fix(deps): update dependency mongodb to v3 [security]

[renovate]

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
mongodb	^2.0.39 → ^3.1.13

GitHub Vulnerability Alerts

GHSA-mh5c-679w-hh4r

Versions of mongodb prior to 3.1.13 are vulnerable to Denial of Service. The package fails to properly catch an exception when a collection name is invalid and the DB does not exist, crashing the application.

Recommendation

Upgrade to version 3.1.13 or later.

---

Release Notes

mongodb/node-mongodb-native (mongodb)

v3.1.13

Compare Source

Bug Fixes

• aggregate: do not send batchSize for aggregation with $out (ddb8d90)
• bulkWrite: always count undefined values in bson size for bulk (436d340)
• db_ops: rename db to add user on (79931af)
• mongo_client_ops: only skip authentication if no authMechanism is specified (3b6957d)
• mongo-client: ensure close callback is called with client (f39e881)

Features

• core: pin to mongodb-core v3.2.0 (22af15a)
• Cursor: adds support for AsyncIterator in cursors (b972c1e)
• db: add database-level aggregation (b629b21)
• mongo-client: remove deprecated logout and print warning (542859d)
• topology-base: support passing callbacks to close method (7c111e0)
• transactions: support pinning mongos for sharded txns (3886127)
• unified-sdam: backport unified SDAM to master for v3.2.0 (79f33ca)

3.1.13 (2019-01-23)

Bug Fixes

• restore ability to webpack by removing makeLazyLoader (050267d)
• bulk: honor ignoreUndefined in initializeUnorderedBulkOp (e806be4)
• changeStream: properly handle changeStream event mid-close (#​1902) (5ad9fa9)
• db_ops: ensure we async resolve errors in createCollection (210c71d)

3.1.12 (2019-01-16)

Features

• core: update to mongodb-core v3.1.11 (9bef6e7)

3.1.11 (2019-01-15)

Bug Fixes

• bulk: fix error propagation in empty bulk.execute (a3adb3f)
• bulk: make sure that any error in bulk write is propagated (bedc2d2)
• bulk: properly calculate batch size for bulk writes (aafe71b)
• operations: do not call require in a hot path (ff82ff4)

3.1.10 (2018-11-16)

Bug Fixes

• auth: remember to default to admin database (c7dec28)

Features

• core: update to mongodb-core v3.1.9 (bd3355b)

3.1.9 (2018-11-06)

Bug Fixes

• db: move db constants to other file to avoid circular ref (#​1858) (239036f)
• estimated-document-count: support options other than maxTimeMs (36c3c7d)

Features

• core: update to mongodb-core v3.1.8 (80d7c79)

3.1.8 (2018-10-10)

Bug Fixes

• connect: use reported default databse from new uri parser (811f8f8)

Features

• core: update to mongodb-core v3.1.7 (dbfc905)

3.1.7 (2018-10-09)

Features

• core: update mongodb-core to v3.1.6 (61b054e)

3.1.6 (2018-09-15)

Features

• core: update to core v3.1.5 (c5f823d)

3.1.5 (2018-09-14)

Bug Fixes

• cursor: allow $meta based sort when passing an array to sort() (f93a8c3)
• utils: only set retryWrites to true for valid operations (3b725ef)

Features

• core: bump core to v3.1.4 (805d58a)

3.1.4 (2018-08-25)

Bug Fixes

• buffer: use safe-buffer polyfill to maintain compatibility (327da95)
• change-stream: properly support resumablity in stream mode (c43a34b)
• connect: correct replacement of topology on connect callback (918a1e0)
• cursor: remove deprecated notice on forEach (a474158)
• url-parser: bail early on validation when using domain socket (3cb3da3)

Features

• client-ops: allow bypassing creation of topologies on connect (fe39b93)
• core: update mongodb-core to 3.1.3 (a029047)
• test: use connection strings for all calls to newClient (1dac18f)

3.1.3 (2018-08-13)

Features

• core: update to mongodb-core 3.1.2 (337cb79)

3.1.2 (2018-08-13)

