be properly wrapped (#​4759) (66c18b7)
  • NODE-7232: only send endSessions during client close if the topology supports sessions (#​4722) (cc85ebf)
  • NODE-7247: clarify #rewrapManyDataKey() parameter types (#​4760) (cb522bf)
  • NODE-7270: remove extra BSONType file in docs/Next/variables (#​4754) (df3aaaa)

v6.21.0

Compare Source

The MongoDB Node.js team is pleased to announce version 6.21.0 of the mongodb package!

Release Notes

Deprecated items to be removed in 7.0.0

The following items have been deprecated and will be removed in 7.0.0:

MongoCredentials.authMechanismProperties.AWS_SESSION_TOKEN // URI & client options for AWS variables will no longer be respected
CommandOptions.noResponse // Unused
ConnectionOptions.cancellationToken // Unused
CursorStreamOptions // Only option, transform, removed in favor of Stream#map
Features
  • NODE-7230: add deprecations of items to be removed in v7 (#​4774) (5104c0f)

Documentation

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "after 11pm every weekend,before 8am every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added package:npm Pull requests that update node.js deps type:dependencies Pull requests that update a dependency file update:major Major Updates of dependency labels Nov 22, 2025
@snyk-io

snyk-io Bot commented Nov 22, 2025 •
edited
Loading

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@socket-security

socket-security Bot commented Nov 22, 2025 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedmongodb@​6.20.0 ⏵ 7.6.095 +210010098 +1100

View full report

@renovate
renovate Bot force-pushed the renovate/mongodb-7.x branch from c4c62f3 to 7255308 Compare February 2, 2026 21:06
@renovate
renovate Bot force-pushed the renovate/mongodb-7.x branch 2 times, most recently from ab590d9 to 67ebaf8 Compare February 18, 2026 03:10
@renovate
renovate Bot force-pushed the renovate/mongodb-7.x branch from 67ebaf8 to ebbc59f Compare April 7, 2026 14:59
@renovate
renovate Bot force-pushed the renovate/mongodb-7.x branch from ebbc59f to a6c7dad Compare May 4, 2026 19:52
@renovate
renovate Bot force-pushed the renovate/mongodb-7.x branch from a6c7dad to ed629f7 Compare June 23, 2026 19:38
@renovate
renovate Bot force-pushed the renovate/mongodb-7.x branch from ed629f7 to 8fd7c45 Compare July 9, 2026 22:01
@renovate
renovate Bot force-pushed the renovate/mongodb-7.x branch from 8fd7c45 to 64d701b Compare July 21, 2026 23:11
@renovate
renovate Bot force-pushed the renovate/mongodb-7.x branch from 64d701b to 4f6d117 Compare July 30, 2026 17:15
@renovate
renovate Bot force-pushed the renovate/mongodb-7.x branch from 4f6d117 to dca142a Compare August 11, 2026 22:31
@socket-security

socket-security Bot commented Aug 11, 2026 •
edited
Loading

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@renovate
renovate Bot force-pushed the renovate/mongodb-7.x branch from dca142a to 755c727 Compare August 26, 2026 12:42
@renovate
renovate Bot force-pushed the renovate/mongodb-7.x branch 2 times, most recently from 463bf9e to 6eb9efd Compare September 7, 2026 17:51
@renovate
renovate Bot force-pushed the renovate/mongodb-7.x branch from 6eb9efd to 04a4916 Compare September 24, 2026 21:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

package:npm Pull requests that update node.js deps type:dependencies Pull requests that update a dependency file update:major Major Updates of dependency

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants