Skip to content

chore(deps): update backend dependencies related to mongodb (major)#1809

Open
ggrossetie wants to merge 1 commit intomasterfrom
renovate/major-backend-dependencies-related-to-mongodb
Open

chore(deps): update backend dependencies related to mongodb (major)#1809
ggrossetie wants to merge 1 commit intomasterfrom
renovate/major-backend-dependencies-related-to-mongodb

Conversation

@ggrossetie
Copy link
Collaborator

@ggrossetie ggrossetie commented Nov 27, 2025

This PR contains the following updates:

Package Type Update Change
connect-mongo dependencies major ^5.1.0 -> ^6.0.0
mongodb dependencies major ~6.21 -> ~7.1.0
mongoose (source) dependencies major ~7.8 -> ~9.1.0

Release Notes

jdesboeufs/connect-mongo (connect-mongo)

v6.0.0

Compare Source

  • Breaking: Requires Node.js 20.8+ (aligns with MongoDB driver 5–7 support).
  • Compatibility: Supported/tested matrix: Node 20/22/24 + MongoDB driver 5.x–7.x + MongoDB server 4.4–8.0 (peer range remains >=5.0.0).
  • Added: Optional timestamps flag to record createdAt/updatedAt on session documents for auditing while keeping the default schema unchanged.
  • Added: Pluggable cryptoAdapter interface with helpers createWebCryptoAdapter (AES-GCM via Web Crypto API) and createKrupteinAdapter; legacy crypto options are auto-wrapped and mutually exclusive with cryptoAdapter to avoid ambiguity.
  • Fixed: store.clear() now uses deleteMany({}) instead of collection.drop(), preserving TTL indexes and treating NamespaceNotFound as success so clears are idempotent.
  • Fixed: Decryption failures in get() now short-circuit after the first callback, preventing double-callback regressions when the crypto secret is wrong.
  • Packaging: npm package now ships dual ESM/CJS bundles via tsdown, with an explicit exports map and cleaned type declarations (.d.mts/.d.cts).
  • Types: MongoStore and option hooks are strongly typed to avoid any leaks.
mongodb/node-mongodb-native (mongodb)

v7.1.0

Compare Source

Features
  • NODE-5393: aws4 no longer required for AWS authentication (#​4824) (0f46db8)
  • NODE-7121: prevent connection churn on backpressure errors when establishing connections (#​4800) (4cb2b87)
  • NODE-7122: exponential backoff between retries in convenient transaction API (#​4765) (e70fdc9)
  • NODE-7304: remove usages in src of promisify (#​4799) (761b9bf)
  • NODE-7306: Replace global process with import node:process (#​4820) (cc503cb)
  • NODE-7310: Replace process.arch with os.arch() (#​4823) (f0af829)
  • NODE-7311: Replace process.platform with os.platform() (#​4822) (c58ca1f)
  • NODE-7317: use BSON.NumberUtils to determine endianness (#​4808) (4e9467e)
  • NODE-7319: update allowed hosts list with *.mongo.com (#​4802) (bfb7160)
  • NODE-7330: deprecate RenameCollectionOptions.new_collection (#​4815) (a96fa26)
  • NODE-7333: add support for deprioritized servers to all topologies (#​4821) (a4211e7)
Bug Fixes
  • NODE-7290: use valueof for error code check (#​4791) (1cc3d1c)
  • NODE-7298: ensure commonWireVersion is computed from server maxWireVersion (#​4805) (2b2366d)
  • NODE-7307: Replace node:process.hrtime() with performance.now() (#​4816) (ae2e037)
  • NODE-7308: replace process.nextTick with queueMicrotask (#​4817) (b1b6e81)

v7.0.0

Compare Source

⚠ BREAKING CHANGES
  • NODE-7259: use alphas of all supporting packages (#​4746)
  • NODE-5510: dont filter change stream options (#​4723)
  • NODE-6296: remove cursor default batch size of 1000 (#​4729)
  • NODE-7150: update peer dependency matrix for 3rd party peer deps (#​4720)
  • NODE-7046: remove AWS uri/options support (#​4689)
  • NODE-4808: remove support for stream() transform on cursors and change streams (#​4728)
  • NODE-6377: remove noResponse option (#​4724)
  • NODE-6473: remove MONGODB-CR auth (#​4717)
  • NODE-5994: Remove metadata-related properties from public driver API (#​4716)
  • NODE-7016: remove beta namespace and move resource management into driver (#​4719)
  • NODE-4184: don't throw on aggregate with write concern and explain (#​4718)
  • NODE-7043, NODE-7217: adopt mongodb-client-encryption v7 (#​4705)
  • NODE-6065: throw MongoRuntimeError instead of MissingDependencyError in crypto connection (#​4711)
  • NODE-6584: improve typing for filepaths in AutoEncryptionOptions (#​4341)
  • NODE-6334: rename PoolRequstedRetry to PoolRequestedRetry (#​4696)
  • NODE-7174: drop support for Node16 and Node18 (#​4668)
  • NODE-7047: use custom credential provider first after URI (#​4656)
  • NODE-6988: require aws sdk for aws auth (#​4659)
Features
Bug Fixes
  • NODE-7067: Wrap socket write in a try/catch to ensure errors can be properly wrapped (#​4759) (66c18b7)
  • NODE-7232: only send endSessions during client close if the topology supports sessions (#​4722) (cc85ebf)
  • NODE-7247: clarify #rewrapManyDataKey() parameter types (#​4760) (cb522bf)
  • NODE-7270: remove extra BSONType file in docs/Next/variables (#​4754) (df3aaaa)
Automattic/mongoose (mongoose)

v9.1.6

Compare Source

==================

v9.1.5

Compare Source

==================

v9.1.4

Compare Source

==================

v9.1.3

Compare Source

==================

  • fix(model): support timestamps option to insertMany() as both boolean and QueryTimestampsConfig #​15941 #​15938
  • fix(query): include preview of current and incoming update in error when merging normal update with pipeline #​15939 #​15928
  • types(model): apply basic type casting to paths underneath subdocuments #​15948 #​15947
  • types(utility): make WithLevel1NestedPaths correctly handle PopulatedDoc and other TypeScript unions with Document members #​15942 #​15923
  • docs(schema): expose "DocumentArrayElement" #​15590 hasezoey

v9.1.2

Compare Source

==================

v9.1.1

Compare Source

==================

  • fix(document): avoid 'Cannot mix array and object updates' on doc.updateOne() with pipeline #​15928
  • docs: update default search version to 9.x #​15926 #​15925

v9.1.0

Compare Source

===================

  • feat(model): make pathsToSave handle saving just a subpath of a modified path #​15896
  • feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #​15908 #​15870
  • feat(versioning): optimistic concurrency exclude option, update docs for optimisticConcurrency options #​15917 #​15915 #​15912 AbdelrahmanHafez
  • feat(document): add support for getAtomics() to allow custom container types to utilize atomics #​15817
  • perf: optimize Object.keys() checks and optional chaining #​15865 AbdelrahmanHafez
  • fix: add support for typescript style enums #​15914 #​15913 mjfwebb
  • fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #​15904 #​15901
  • types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #​15918 #​15910
  • types: allow calling create() with TRawDocType for better generics support #​15903 #​15902
  • types(document): add id virtual getter by default to HydrateDocument<> if TOverrides is Record<string, never> #​15906 #​15900
  • docs(schema): add lean to list of schema options #​15907 #​15894 #​12081

v9.0.2

Compare Source

==================

v9.0.1

Compare Source

==================

v9.0.0

Compare Source

==================

  • BREAKING CHANGE: drop support for callback-based pre middleware, e.g. next() in pre() hooks
  • BREAKING CHANGE: update to MongoDB Node driver v7
  • BREAKING CHANGE: make UUID schema type return bson UUIDs #​15378
  • BREAKING CHANGE: make findOne(null), find(null), etc. throw an error instead of returning first doc #​15019 #​14948
  • BREAKING CHANGE: disallow update pipelines by default, require updatePipeline option #​15586 #​14424
  • BREAKING CHANGE: call virtual ref function with subdoc, not top-level doc #​14652 #​12440 #​12363
  • BREAKING CHANGE(types): make create() and insertOne() params more strict, remove generics to prevent type inference #​15587 #​15355
  • BREAKING CHANGE(types): make FilterQuery properties no longer resolve to any in TypeScript #​15422
  • BREAKING CHANGE(types): change this to HydratedDocument for default() and required(), HydratedDocument | Query for validate() #​15020 #​14696
  • BREAKING CHANGE(types): make id a virtual in TypeScript rather than a property on Document base class #​15572 #​13079
  • BREAKING CHANGE(types): consolidate RootQuerySelector, Condition, etc. types with MongoDB driver's #​15593
  • BREAKING CHANGE: asyncify update validators, SchemaType.prototype.doValidate(), save hooks for improved stack traces #​15312
  • BREAKING CHANGE: remove bson as direct dependency, use mongodb/lib/bson instead #​15576 #​15154
  • BREAKING CHANGE: remove _executionStack, make validate() async function and call Kareem hooks directly vs through wrappers #​15298 #​14906
  • BREAKING CHANGE: remove browser build, move to @​mongoosejs/browser instead #​15385 #​15296
  • BREAKING CHANGE: remove schematype caster and casterConstructor properties in favor of embeddedSchemaType and Constructor #​15513 #​15179
  • BREAKING CHANGE: adding missing pluralizations, fixing pluralization: virus -> viruses #​14247 ItsBradyDavis
  • BREAKING CHANGE: remove connection noListener option #​15641 #​15640
  • feat(types): add Schema.create() for TypeScript type inference #​15482 #​14954
  • chore: remove examples directory #​15597

v8.22.1

Compare Source

==================

  • fix: handle other top-level query operators in sanitizeFilter
  • fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #​15904 #​15901
  • types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #​15910
  • types: add toBSON() to documents #​15927

v8.22.0

Compare Source

===================

v8.21.1

Compare Source

===================

  • fix(clone): fix parent doc for map subdocuments and array subdocuments #​15958 AbdelrahmanHafez
  • fix(document): when cloning a doc with subdocs, make sure the subdocs parent is the cloned doc #​15904 #​15901
  • fix: respect currentTime schema option in bulkWrite updates #​15976 sderrow
  • types(models): support Mongoose query casting in AnyBulkWriteOperation filter property #​15910
  • types: add toBSON() to documents #​15927

v8.21.0

Compare Source

===================

  • feat(document+model): pass options to pre('deleteOne') and update+options to pre('updateOne') hooks #​15908 #​15870
  • feat(document): add support for getAtomics() to allow custom container types to utilize atomics #​15817
  • fix: add support for typescript style enums #​15914 #​15913 mjfwebb

v8.20.4

Compare Source

===================

v8.20.3

Compare Source

===================

  • perf: use Object.hasOwn instead of Object#hasOwnProperty #​15875 AbdelrahmanHafez
  • fix: improve error when calling Document.prototype.init() with null/undefined #​15812 Vegapunk-debug
  • types(schema): avoid treating paths with default: null as required #​15889
  • types(schema): allow partial statics to schema.statics() #​15780

v8.20.2

Compare Source

===================

v8.20.1

Compare Source

===================

v8.20.0

Compare Source

===================

v8.19.4

Compare Source

===================

v8.19.3

Compare Source

===================

  • fix(model+plugins): correctly apply shard key on deleteOne() #​15705 #​15701
  • fix(schema): correctly cache text indexes as 'text' not 1 #​15695
  • types: make inferRawDocType correctly infer empty array type [] as any[] #​15704 #​15699

v8.19.2

Compare Source

===================

  • perf(setDefaultsOnInsert): avoid computing all modified paths when running setDefaultsOnInsert and update validators, only calculate if there are defaults to set #​15691 #​15672
  • fix: correct handling of relative vs absolute paths with maps and subdocuments #​15682 #​15678 #​15350
  • ci: add publish script with provenance #​15684 #​15680

v8.19.1

Compare Source

===================

  • perf: avoid getting all modified paths in update when checking if versionKey needs to be set #​15677 #​15672
  • perf: Avoid needless path translation #​15679 orgads
  • fix(query): throw error if using update operator with modifier and no path #​15670 #​15642
  • types: avoid making FilterQuery a conditional type because of how typescript handles distributed conditional unions #​15676 #​15671
  • docs: update installation instructions #​15675 aalok-y

v8.19.0

Compare Source

===================

v8.18.3

Compare Source

===================

v8.18.2

Compare Source

===================

  • fix(document): prevent $clone() from converting mongoose arrays into vanilla arrays #​15633 #​15625
  • fix(connection): use correct collection name for model when using useConnection() #​15637
  • fix(connection): propagate changes to _lastHeartbeatAt to useDb() child connections #​15640 #​15635
  • types: fix schema property type definition in SchemaType #​15631

v8.18.1

Compare Source

===================

  • types: correct type inference for maps of maps #​15602
  • types(model): copy base model statics onto discriminator model #​15623 #​15600
  • types: fix types for a string of enums #​15605 ruiaraujo
  • types(SchemaOptions): disallow versionKey: true, which fails at runtime #​15606
  • docs(typescript): add example explaining how to use query helper overrides for handling lean() #​15622 #​15601
  • docs(transactions): add note about nested transactions #​15624

v8.18.0

Compare Source

===================

  • feat(schema): support for union types #​15574 #​10894
  • fix: trim long strings in minLength and maxLength error messages and display the string length #​15571 #​15550
  • types(connection+collection): make BaseCollection and BaseConnection usable as values #​15575 #​15548
  • types: remove logic that omits timestamps when virtuals, methods, etc. options set #​15577 #​12807

v8.17.2

Compare Source

===================

  • fix: avoid Model.validate() hanging when all paths fail casting #​15580 #​15579 piotracalski
  • types(document): better support for flattenObjectIds and versionKey options for toObject() and toJSON() #​15582 #​15578
  • docs: fix docs jsdoc tags and add UUID to be listed #​15585
  • docs(document): fix code sample that errors with "Cannot set properties of undefined" #​15589

v8.17.1

Compare Source

===================

v8.17.0

Compare Source

===================


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@ggrossetie
Copy link
Collaborator Author

ggrossetie commented Nov 27, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: graphql/package-lock.json
npm warn Unknown env config "store". This will stop working in the next major version of npm.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: @ggrossetie/db-migrate-mongodb@2.0.0-beta.15
npm error Found: mongodb@7.1.0
npm error node_modules/mongodb
npm error   mongodb@"~7.1.0" from the root project
npm error   peer mongodb@">=5.0.0" from connect-mongo@6.0.0
npm error   node_modules/connect-mongo
npm error     connect-mongo@"^6.0.0" from the root project
npm error
npm error Could not resolve dependency:
npm error peer mongodb@">= 5.1.0 < 7" from @ggrossetie/db-migrate-mongodb@2.0.0-beta.15
npm error node_modules/@ggrossetie/db-migrate-mongodb
npm error   @ggrossetie/db-migrate-mongodb@"2.0.0-beta.15" from the root project
npm error
npm error Conflicting peer dependency: mongodb@6.21.0
npm error node_modules/mongodb
npm error   peer mongodb@">= 5.1.0 < 7" from @ggrossetie/db-migrate-mongodb@2.0.0-beta.15
npm error   node_modules/@ggrossetie/db-migrate-mongodb
npm error     @ggrossetie/db-migrate-mongodb@"2.0.0-beta.15" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /tmp/renovate/cache/others/npm/_logs/2026-02-06T09_17_56_666Z-eresolve-report.txt
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2026-02-06T09_17_56_666Z-debug-0.log

@netlify
Copy link

netlify bot commented Nov 27, 2025

Deploy Preview for stylo-docs canceled.

Name Link
🔨 Latest commit 3335b64
🔍 Latest deploy log https://app.netlify.com/projects/stylo-docs/deploys/6985b1cb78ee0f0009094576

@ggrossetie ggrossetie force-pushed the renovate/major-backend-dependencies-related-to-mongodb branch 3 times, most recently from 5cad052 to a0b5e95 Compare December 1, 2025 02:57
@ggrossetie ggrossetie force-pushed the renovate/major-backend-dependencies-related-to-mongodb branch 2 times, most recently from 78bcdef to b4c5d04 Compare January 5, 2026 09:51
@ggrossetie ggrossetie force-pushed the renovate/major-backend-dependencies-related-to-mongodb branch 3 times, most recently from cf8aaa7 to 00afc04 Compare February 6, 2026 03:09
@ggrossetie ggrossetie force-pushed the renovate/major-backend-dependencies-related-to-mongodb branch from 00afc04 to 3335b64 Compare February 6, 2026 09:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant