Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump mongodb from 3.1.13 to 3.3.5 #349

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot-preview[bot]
Copy link
Contributor

Bumps mongodb from 3.1.13 to 3.3.5.

Release notes

Sourced from mongodb's releases.

v3.3.5

The MongoDB Node.js team is pleased to announce version 3.3.5 of the driver

Release Highlights

unified topology

This patch release includes additional fixes for the regression in the unified topology discovered in v3.3.2, expanding our testing infrastructure to include a simulated workload during failover testing. There was a bug when connecting to single-node replicasets which could result in a stack overflow which was corrected. Additionally, events and options which are incompatible with the unified topology will now emit a warning message.

mongodb+srv

The release also includes a fix submitted by @​mpilar, who found an inconsistency in our implementation of the "Initial Seedlist Discovery" specification. An authSource specified in the options passed to MongoClient would be overridden by an authSource provided in the TXT record checked during initial seedlist discovery over SRV. Thank you very much Miguel!

bulkWrite

BulkWriteError is now exported at the top level of the module so that users can catch them easily. Additionally, a fix was made to ensure that the index of operations passed into an unordered bulk operation were preserved when reporting possible errors in the future.

Release Notes

Bug

  • [NODE-1747] - Replica set causes MongoNetworkError due to not connecting with fully qualified domain name
  • [NODE-2089] - Only apply TransientTransactionError label within a transaction
  • [NODE-2143] - getaddrinfo ENOTFOUND error on Windows 10 due to failed fallback to ipv4 after ipv6 lookup fails
  • [NODE-2308] - Bulk write error returns incorrect index in WriteError for unordered writes
  • [NODE-2332] - useUnifiedTopology - replicaset
  • [NODE-2335] - Node Driver does not follow Initial DNS Seedlist Discovery spec
  • [NODE-2342] - Enabling useUnifiedTopology results in stack overflow when connecting to uninitialized replica set

Improvement

  • [NODE-2348] - Document and notify on deprecated events and options for unified topology
  • [NODE-2306] - Driver module does not export `BulkWriteError`

v3.3.4

The MongoDB Node.js team is pleased to announce version 3.3.4 of the driver

Release Highlights

This release primary consists of improvements to the "unified topology". In particular, a regression with interaction between the connection pool and topology could result in servers which "go away" (due to network error, for example) would not return, resulting in a MongoTimeoutError.

... (truncated)
Commits
  • 6930e12 chore(release): 3.3.5
  • b0f83b8 refactor: notify when attempting to use deprecated events/options
  • 3b076b3 fix(cursor): call initialize after session support check
  • 3471c28 fix(pool): support a drain event for use with unified topology
  • c24eb91 test: add a color for workload messages to sdam_viz
  • 261f1e5 fix(topology): don't drain iteration timers on server selection
  • b425fe5 refactor(topology): remove extra timers around selection monitoring
  • 2d976bd fix(topology): correct logic for checking for sessions support
  • 4d2bd6e test: remove use of format in max staleness tests
  • 28a944b refactor: minor modification to the workload generator for sdam_viz
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will not automatically merge this PR because it includes a minor update to a production dependency.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

@dependabot-preview dependabot-preview bot added the dependencies Issue related to dependencies label Dec 2, 2019
@codecov
Copy link

codecov bot commented Dec 2, 2019

Codecov Report

Merging #349 into master will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master     #349   +/-   ##
=======================================
  Coverage   64.76%   64.76%           
=======================================
  Files          25       25           
  Lines         525      525           
=======================================
  Hits          340      340           
  Misses        185      185

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ba45408...cae9ffc. Read the comment docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Issue related to dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants