chore(deps): bump the minor-updates group with 3 updates

[dependabot]

Bumps the minor-updates group with 3 updates: mongodb, sass and stripe.

Updates mongodb from 6.18.0 to 6.19.0

Release notes

Sourced from mongodb's releases.

v6.19.0

6.19.0 (2025-08-26)

The MongoDB Node.js team is pleased to announce version 6.19.0 of the mongodb package!

Release Notes

Experimental Support for Queryable Encryption Text Field Prefix, Suffix and Substring Queries

[!IMPORTANT] Substring, prefix and suffix search are in preview and should be used for experimental workloads only. These features are unstable and their security is not guaranteed until released as Generally Available (GA). The GA version of these features may not be backwards compatible with the preview version.

When using Queryable Encryption with both automatic encryption and explicit encryption, text fields can now be queried using prefix, suffix and substring queries. This feature requires mongodb-client-encryption@>=6.5.0.

Allow a secureContext for Auto Encryption and Client Encryption TLS options

This can be provided in the tlsOptions option both both objects.

import * as tls from 'tls';
import { ClientEncryption, MongoClient } from 'mongodb';
const caFile = await fs.readFile(process.env.CSFLE_TLS_CA_FILE);
const certFile = await fs.readFile(process.env.CSFLE_TLS_CLIENT_CERT_FILE);
const secureContextOptions = {
ca: caFile,
key: certFile,
cert: certFile
};
const options = {
keyVaultNamespace: 'db.coll',
kmsProviders: {
aws: {}
}
},
tlsOptions: {
aws: {
secureContext: tls.createSecureContext(secureContextOptions),
}
}
};
const client = this.configuration.newClient({}, { autoEncryption: { ...options, schemaMap } });
const clientEncryption = new ClientEncryption(client, options);

collection.findOne() and collection.find() will no longer potentially leave open cursors on the server

The findOne command will now always set the limit option to 1 and singleBatch to true. The limit, noCursorResponse and batchSize options have also been deprecated, and the command will guarantee no more cursors can be orphaned and no killCursors command will be potentially executed.

... (truncated)

Changelog

Sourced from mongodb's changelog.

6.19.0 (2025-08-26)

Features

• NODE-4179: allow secureContext in KMS TLS options (#4578) (0ea6eaa)
• NODE-6472: findOne and find no longer keep open cursors (#4580) (be7f808)
• NODE-7020: remove ping on connect (#4607) (3d296b7)
• NODE-7059, NODE-7008: add support for text queries for QE string fields (#4597) (e4492f3)

Commits

• 56b70f8 chore(main): release 6.19.0 (#4593)
• 9832b5e chore: Update dependabot.yml to allow prod dependencies (#4628)
• 46ea299 test(NODE-7118): fix CSOT socket read failure test on latest servers (#4627)
• 66706f8 chore(deps-dev): bump the development-dependencies group across 1 directory w...
• 9261717 refactor(NODE-7087): remove ModernizedOperation and ModernizedCommandOperatio...
• 0aac1fb refactor(NODE-7086): refactor misc operations (#4613)
• 48c3376 chore(deps): bump drivers-evergreen-tools from 61eacf1 to 9da8ebc (#4625)
• c2166a5 chore(deps): bump drivers-evergreen-tools from a332144 to 61eacf1 (#4620)
• b717a5d test: skip breaking csot test on latest (#4624)
• 1ea3a41 test(NODE-7110): update csot tests for drop index (#4621)
• Additional commits viewable in compare view

Updates sass from 1.90.0 to 1.91.0

Release notes

Sourced from sass's releases.

Dart Sass 1.91.0

To install Sass 1.91.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Potentially breaking change: meta.inspect() (as well as other systems that use it such as @debug and certain error messages) now emits numbers with as high precision as is available instead of rounding to the nearest 1e⁻¹⁰ as we do when serializing to CSS. This better fits the purpose of meta.inspect(), which is to provide full information about the structure of a Sass value.

• Passing a rest argument ($arg...) before a positional or named argument when calling a function or mixin is now deprecated. This was always outside the specified syntax, but it was historically treated the same as passing the rest argument at the end of the argument list whether or not that matched the visual order of the arguments.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.91.0

• Potentially breaking change: meta.inspect() (as well as other systems that use it such as @debug and certain error messages) now emits numbers with as high precision as is available instead of rounding to the nearest 1e⁻¹⁰ as we do when serializing to CSS. This better fits the purpose of meta.inspect(), which is to provide full information about the structure of a Sass value.

• Passing a rest argument ($arg...) before a positional or named argument when calling a function or mixin is now deprecated. This was always outside the specified syntax, but it was historically treated the same as passing the rest argument at the end of the argument list whether or not that matched the visual order of the arguments.

Commits

• 6878709 Deprecate misplaced rest arguments (#2623)
• 6607204 Use official dart riscv64 docker image (#2619)
• 1df71a5 Print non-integer number at full precision in inspect mode (#2615)
• e0b2a50 Bump actions/checkout from 4 to 5 (#2620)
• e55398a Bump actions/checkout from 4 to 5 in /.github/util/initialize (#2621)
• 8f1c24a Bump expect from 29.7.0 to 30.0.5 in /pkg/sass-parser (#2611)
• See full diff in compare view

Updates stripe from 18.4.0 to 18.5.0

Release notes

Sourced from stripe's releases.

v18.5.0

• #2392 Add section on private preview SDKs in readme
• #2384 Update generated code. This release changes the pinned API version to 2025-08-27.basil.
  • Add support for balance_report, payout_details, and payout_reconciliation_report on AccountSession.components and AccountSessionCreateParams.components
  • Add support for name on BillingPortal.ConfigurationCreateParams, BillingPortal.ConfigurationUpdateParams, and BillingPortal.Configuration
  • Add support for installments on Charge.payment_method_details.alma
  • Add support for transaction_id on Charge.payment_method_details.alma, Charge.payment_method_details.amazon_pay, Charge.payment_method_details.billie, Charge.payment_method_details.kakao_pay, Charge.payment_method_details.kr_card, Charge.payment_method_details.naver_pay, Charge.payment_method_details.payco, Charge.payment_method_details.revolut_pay, Charge.payment_method_details.samsung_pay, and Charge.payment_method_details.satispay
  • Add support for location and reader on Charge.payment_method_details.paynow
  • Add support for amount_includes_iof on Checkout.Session.payment_method_options.pix, Checkout.SessionCreateParams.payment_method_options.pix, PaymentIntent.payment_method_options.pix, PaymentIntentConfirmParams.payment_method_options.pix, PaymentIntentCreateParams.payment_method_options.pix, and PaymentIntentUpdateParams.payment_method_options.pix
  • Add support for new values block and resolution on enum Dispute.payment_method_details.card.case_type
  • Add support for new value terminal_android_apk on enums File.purpose and FileListParams.purpose
  • Add support for new value terminal_android_apk on enum FileCreateParams.purpose
  • Add support for metadata and period on InvoiceCreatePreviewParams.schedule_details.phases[].add_invoice_items[], SubscriptionCreateParams.add_invoice_items[], SubscriptionSchedule.phases[].add_invoice_items[], SubscriptionScheduleCreateParams.phases[].add_invoice_items[], SubscriptionScheduleUpdateParams.phases[].add_invoice_items[], and SubscriptionUpdateParams.add_invoice_items[]
  • Add support for exp_month and exp_year on Issuing.CardCreateParams
  • Add support for excluded_payment_method_types on PaymentIntentCreateParams and PaymentIntent
  • Add support for payout_method on PayoutCreateParams and Payout
  • Add support for mxn on Terminal.Configuration.tipping, Terminal.ConfigurationCreateParams.tipping, and Terminal.ConfigurationUpdateParams.tipping
  • Add support for card on Terminal.ReaderPresentPaymentMethodParams.testHelpers
  • Add support for new value card on enum Terminal.ReaderPresentPaymentMethodParams.testHelpers.type
  • Add support for new value 2025-08-27.basil on enum WebhookEndpointCreateParams.api_version
  • Add support for error codes customer_session_expired and india_recurring_payment_mandate_canceled on Invoice.last_finalization_error, PaymentIntent.last_payment_error, SetupAttempt.setup_error, SetupIntent.last_setup_error, and StripeError
• #2389 fix(example): expires_at is in milliseconds

See the changelog for more details.

v18.5.0-beta.2

• #2383 Bring back GA invoice payments APIs that were missing in the public preview SDKs
  • Add support for new resource InvoicePayment
  • Add support for list and retrieve methods on resource InvoicePayment

See the changelog for more details.

v18.5.0-beta.1

This release changes the pinned API version to 2025-07-30.preview.

• #2363 Update generated code for beta
  • Add support for new resources Billing.MeterUsageRow, Billing.MeterUsage, and Terminal.OnboardingLink
  • Add support for retrieve method on resource Billing.MeterUsage
  • Add support for create method on resource Terminal.OnboardingLink
  • Add support for monthly_payout_days and weekly_payout_days on BalanceSettingUpdateParams.payouts.schedule and BalanceSettings.payouts.schedule
  • Remove support for monthly_anchor and weekly_anchor on BalanceSettingUpdateParams.payouts.schedule and BalanceSettings.payouts.schedule
  • Add support for delay_days_override on BalanceSettingUpdateParams.settlement_timing
  • Remove support for delay_days on BalanceSettingUpdateParams.settlement_timing
  • Add support for update_discounts on Checkout.SessionCreateParams.permissions
  • Add support for discounts and subscription_data on Checkout.SessionUpdateParams
  • Add support for smart_disputes on Dispute
  • Add support for upi on Invoice.payment_settings.payment_method_options, InvoiceCreateParams.payment_settings.payment_method_options, InvoiceUpdateParams.payment_settings.payment_method_options, QuotePreviewInvoice.payment_settings.payment_method_options, Subscription.payment_settings.payment_method_options, SubscriptionCreateParams.payment_settings.payment_method_options, and SubscriptionUpdateParams.payment_settings.payment_method_options
  • Add support for new value upi on enums Invoice.payment_settings.payment_method_types, InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, QuotePreviewInvoice.payment_settings.payment_method_types, Subscription.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types
  • Add support for transaction_id on PaymentAttemptRecord.payment_method_details.cashapp and PaymentRecord.payment_method_details.cashapp
  • Add support for amount_details on PaymentIntentCaptureParams, PaymentIntentConfirmParams, PaymentIntentCreateParams, PaymentIntentIncrementAuthorizationParams, and PaymentIntentUpdateParams

... (truncated)

Changelog

Sourced from stripe's changelog.

18.5.0 - 2025-08-27

• #2392 Add section on private preview SDKs in readme
• #2384 Update generated code. This release changes the pinned API version to 2025-08-27.basil.
  • Add support for balance_report, payout_details, and payout_reconciliation_report on AccountSession.components and AccountSessionCreateParams.components
  • Add support for name on BillingPortal.ConfigurationCreateParams, BillingPortal.ConfigurationUpdateParams, and BillingPortal.Configuration
  • Add support for installments on Charge.payment_method_details.alma
  • Add support for transaction_id on Charge.payment_method_details.alma, Charge.payment_method_details.amazon_pay, Charge.payment_method_details.billie, Charge.payment_method_details.kakao_pay, Charge.payment_method_details.kr_card, Charge.payment_method_details.naver_pay, Charge.payment_method_details.payco, Charge.payment_method_details.revolut_pay, Charge.payment_method_details.samsung_pay, and Charge.payment_method_details.satispay
  • Add support for location and reader on Charge.payment_method_details.paynow
  • Add support for amount_includes_iof on Checkout.Session.payment_method_options.pix, Checkout.SessionCreateParams.payment_method_options.pix, PaymentIntent.payment_method_options.pix, PaymentIntentConfirmParams.payment_method_options.pix, PaymentIntentCreateParams.payment_method_options.pix, and PaymentIntentUpdateParams.payment_method_options.pix
  • Add support for new values block and resolution on enum Dispute.payment_method_details.card.case_type
  • Add support for new value terminal_android_apk on enums File.purpose and FileListParams.purpose
  • Add support for new value terminal_android_apk on enum FileCreateParams.purpose
  • Add support for metadata and period on InvoiceCreatePreviewParams.schedule_details.phases[].add_invoice_items[], SubscriptionCreateParams.add_invoice_items[], SubscriptionSchedule.phases[].add_invoice_items[], SubscriptionScheduleCreateParams.phases[].add_invoice_items[], SubscriptionScheduleUpdateParams.phases[].add_invoice_items[], and SubscriptionUpdateParams.add_invoice_items[]
  • Add support for exp_month and exp_year on Issuing.CardCreateParams
  • Add support for excluded_payment_method_types on PaymentIntentCreateParams and PaymentIntent
  • Add support for payout_method on PayoutCreateParams and Payout
  • Add support for mxn on Terminal.Configuration.tipping, Terminal.ConfigurationCreateParams.tipping, and Terminal.ConfigurationUpdateParams.tipping
  • Add support for card on Terminal.ReaderPresentPaymentMethodParams.testHelpers
  • Add support for new value card on enum Terminal.ReaderPresentPaymentMethodParams.testHelpers.type
  • Add support for new value 2025-08-27.basil on enum WebhookEndpointCreateParams.api_version
  • Add support for error codes customer_session_expired and india_recurring_payment_mandate_canceled on Invoice.last_finalization_error, PaymentIntent.last_payment_error, SetupAttempt.setup_error, SetupIntent.last_setup_error, and StripeError
• #2389 fix(example): expires_at is in milliseconds

Commits

• 33519ee Bump version to 18.5.0
• 8b288f2 Add section on private preview SDKs in readme (#2392)
• 6d6f53c Update generated code (#2384)
• d21cdd1 fix(example): expires_at is in milliseconds (#2389)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions