langfuse-python icon indicating copy to clipboard operation
langfuse-python copied to clipboard

chore(deps-dev): bump pymongo from 4.7.3 to 4.12.1

Open dependabot[bot] opened this issue 10 months ago • 0 comments

Bumps pymongo from 4.7.3 to 4.12.1.

Release notes

Sourced from pymongo's releases.

PyMongo 4.12.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-12-1-released/320326

What's Changed

Full Changelog: https://github.com/mongodb/mongo-python-driver/compare/4.12.0...4.12.1

PyMongo 4.12.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-12-released/318187

PyMongo 4.11.3

What's Changed

New Contributors

Full Changelog: https://github.com/mongodb/mongo-python-driver/compare/4.11.2...4.11.3

PyMongo 4.11.2

Community notes:

What's Changed

Full Changelog: https://github.com/mongodb/mongo-python-driver/compare/4.11.1...4.11.2

PyMongo 4.11.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-11-1-released/312193

PyMongo 4.11.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-11-released/310976

... (truncated)

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.12.1 (2025/04/29)

Version 4.12.1 is a bug fix release.

  • Fixed a bug that could raise UnboundLocalError when creating asynchronous connections over SSL.
  • Fixed a bug causing SRV hostname validation to fail when resolver and resolved hostnames are identical with three domain levels.
  • Fixed a bug that caused direct use of pymongo.uri_parser to raise an AttributeError.
  • Fixed a bug where clients created with connect=False and a "mongodb+srv://" connection string could cause public pymongo.MongoClient and pymongo.AsyncMongoClient attributes (topology_description, nodes, address, primary, secondaries, arbiters) to incorrectly return a Database, leading to type errors such as: "NotImplementedError: Database objects do not implement truth value testing or bool()".
  • Removed Eventlet testing against Python versions newer than 3.9 since Eventlet is actively being sunset by its maintainers and has compatibility issues with PyMongo's dnspython dependency.
  • Fixed a bug where MongoDB cluster topology changes could cause asynchronous operations to take much longer to complete due to holding the Topology lock while closing stale connections.
  • Fixed a bug that would cause AsyncMongoClient to attempt to use PyOpenSSL when available, resulting in errors such as "pymongo.errors.ServerSelectionTimeoutError: 'SSLContext' object has no attribute 'wrap_bio'".

Issues Resolved ...............

See the PyMongo 4.12.1 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.12.1 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=43094

Changes in Version 4.12.0 (2025/04/08)

.. warning:: Driver support for MongoDB 4.0 reached end of life in April 2025. PyMongo 4.12 will be the last release to support MongoDB 4.0.

PyMongo 4.12 brings a number of changes including:

  • Support for configuring DEK cache lifetime via the key_expiration_ms argument to :class:~pymongo.encryption_options.AutoEncryptionOpts.
  • Support for $lookup in CSFLE and QE supported on MongoDB 8.1+.
  • pymongocrypt>=1.13 is now required for :ref:In-Use Encryption support.
  • Added :meth:gridfs.asynchronous.grid_file.AsyncGridFSBucket.rename_by_name and :meth:gridfs.grid_file.GridFSBucket.rename_by_name for more performant renaming of a file with multiple revisions.
  • Added :meth:gridfs.asynchronous.grid_file.AsyncGridFSBucket.delete_by_name and :meth:gridfs.grid_file.GridFSBucket.delete_by_name for more performant deletion of a file with multiple revisions.
  • AsyncMongoClient no longer performs DNS resolution for "mongodb+srv://" connection strings on creation. To avoid blocking the asyncio loop, the resolution is now deferred until the client is first connected.
  • Added index hinting support to the :meth:~pymongo.asynchronous.collection.AsyncCollection.distinct and :meth:~pymongo.collection.Collection.distinct commands.
  • Deprecated the hedge parameter for :class:~pymongo.read_preferences.PrimaryPreferred,

... (truncated)

Commits
  • 84d0d3d BUMP 4.12.1
  • c52a456 PYTHON-5357 Update changelog for 4.12.1 release (#2321) (#2323)
  • dd99f80 PYTHON-5309: [v4.12] AsyncMongoClient doesn't use PyOpenSSL (#2286) (#2319)
  • fecd29c PYTHON-5336 Added VECTOR_SUBTYPE line to API docs (#2313) [v4.12] (#2314)
  • c11d0f4 PYTHON-5306: [v4.12] - Fix use of public MongoClient attributes before connec...
  • f5836b3 PYTHON-5346: [v4.12] test_init_disconnected_with_srv cannot run against shard...
  • 38bc13d PYTHON-5212 [v4.12] Do not hold Topology lock while resetting pool (#2307)
  • c6671e2 PYTHON-5348 Fix CodeQL Scanning for GitHub Actions (#2308) [v4.12] (#2310)
  • 79cb34a PYTHON-5314 [v4.12] Fix default imports for modules that worked in v4.8 (#230...
  • c837846 PYTHON-5310 [v4.12] Fix uri_parser AttributeError when used directly (#2283) ...
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Greptile Summary

Disclaimer: Experimental PR review

Updates pymongo development dependency from 4.7.3 to 4.12.1, bringing several bug fixes and improvements to MongoDB driver functionality.

  • Fixed AsyncMongoClient SSL connection issues that could raise UnboundLocalError
  • Fixed SRV hostname validation failures with three domain levels
  • Fixed performance issues with MongoDB cluster topology changes due to Topology lock handling
  • Fixed AsyncMongoClient incorrectly attempting to use PyOpenSSL
  • Added support for configuring DEK cache lifetime and $lookup in CSFLE/QE for MongoDB 8.1+

dependabot[bot] avatar Apr 30 '25 06:04 dependabot[bot]