Bug Fixes

• aggregate: support user-provided batchSize (ad10dee)
• buffer: replace deprecated Buffer constructor (759dd85)
• bulk: fixing retryable writes for mass-change ops (0604036)
• bulk: handle MongoWriteConcernErrors (12ff392)
• change_stream: do not check isGetMore if error[mongoErrorContextSymbol] is undefined (#​1720) (844c2c8)
• change-stream: fix change stream resuming with promises (3063f00)
• client-ops: return transform map to map rather than function (cfb7d83)
• collection: correctly shallow clone passed in options (7727700)
• collection: countDocuments throws error when query doesn't match docs (09c7d8e)
• collection: depend on resolveReadPreference for inheritance (a649e35)
• collection: ensure findAndModify always use readPreference primary (86344f4)
• collection: isCapped returns false instead of undefined (b8471f1)
• collection: only send bypassDocumentValidation if true (fdb828b)
• count-documents: return callback on error case (fca1185)
• cursor: cursor count with collation fix (71879c3)
• cursor: cursor hasNext returns false when exhausted (184b817)
• cursor: cursor.count not respecting parent readPreference (5a9fdf0)
• cursor: set readPreference for cursor.count (13d776f)
• db: don't send session down to createIndex command (559c195)
• db: throw readable error when creating _id with background: true (b3ff3ed)
• db_ops: call collection.find() with correct parameters (#​1795) (36e92f1)
• db_ops: fix two incorrectly named variables (15dc808)
• findOneAndUpdate: ensure that update documents contain atomic operators (eb68074)
• index: export MongoNetworkError (98ab29e)
• mongo_client: translate options for connectWithUrl (78f6977)
• mongo-client: pass arguments to ctor when new keyword is used (d6c3417)
• mongos: bubble up close events after the first one (#​1713) (3e91d77), closes Automattic/mongoose#6249 #​1685
• parallelCollectionScan: do not use implicit sessions on cursors (2de470a)
• retryWrites: fixes more bulk ops to not use retryWrites (69e5254)
• server: remove unnecessary print statement (2bcbc12)
• teardown: properly destroy a topology when initial connect fails (b8d2f1d)
• topology-base: sending endSessions is always skipped now (a276cbe)
• txns: omit writeConcern when in a transaction (b88c938)
• utils: restructure inheritance rules for read preferences (6a7dac1)

Features

• auth: add support for SCRAM-SHA-256 (f53195d)
• changeStream: Adding new 4.0 ChangeStream features (2cb4894)
• changeStream: allow resuming on getMore errors (4ba5adc)
• changeStream: expanding changeStream resumable errors (49fbafd)
• ChangeStream: update default startAtOperationTime (50a9f65)
• collection: add colleciton level document mapping/unmapping (d03335e)
• collection: Implement new count API (a5240ae)
• Collection: warn if callback is not function in find and findOne (cddaba0)
• core: bump core dependency to v3.1.0 (4937240)
• cursor: new cursor.transformStream method (397fcd2)
• deprecation: create deprecation function (4f907a0)
• deprecation: wrap deprecated functions (a5d0f1d)
• GridFS: add option to disable md5 in file upload (704a88e)
• listCollections: add support for nameOnly option (d2d0367)
• parallelCollectionScan: does not allow user to pass a session (4da9e03)
• read-preference: add transaction to inheritance rules (18ca41d)
• read-preference: unify means of read preference resolution (#​1738) (2995e11)
• urlParser: use core URL parser (c1c5d8d)
• withSession: add top level helper for session lifetime (9976b86)

Reverts

• collection: reverting collection-mapping features (7298c76), closes #​1698 mongodb/js-bson#253

3.1.1 (2018-07-05)

Bug Fixes

• client-ops: return transform map to map rather than function (b8b4bfa)
• collection: correctly shallow clone passed in options (2e6c4fa)
• collection: countDocuments throws error when query doesn't match docs (4e83556)
• server: remove unnecessary print statement (20e11b3)

v3.1.12

Compare Source

Bug Fixes

• aggregate: do not send batchSize for aggregation with $out (ddb8d90)
• bulkWrite: always count undefined values in bson size for bulk (436d340)
• db_ops: rename db to add user on (79931af)
• mongo_client_ops: only skip authentication if no authMechanism is specified (3b6957d)
• mongo-client: ensure close callback is called with client (f39e881)

Features

• core: pin to mongodb-core v3.2.0 (22af15a)
• Cursor: adds support for AsyncIterator in cursors (b972c1e)
• db: add database-level aggregation (b629b21)
• mongo-client: remove deprecated logout and print warning (542859d)
• topology-base: support passing callbacks to close method (7c111e0)
• transactions: support pinning mongos for sharded txns (3886127)
• unified-sdam: backport unified SDAM to master for v3.2.0 (79f33ca)

3.1.13 (2019-01-23)

Bug Fixes

• restore ability to webpack by removing makeLazyLoader (050267d)
• bulk: honor ignoreUndefined in initializeUnorderedBulkOp (e806be4)
• changeStream: properly handle changeStream event mid-close (#​1902) (5ad9fa9)
• db_ops: ensure we async resolve errors in createCollection (210c71d)

3.1.12 (2019-01-16)

Features

• core: update to mongodb-core v3.1.11 (9bef6e7)

3.1.11 (2019-01-15)

Bug Fixes

• bulk: fix error propagation in empty bulk.execute (a3adb3f)
• bulk: make sure that any error in bulk write is propagated (bedc2d2)
• bulk: properly calculate batch size for bulk writes (aafe71b)
• operations: do not call require in a hot path (ff82ff4)

3.1.10 (2018-11-16)

Bug Fixes

• auth: remember to default to admin database (c7dec28)

Features

• core: update to mongodb-core v3.1.9 (bd3355b)

3.1.9 (2018-11-06)

Bug Fixes

• db: move db constants to other file to avoid circular ref (#​1858) (239036f)
• estimated-document-count: support options other than maxTimeMs (36c3c7d)

Features

• core: update to mongodb-core v3.1.8 (80d7c79)

3.1.8 (2018-10-10)

Bug Fixes

• connect: use reported default databse from new uri parser (811f8f8)

Features

• core: update to mongodb-core v3.1.7 (dbfc905)

3.1.7 (2018-10-09)

Features

• core: update mongodb-core to v3.1.6 (61b054e)

3.1.6 (2018-09-15)

Features

• core: update to core v3.1.5 (c5f823d)

3.1.5 (2018-09-14)

Bug Fixes

• cursor: allow $meta based sort when passing an array to sort() (f93a8c3)
• utils: only set retryWrites to true for valid operations (3b725ef)

Features

• core: bump core to v3.1.4 (805d58a)

3.1.4 (2018-08-25)

Bug Fixes

• buffer: use safe-buffer polyfill to maintain compatibility (327da95)
• change-stream: properly support resumablity in stream mode (c43a34b)
• connect: correct replacement of topology on connect callback (918a1e0)
• cursor: remove deprecated notice on forEach (a474158)
• url-parser: bail early on validation when using domain socket (3cb3da3)

Features

• client-ops: allow bypassing creation of topologies on connect (fe39b93)
• core: update mongodb-core to 3.1.3 (a029047)
• test: use connection strings for all calls to newClient (1dac18f)

3.1.3 (2018-08-13)

Features

• core: update to mongodb-core 3.1.2 (337cb79)

3.1.2 (2018-08-13)

Bug Fixes

• aggregate: support user-provided batchSize (ad10dee)
• buffer: replace deprecated Buffer constructor (759dd85)
• bulk: fixing retryable writes for mass-change ops (0604036)
• bulk: handle MongoWriteConcernErrors (12ff392)
• change_stream: do not check isGetMore if error[mongoErrorContextSymbol] is undefined (#​1720) (844c2c8)
• change-stream: fix change stream resuming with promises (3063f00)
• client-ops: return transform map to map rather than function (cfb7d83)
• collection: correctly shallow clone passed in options (7727700)
• collection: countDocuments throws error when query doesn't match docs (09c7d8e)
• collection: depend on resolveReadPreference for inheritance (a649e35)
• collection: ensure findAndModify always use readPreference primary (86344f4)
• collection: isCapped returns false instead of undefined (b8471f1)
• collection: only send bypassDocumentValidation if true (fdb828b)
• count-documents: return callback on error case (fca1185)
• cursor: cursor count with collation fix (71879c3)
• cursor: cursor hasNext returns false when exhausted (184b817)
• cursor: cursor.count not respecting parent readPreference (5a9fdf0)
• cursor: set readPreference for cursor.count (13d776f)
• db: don't send session down to createIndex command (559c195)
• db: throw readable error when creating _id with background: true (b3ff3ed)
• db_ops: call collection.find() with correct parameters (#​1795) (36e92f1)
• db_ops: fix two incorrectly named variables (15dc808)
• findOneAndUpdate: ensure that update documents contain atomic operators (eb68074)
• index: export MongoNetworkError (98ab29e)
• mongo_client: translate options for connectWithUrl (78f6977)
• mongo-client: pass arguments to ctor when new keyword is used (d6c3417)
• mongos: bubble up close events after the first one (#​1713) (3e91d77), closes Automattic/mongoose#6249 #​1685
• parallelCollectionScan: do not use implicit sessions on cursors (2de470a)
• retryWrites: fixes more bulk ops to not use retryWrites (69e5254)
• server: remove unnecessary print statement (2bcbc12)
• teardown: properly destroy a topology when initial connect fails (b8d2f1d)
• topology-base: sending endSessions is always skipped now (a276cbe)
• txns: omit writeConcern when in a transaction (b88c938)
• utils: restructure inheritance rules for read preferences (6a7dac1)

Features

• auth: add support for SCRAM-SHA-256 (f53195d)
• changeStream: Adding new 4.0 ChangeStream features (2cb4894)
• changeStream: allow resuming on getMore errors (4ba5adc)
• changeStream: expanding changeStream resumable errors (49fbafd)
• ChangeStream: update default startAtOperationTime (50a9f65)
• collection: add colleciton level document mapping/unmapping (d03335e)
• collection: Implement new count API (a5240ae)
• Collection: warn if callback is not function in find and findOne (cddaba0)
• core: bump core dependency to v3.1.0 (4937240)
• cursor: new cursor.transformStream method (397fcd2)
• deprecation: create deprecation function (4f907a0)
• deprecation: wrap deprecated functions (a5d0f1d)
• GridFS: add option to disable md5 in file upload (704a88e)
• listCollections: add support for nameOnly option (d2d0367)
• parallelCollectionScan: does not allow user to pass a session (4da9e03)
• read-preference: add transaction to inheritance rules (18ca41d)
• read-preference: unify means of read preference resolution (#​1738) (2995e11)
• urlParser: use core URL parser (c1c5d8d)
• withSession: add top level helper for session lifetime (9976b86)

Reverts

• collection: reverting collection-mapping features (7298c76), closes #​1698 mongodb/js-bson#253

3.1.1 (2018-07-05)

Bug Fixes

• client-ops: return transform map to map rather than function (b8b4bfa)
• collection: correctly shallow clone passed in options (2e6c4fa)
• collection: countDocuments throws error when query doesn't match docs (4e83556)
• server: remove unnecessary print statement (20e11b3)

v3.1.11

Compare Source

Bug Fixes

• aggregate: do not send batchSize for aggregation with $out (ddb8d90)
• bulkWrite: always count undefined values in bson size for bulk (436d340)
• db_ops: rename db to add user on (79931af)
• mongo_client_ops: only skip authentication if no authMechanism is specified (3b6957d)
• mongo-client: ensure close callback is called with client (f39e881)

Features

• core: pin to mongodb-core v3.2.0 (22af15a)
• Cursor: adds support for AsyncIterator in cursors (b972c1e)
• db: add database-level aggregation (b629b21)
• mongo-client: remove deprecated logout and print warning (542859d)
• topology-base: support passing callbacks to close method (7c111e0)
• transactions: support pinning mongos for sharded txns (3886127)
• unified-sdam: backport unified SDAM to master for v3.2.0 (79f33ca)

3.1.13 (2019-01-23)

Bug Fixes

• restore ability to webpack by removing makeLazyLoader (050267d)
• bulk: honor ignoreUndefined in initializeUnorderedBulkOp (e806be4)
• changeStream: properly handle changeStream event mid-close (#​1902) (5ad9fa9)
• db_ops: ensure we async resolve errors in createCollection (210c71d)

3.1.12 (2019-01-16)

Features

• core: update to mongodb-core v3.1.11 (9bef6e7)

3.1.11 (2019-01-15)

Bug Fixes

• bulk: fix error propagation in empty bulk.execute (a3adb3f)
• bulk: make sure that any error in bulk write is propagated (bedc2d2)
• bulk: properly calculate batch size for bulk writes (aafe71b)
• operations: do not call require in a hot path (ff82ff4)

3.1.10 (2018-11-16)

Bug Fixes

• auth: remember to default to admin database (c7dec28)

Features

• core: update to mongodb-core v3.1.9 (bd3355b)

3.1.9 (2018-11-06)

Bug Fixes

• db: move db constants to other file to avoid circular ref (#​1858) (239036f)
• estimated-document-count: support options other than maxTimeMs (36c3c7d)

Features

• core: update to mongodb-core v3.1.8 (80d7c79)

3.1.8 (2018-10-10)

Bug Fixes

• connect: use reported default databse from new uri parser (811f8f8)

Features

• core: update to mongodb-core v3.1.7 (dbfc905)

3.1.7 (2018-10-09)

Features

• core: update mongodb-core to v3.1.6 (61b054e)

3.1.6 (2018-09-15)

Features

• core: update to core v3.1.5 (c5f823d)

3.1.5 (2018-09-14)

Bug Fixes

• cursor: allow $meta based sort when passing an array to sort() (f93a8c3)
• utils: only set retryWrites to true for valid operations (3b725ef)

Features

• core: bump core to v3.1.4 (805d58a)

3.1.4 (2018-08-25)

Bug Fixes

• buffer: use safe-buffer polyfill to maintain compatibility (327da95)
• change-stream: properly support resumablity in stream mode (c43a34b)
• connect: correct replacement of topology on connect callback (918a1e0)
• cursor: remove deprecated notice on forEach (a474158)
• url-parser: bail early on validation when using domain socket (3cb3da3)

Features

• client-ops: allow bypassing creation of topologies on connect (fe39b93)
• core: update mongodb-core to 3.1.3 (a029047)
• test: use connection strings for all calls to newClient (1dac18f)

3.1.3 (2018-08-13)

Features

• core: update to mongodb-core 3.1.2 (337cb79)

3.1.2 (2018-08-13)

Bug Fixes

• aggregate: support user-provided batchSize (ad10dee)
• buffer: replace deprecated Buffer constructor (759dd85)
• bulk: fixing retryable writes for mass-change ops (0604036)
• bulk: handle MongoWriteConcernErrors (12ff392)
• change_stream: do not check isGetMore if error[mongoErrorContextSymbol] is undefined (#​1720) (844c2c8)
• change-stream: fix change stream resuming with promises (3063f00)
• client-ops: return transform map to map rather than function (cfb7d83)
• collection: correctly shallow clone passed in options (7727700)
• collection: countDocuments throws error when query doesn't match docs (09c7d8e)
• collection: depend on resolveReadPreference for inheritance (a649e35)
• collection: ensure findAndModify always use readPreference primary (86344f4)
• collection: isCapped returns false instead of undefined (b8471f1)
• collection: only send bypassDocumentValidation if true (fdb828b)
• count-documents: return callback on error case (fca1185)
• cursor: cursor count with collation fix (71879c3)
• cursor: cursor hasNext returns false when exhausted (184b817)
• cursor: cursor.count not respecting parent readPreference (5a9fdf0)
• cursor: set readPreference for cursor.count (13d776f)
• db: don't send session down to createIndex command (559c195)
• db: throw readable error when creating _id with background: true (b3ff3ed)
• db_ops: call collection.find() with correct parameters (#​1795) (36e92f1)
• db_ops: fix two incorrectly named variables (15dc808)
• findOneAndUpdate: ensure that update documents contain atomic operators (eb68074)
• index: export MongoNetworkError (98ab29e)
• mongo_client: translate options for connectWithUrl (78f6977)
• mongo-client: pass arguments to ctor when new keyword is used (d6c3417)
• mongos: bubble up close events after the first one (#​1713) (3e91d77), closes Automattic/mongoose#6249 #​1685
• parallelCollectionScan: do not use implicit sessions on cursors (2de470a)
• retryWrites: fixes more bulk ops to not use retryWrites (69e5254)
• server: remove unnecessary print statement (2bcbc12)
• teardown: properly destroy a topology when initial connect fails (b8d2f1d)
• topology-base: sending endSessions is always skipped now (a276cbe)
• txns: omit writeConcern when in a transaction (b88c938)
• utils: restructure inheritance rules for read preferences (6a7dac1)

Features

• auth: add support for SCRAM-SHA-256 (f53195d)
• changeStream: Adding new 4.0 ChangeStream features (2cb4894)
• changeStream: allow resuming on getMore errors (4ba5adc)
• changeStream: expanding changeStream resumable errors (49fbafd)
• ChangeStream: update default startAtOperationTime (50a9f65)
• collection: add colleciton level document mapping/unmapping (d03335e)
• collection: Implement new count API (a5240ae)
• Collection: warn if callback is not function in find and findOne (cddaba0)
• core: bump core dependency to v3.1.0 (4937240)
• cursor: new cursor.transformStream method (397fcd2)
• deprecation: create deprecation function (4f907a0)
• deprecation: wrap deprecated functions (a5d0f1d)
• GridFS: add option to disable md5 in file upload (704a88e)
• listCollections: add support for nameOnly option (d2d0367)
• parallelCollectionScan: does not allow user to pass a session (4da9e03)
• read-preference: add transaction to inheritance rules (18ca41d)
• read-preference: unify means of read preference resolution (#​1738) (2995e11)
• urlParser: use core URL parser (c1c5d8d)
• withSession: add top level helper for session lifetime (9976b86)

Reverts

• collection: reverting collection-mapping features (7298c76), closes #​1698 mongodb/js-bson#253

3.1.1 (2018-07-05)

Bug Fixes

• client-ops: return transform map to map rather than function (b8b4bfa)
• collection: correctly shallow clone passed in options (2e6c4fa)
• collection: countDocuments throws error when query doesn't match docs (4e83556)
• server: remove unnecessary print statement (20e11b3)

v3.1.10

Compare Source

Bug Fixes

• aggregate: do not send batchSize for aggregation with $out (ddb8d90)
• bulkWrite: always count undefined values in bson size for bulk (436d340)
• db_ops: rename db to add user on (79931af)
• mongo_client_ops: only skip authentication if no authMechanism is specified (3b6957d)
• mongo-client: ensure close callback is called with client (f39e881)

Features

• core: pin to mongodb-core v3.2.0 (22af15a)
• Cursor: adds support for AsyncIterator in cursors (b972c1e)
• db: add database-level aggregation (b629b21)
• mongo-client: remove deprecated logout and print warning (542859d)
• topology-base: support passing callbacks to close method (7c111e0)
• transactions: support pinning mongos for sharded txns (3886127)
• unified-sdam: backport unified SDAM to master for v3.2.0 (79f33ca)

3.1.13 (2019-01-23)

Bug Fixes

• restore ability to webpack by removing makeLazyLoader (050267d)
• bulk: honor ignoreUndefined in initializeUnorderedBulkOp (e806be4)
• changeStream: properly handle changeStream event mid-close (#​1902) (5ad9fa9)
• db_ops: ensure we async resolve errors in createCollection (210c71d)

3.1.12 (2019-01-16)

Features

• core: update to mongodb-core v3.1.11 (9bef6e7)

3.1.11 (2019-01-15)

Bug Fixes

• bulk: fix error propagation in empty bulk.execute (a3adb3f)
• bulk: make sure that any error in bulk write is propagated (bedc2d2)
• bulk: properly calculate batch size for bulk writes (aafe71b)
• operations: do not call require in a hot path (ff82ff4)

3.1.10 (2018-11-16)

Bug Fixes

• auth: remember to default to admin database (c7dec28)

Features

• core: update to mongodb-core v3.1.9 (bd3355b)

3.1.9 (2018-11-06)

Bug Fixes

• db: move db constants to other file to avoid circular ref (#​1858) (239036f)
• estimated-document-count: support options other than maxTimeMs (36c3c7d)

Features

• core: update to mongodb-core v3.1.8 (80d7c79)

3.1.8 (2018-10-10)

Bug Fixes

• connect: use reported default databse from new

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.