[Snyk] Upgrade bson from 4.6.1 to 4.7.2

[security-api]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade bson from 4.6.1 to 4.7.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 7 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2023-01-10.

Release notes

Package name: bson

• 4.7.2 - 2023-01-10
  

  The MongoDB Node.js team is pleased to announce version v4.7.2 of the bson package!

  Bug Fixes

  • NODE-4932: remove .0 suffix from double extended json values (#553) (a298d22)

  Documentation

  • API: https://github.com/mongodb/js-bson#readme
  • Changelog: https://github.com/mongodb/js-bson/blob/4.0/HISTORY.md#change-log

  We invite you to try the bson library immediately, and report any issues to the NODE project.

• 4.7.1 - 2023-01-05
  

  The MongoDB Node.js team is pleased to announce version v4.7.1 of the bson package!

  Bug Fixes

  • NODE-4905: double precision accuracy in canonical EJSON (#549) (d86bd52)

  Documentation

  • API: https://github.com/mongodb/js-bson#readme
  • Changelog: https://github.com/mongodb/js-bson/blob/4.0/HISTORY.md#change-log

  We invite you to try the bson library immediately, and report any issues to the NODE project.

• 4.7.0 - 2022-08-18
  

  The MongoDB Node.js team is pleased to announce version 4.7.0 of the bson package!

  Release Highlights

  This release adds automatic UUID support. Now when serializing or deserializing BSON you can work directly with the UUID type without explicit conversion methods. The UUID class is now a subclass of binary so all existing code will continue to work (including the explicit conversion methods .toUUID/.toBinary). The same automatic support for UUID is also present in EJSON .parse/.stringify.

  Take a look at the following for the expected behavior:

  const document = BSON.deserialize(bytes) // { uuid: UUID('xxx') } BSON.serialize(document) // Buffer < document with uuid (binary subtype 4) >

  Special thanks to @ aditi-khare-mongoDB for all her hard work on this feature!! 🎉

  Features

  • NODE-4405: support serializing UUID class (#508) (f5dc9ed)
  • NODE-4419: UUID class deserialization (#509) (ff2b975)
  • NODE-4506: Make UUID a subclass of binary (#512) (e9afa9d)
  • NODE-4535: automatically promote UUIDs when deserializing and parsing UUIDs (#513) (1dc7eae)

  ---

  Documentation

  • API: https://github.com/mongodb/js-bson#readme
  • Changelog: https://github.com/mongodb/js-bson/blob/main/HISTORY.md#change-log

  We invite you to try the bson library immediately, and report any issues to the NODE project.

• 4.6.5 - 2022-07-07
  

  The MongoDB Node.js team is pleased to announce version 4.6.5 of the bson package!

  Release Highlights

  Along with some other bug fixes listed below in this release we've fixed the float parser logic for both deserialize and serialize to use JS Dataview APIs. The most delightful part of this change is an improvement to performance of serializing 64-bit floats. 🎉 🐎

  NODE-3630: remove float parser and test edge cases for Double (#502) (54ca603)
• NODE-4211: Do not require crypto in browser builds (#500) (b32ab40)
• NODE-4302: remove downlevel ts and typesVersions (#501) (651b60e)
• NODE-4381: handle __proto__ well in EJSON (#506) (4bda57d)

Documentation

• API: https://github.com/mongodb/js-bson#readme
• Changelog: https://github.com/mongodb/js-bson/blob/main/HISTORY.md#change-log

We invite you to try the bson library immediately, and report any issues to the NODE project.

4.6.4 - 2022-05-19

The MongoDB Node.js team is pleased to announce version 4.6.4 of the bson package!

Performance

• perf(NODE-4194): improve objectId constructor performance (#498)

Documentation

• API: https://github.com/mongodb/js-bson#readme
• Changelog: https://github.com/mongodb/js-bson/blob/main/HISTORY.md#change-log

We invite you to try the bson library immediately, and report any issues to the NODE project.

4.6.3 - 2022-04-20

The MongoDB Node.js team is pleased to announce version 4.6.3 of the bson package!

Release Highlights

This release improves documentation for BSON type classes by adding an @ category tag to the doc comments.

Documentation

• API: https://github.com/mongodb/js-bson#readme
• Changelog: https://github.com/mongodb/js-bson/blob/main/HISTORY.md#change-log

We invite you to try the bson library immediately, and report any issues to the NODE project.

4.6.2 - 2022-03-22

The MongoDB Node.js team is pleased to announce version 4.6.2 of the bson package!

Release Highlights

This release includes a few fixes to the ObjectId class, including performance improvements in ObjectId.equals.

Bug Fixes

• MONGOSH-1155: update error message in ObjectId class (#493) (67fbc7c)
• NODE-3015: ObjectId.equals should use Buffer.equals for better performance (#478) (8305bdf)
• NODE-3962: correct type for ObjectiId._bsontype (#480) (9671773)

Documentation

• API: https://github.com/mongodb/js-bson#readme
• Changelog: https://github.com/mongodb/js-bson/blob/main/HISTORY.md#change-log

We invite you to try the bson library immediately, and report any issues to the NODE project.

4.6.1 - 2022-01-06

The MongoDB Node.js team is pleased to announce version 4.6.1 of the bson package!

Release Highlights

This release includes a few fixes to the validation checks in some of our constructors.

Bug Fixes

• NODE-3760: ObjectId.isValid string and byte length match (#475) (187d1c4)
• NODE-3815: update Decimal128 constructor validation (#476) (95e8293)
• NODE-3821: nullish check before using toBSON override function (#477) (1d898b6)

Documentation

• API: https://github.com/mongodb/js-bson#readme
• Changelog: https://github.com/mongodb/js-bson/blob/master/HISTORY.md#change-log

We invite you to try the bson library immediately, and report any issues to the NODE project.

from bson GitHub release notes

Commit messages

Package name: bson

• c3fc5df chore(release): 4.7.2
• a298d22 fix(NODE-4932): remove .0 suffix from double extended json values (#553)
• 5465c33 chore(release): 4.7.1
• d86bd52 fix(NODE-4905): double precision accuracy in canonical EJSON (Clearer error message when people forget to open the db mongodb/node-mongodb-native#549)
• 853bbb0 chore(release): 4.7.0
• 1dc7eae feat(NODE-4535): automatically promote UUIDs when deserializing and parsing UUIDs (#513)
• e9afa9d feat(NODE-4506): Make UUID a subclass of binary (Process dropDatabase errors mongodb/node-mongodb-native#512)
• ff2b975 feat(NODE-4419): UUID class deserialization (#509)
• f5dc9ed feat(NODE-4405): support serializing UUID class (#508)
• 4d75481 test(NODE-4357): delete windows tests (Do nothing on gfs read stream resume() if it wasn't paused mongodb/node-mongodb-native#510)
• 4d13309 chore(NODE-4401): enable isolatedModules tsc compiler option (Fix default map-reduce output setting mongodb/node-mongodb-native#507)
• 32f5f2c chore(release): 4.6.5
• 54ca603 fix(NODE-3630): remove float parser and test edge cases for Double (#502)
• 4bda57d fix(NODE-4381): handle `__proto__` well in EJSON (#506)
• a2a81bc chore(NODE-4376): add typescript to eslint rules (#505)
• 5475378 docs(NODE-4349): add note about Binary(string) behavior (#504)
• 9613021 chore: add bson-ext to benchmark tool (Minor Documentation Tweaks mongodb/node-mongodb-native#503)
• 651b60e fix(NODE-4302): remove downlevel ts and typesVersions (#501)
• b32ab40 fix(NODE-4211): Do not require crypto in browser builds (gridfs/chunk: Fixed typo mongodb/node-mongodb-native#500)
• 210fc11 chore(release): 4.6.4
• be5fe3e perf(NODE-4194): improve objectId constructor performance (findOne from primary mongodb/node-mongodb-native#498)
• b86cabf chore(NODE-3723): add node 16 to matrix (#495)
• dfd14e4 chore(release): 4.6.3
• cadd628 docs(NODE-4158): Annotate BSON classes with a category (Fix connection leaks on server reconnection mongodb/node-mongodb-native#496)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs