Skip to content

chore(deps): update dependency mongodb to v7#398

Open
renovate[bot] wants to merge 1 commit into
devfrom
dependencies/mongodb-7.x
Open

chore(deps): update dependency mongodb to v7#398
renovate[bot] wants to merge 1 commit into
devfrom
dependencies/mongodb-7.x

Conversation

@renovate

@renovate renovate Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
mongodb ^6.21.0 -> ^7.0.0 age confidence

Release Notes

mongodb/node-mongodb-native (mongodb)

v7.3.0

Compare Source

Features
Bug Fixes
  • NODE-7548: SCRAM authentication fails on non-Node runtimes (#​4932) (a10d2c9)

v7.2.0

Compare Source

Features
  • NODE-7142: Exponential backoff and jitter in retry loops (#​4871) (22c6031)
  • NODE-7315: Use BSON ByteUtils instead of Nodejs Buffer (#​4840) (1add538)
  • NODE-7335: Create dedicated mocha runner with isolated vm context (#​4876) (a4cba4c)
  • NODE-7379: Refactor Crypto to Web Crypto API (#​4862) (ac98f4a)
  • NODE-7385: add experimental os runtime adapter (#​4851) (d2ad07f)
  • NODE-7441: add ChangeStream.bufferedCount (#​4870) (f7ea421)
  • NODE-7452: restrict server deprioritization on replica sets to overload errors (#​4875) (87a3465)
  • NODE-7467: make token bucket optional in client backpressure (#​4878) (4fb0a0a)
  • NODE-7491: finalize client backpressure implementation for phase 1 rollout (#​4920) (2cc7983)
Bug Fixes
  • NODE-7430: throw timeout error when withTransaction retries exceed deadline (#​4897) (16a899d)
  • NODE-7459: explicitly call setKeepAlive and setNoDelay on socket (#​4879) (778a2a1)
  • NODE-7469: overload retry when retryReads/Writes=false (#​4888) (4157b26)
  • NODE-7478: OIDC host allowlist fix (#​4905) (f36b754)

v7.1.1

Compare Source

The MongoDB Node.js team is pleased to announce version 7.1.1 of the mongodb package!

Release Notes
Tighten OIDC ALLOWED_HOSTS wildcard matching

The OIDC ALLOWED_HOSTS wildcard handling has been fixed to require full subdomain/path matches for *. and */ entries, preventing partial suffix matches from being incorrectly accepted.

Fixed TCP keep-alive and no-delay settings not being applied on TLS connections

Due to a Node.js bug, tls.connect() silently ignores keepAlive, keepAliveInitialDelay, and noDelay options passed through its constructor. This could cause idle connections - particularly through cloud load balancers like Azure (240s idle timeout) or AWS PrivateLink/NLB - to be dropped unexpectedly due to missing TCP keep-alive probes.

The driver now explicitly calls setKeepAlive() and setNoDelay() on the socket after creation, ensuring these settings are always applied regardless of whether TLS is used.

Bug Fixes
Documentation

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

v7.1.0

Compare Source

Features
  • NODE-5393: aws4 no longer required for AWS authentication (#​4824) (0f46db8)
  • NODE-7121: prevent connection churn on backpressure errors when establishing connections (#​4800) (4cb2b87)
  • NODE-7122: exponential backoff between retries in convenient transaction API (#​4765) (e70fdc9)
  • NODE-7304: remove usages in src of promisify (#​4799) (761b9bf)
  • NODE-7306: Replace global process with import node:process (#​4820) (cc503cb)
  • NODE-7310: Replace process.arch with os.arch() (#​4823) (f0af829)
  • NODE-7311: Replace process.platform with os.platform() (#​4822) (c58ca1f)
  • NODE-7317: use BSON.NumberUtils to determine endianness (#​4808) (4e9467e)
  • NODE-7319: update allowed hosts list with *.mongo.com (#​4802) (bfb7160)
  • NODE-7330: deprecate RenameCollectionOptions.new_collection (#​4815) (a96fa26)
  • NODE-7333: add support for deprioritized servers to all topologies (#​4821) (a4211e7)
Bug Fixes
  • NODE-7290: use valueof for error code check (#​4791) (1cc3d1c)
  • NODE-7298: ensure commonWireVersion is computed from server maxWireVersion (#​4805) (2b2366d)
  • NODE-7307: Replace node:process.hrtime() with performance.now() (#​4816) (ae2e037)
  • NODE-7308: replace process.nextTick with queueMicrotask (#​4817) (b1b6e81)

v7.0.0

Compare Source

⚠ BREAKING CHANGES
  • NODE-7259: use alphas of all supporting packages (#​4746)
  • NODE-5510: dont filter change stream options (#​4723)
  • NODE-6296: remove cursor default batch size of 1000 (#​4729)
  • NODE-7150: update peer dependency matrix for 3rd party peer deps (#​4720)
  • NODE-7046: remove AWS uri/options support (#​4689)
  • NODE-4808: remove support for stream() transform on cursors and change streams (#​4728)
  • NODE-6377: remove noResponse option (#​4724)
  • NODE-6473: remove MONGODB-CR auth (#​4717)
  • NODE-5994: Remove metadata-related properties from public driver API (#​4716)
  • NODE-7016: remove beta namespace and move resource management into driver (#​4719)
  • NODE-4184: don't throw on aggregate with write concern and explain (#​4718)
  • NODE-7043, NODE-7217: adopt mongodb-client-encryption v7 (#​4705)
  • NODE-6065: throw MongoRuntimeError instead of MissingDependencyError in crypto connection (#​4711)
  • NODE-6584: improve typing for filepaths in AutoEncryptionOptions (#​4341)
  • NODE-6334: rename PoolRequstedRetry to PoolRequestedRetry (#​4696)
  • NODE-7174: drop support for Node16 and Node18 (#​4668)
  • NODE-7047: use custom credential provider first after URI (#​4656)
  • NODE-6988: require aws sdk for aws auth (#​4659)
Features
Bug Fixes
  • NODE-7067: Wrap socket write in a try/catch to ensure errors can be properly wrapped (#​4759) (66c18b7)
  • NODE-7232: only send endSessions during client close if the topology supports sessions (#​4722) (cc85ebf)
  • NODE-7247: clarify #rewrapManyDataKey() parameter types (#​4760) (cb522bf)
  • NODE-7270: remove extra BSONType file in docs/Next/variables (#​4754) (df3aaaa)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the 🗡️ dependencies Pull requests that update a dependency file label Jun 19, 2026
@renovate renovate Bot enabled auto-merge (squash) June 19, 2026 04:51

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved automated PR

@renovate renovate Bot requested a review from wax911 June 19, 2026 12:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🗡️ dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants