Skip to content

fix(deps): update npm to v7 - - package.json (major)#904

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-7-npm
Open

fix(deps): update npm to v7 - - package.json (major)#904
renovate[bot] wants to merge 1 commit intomainfrom
renovate/major-7-npm

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Feb 11, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@types/supertest (source) ^6.0.3 → ^7.2.0 age confidence
mongodb ^5.9.2 → ^7.1.1 age confidence
react-router-dom (source) 6.30.3 → 7.14.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

mongodb/node-mongodb-native (mongodb)

v7.1.1

Compare Source

The MongoDB Node.js team is pleased to announce version 7.1.1 of the mongodb package!

Release Notes

Tighten OIDC ALLOWED_HOSTS wildcard matching

The OIDC ALLOWED_HOSTS wildcard handling has been fixed to require full subdomain/path matches for *. and */ entries, preventing partial suffix matches from being incorrectly accepted.

Fixed TCP keep-alive and no-delay settings not being applied on TLS connections

Due to a Node.js bug, tls.connect() silently ignores keepAlive, keepAliveInitialDelay, and noDelay options passed through its constructor. This could cause idle connections - particularly through cloud load balancers like Azure (240s idle timeout) or AWS PrivateLink/NLB - to be dropped unexpectedly due to missing TCP keep-alive probes.

The driver now explicitly calls setKeepAlive() and setNoDelay() on the socket after creation, ensuring these settings are always applied regardless of whether TLS is used.

Bug Fixes

Documentation

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

v7.1.0

Compare Source

Features
  • NODE-5393: aws4 no longer required for AWS authentication (#​4824) (0f46db8)
  • NODE-7121: prevent connection churn on backpressure errors when establishing connections (#​4800) (4cb2b87)
  • NODE-7122: exponential backoff between retries in convenient transaction API (#​4765) (e70fdc9)
  • NODE-7304: remove usages in src of promisify (#​4799) (761b9bf)
  • NODE-7306: Replace global process with import node:process (#​4820) (cc503cb)
  • NODE-7310: Replace process.arch with os.arch() (#​4823) (f0af829)
  • NODE-7311: Replace process.platform with os.platform() (#​4822) (c58ca1f)
  • NODE-7317: use BSON.NumberUtils to determine endianness (#​4808) (4e9467e)
  • NODE-7319: update allowed hosts list with *.mongo.com (#​4802) (bfb7160)
  • NODE-7330: deprecate RenameCollectionOptions.new_collection (#​4815) (a96fa26)
  • NODE-7333: add support for deprioritized servers to all topologies (#​4821) (a4211e7)
Bug Fixes
  • NODE-7290: use valueof for error code check (#​4791) (1cc3d1c)
  • NODE-7298: ensure commonWireVersion is computed from server maxWireVersion (#​4805) (2b2366d)
  • NODE-7307: Replace node:process.hrtime() with performance.now() (#​4816) (ae2e037)
  • NODE-7308: replace process.nextTick with queueMicrotask (#​4817) (b1b6e81)

v7.0.0

Compare Source

⚠ BREAKING CHANGES
  • NODE-7259: use alphas of all supporting packages (#​4746)
  • NODE-5510: dont filter change stream options (#​4723)
  • NODE-6296: remove cursor default batch size of 1000 (#​4729)
  • NODE-7150: update peer dependency matrix for 3rd party peer deps (#​4720)
  • NODE-7046: remove AWS uri/options support (#​4689)
  • NODE-4808: remove support for stream() transform on cursors and change streams (#​4728)
  • NODE-6377: remove noResponse option (#​4724)
  • NODE-6473: remove MONGODB-CR auth (#​4717)
  • NODE-5994: Remove metadata-related properties from public driver API (#​4716)
  • NODE-7016: remove beta namespace and move resource management into driver (#​4719)
  • NODE-4184: don't throw on aggregate with write concern and explain (#​4718)
  • NODE-7043, NODE-7217: adopt mongodb-client-encryption v7 (#​4705)
  • NODE-6065: throw MongoRuntimeError instead of MissingDependencyError in crypto connection (#​4711)
  • NODE-6584: improve typing for filepaths in AutoEncryptionOptions (#​4341)
  • NODE-6334: rename PoolRequstedRetry to PoolRequestedRetry (#​4696)
  • NODE-7174: drop support for Node16 and Node18 (#​4668)
  • NODE-7047: use custom credential provider first after URI (#​4656)
  • NODE-6988: require aws sdk for aws auth (#​4659)
Features
Bug Fixes
  • NODE-7067: Wrap socket write in a try/catch to ensure errors can be properly wrapped (#​4759) (66c18b7)
  • NODE-7232: only send endSessions during client close if the topology supports sessions (#​4722) (cc85ebf)
  • NODE-7247: clarify #rewrapManyDataKey() parameter types (#​4760) (cb522bf)
  • NODE-7270: remove extra BSONType file in docs/Next/variables (#​4754) (df3aaaa)

v6.21.0

Compare Source

The MongoDB Node.js team is pleased to announce version 6.21.0 of the mongodb package!

Release Notes
Deprecated items to be removed in 7.0.0

The following items have been deprecated and will be removed in 7.0.0:

MongoCredentials.authMechanismProperties.AWS_SESSION_TOKEN // URI & client options for AWS variables will no longer be respected
CommandOptions.noResponse // Unused
ConnectionOptions.cancellationToken // Unused
CursorStreamOptions // Only option, transform, removed in favor of Stream#map
Features
  • NODE-7230: add deprecations of items to be removed in v7 (#​4774) (5104c0f)
Documentation

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

v6.20.0

Compare Source

Features
  • NODE-6883: allow rawData option on time series collections (#​4642) (0fa3cd4)
  • NODE-7125: add db and client properties to collection and database objects (#​4640) (3469f86)
  • NODE-7134: allow hint with unacknowledged writes for delete, update and findAndModify commands (#​4647) (82d6ce6)
  • NODE-7139: remove pre-4.2 logic and deprecate dead code (#​4657) (14303bc)
  • NODE-7140: deprecate driver info options (#​4654) (b813c85)
  • NODE-7157: deprecate retryWrites in CommandOperationOptions (#​4661) (620972d)
Bug Fixes
  • NODE-4763: cache resumeToken in ChangeStream.tryNext() (#​4636) (8331a93)
  • NODE-6858: treat MongoServerSelectionError as a resumable error for Change Streams (#​4653) (c6d64e7)
  • NODE-7138: prevent duplicate metadata from being appended to handshake metadata (#​4651) (05c230c)

v6.19.0

Compare Source

Features

v6.18.0

Compare Source

Features
Bug Fixes
  • NODE-4845: allocate sessions lazily in cursors (#​4575) (5761703)
  • NODE-6589: background task does not prune idle connections when minPoolSize=0 (#​4569) (7cbb641)
  • NODE-6955: add missing wallTime property TS change stream event interfaces (#​4541) (f153c6f)

v6.17.0

Compare Source

Features
Bug Fixes
  • NODE-6638: throw if all atomic updates are undefined (#​4519) (9625b2d)
  • NODE-6864: socket errors are not always converted to MongoNetworkErrors (#​4473) (2d86095)
  • NODE-6962: OIDC machine workflows use OIDCCallbacks internally (#​4546) (bd6030f)

v6.16.0

Compare Source

Features
Bug Fixes
  • NODE-6630: read all messages in buffer when chunk arrives (#​4512) (8c86e30)
  • NODE-6878: documents.clear() throws a TypeError after cursor is rewound (#​4488) (a1fffeb)

v6.15.0

Compare Source

Features
Bug Fixes

v6.14.2

Compare Source

Bug Fixes
  • NODE-6803: kms proxy socket creates unhandled rejection (#​4444) (ed69cf9)

v6.14.1

Compare Source

Bug Fixes

v6.14.0

Compare Source

Features
  • NODE-6676: add support for nsType in change stream create events (#​4431) (7800067)
  • NODE-6773: add support for $lookup with automatic encryption (#​4427) (965b21a)
Bug Fixes
  • NODE-6765: FindOneAndUpdateOptions supports aggregation expressions (#​4423) (421ddeb)
  • NODE-6792: use isUint8Array from driver's utils instead of util/types (#​4436) (dfe1fba)
  • NODE-6794: revert @aws-sdk/credential-providers peer compatibility change (#​4437) (488c407)

v6.13.1

Compare Source

Bug Fixes
  • NODE-6407: use conversationId returned from server in saslContinue (#​4368) (fbefa6b)
  • NODE-6613: Update error messages when primaries go stale (#​4397) (6528c8d)
  • NODE-6690: Remove extraneous Document in replaceOne return type (#​4383) (6c81d4e)
  • NODE-6763: pass WriteConcernOptions instead on WriteConcernSettings (#​4421) (26f15d7)
  • NODE-6777: update BSON to 6.10.3 (#​4428) (db5b9e0)

v6.13.0

Compare Source

Features
Bug Fixes
  • NODE-5225: concurrent MongoClient.close() calls each attempt to close the client (#​4376) (9419af7)
  • NODE-6340: OIDC reauth uses caches speculative auth result (#​4379) (8b2b7fd)
Performance Improvements
  • NODE-6452: Optimize CommandStartedEvent and CommandSucceededEvent constructors (#​4371) (41b066b)
  • NODE-6616: shortcircuit logging ejson.stringify (#​4377) (c1bcf0d)

v6.12.0

Compare Source

Features
Bug Fixes
  • NODE-6583: upgrade to BSON v6.10.1 to remove internal unbounded type cache (#​4338) (249c279)
  • NODE-6600: set object mode correctly for message chunking in SizedMessageTransform (#​4345) (5558573)
  • NODE-6602: only wrap errors from SOCKS in network errors (#​4347) (ed83f36)

v6.11.0

Compare Source

Features
Bug Fixes
  • NODE-6374: MongoOperationTimeoutError inherits MongoRuntimeError (#​4237) (9fb896a)
  • NODE-6412: read stale response from previously timed out connection (#​4273) (fd8f3bd)
  • NODE-6454: use timeoutcontext for state machine execute() cursor options (#​4291) (5dd8ee5)
  • NODE-6469: pool is cleared before connection checkin on error (#​4296) (06a2e2c)
  • NODE-6523: deleteMany in gridfs passes timeoutMS to predicate, not options (#​4319) (1965ed5)
Performance Improvements
  • NODE-6525: remove setPrototype and defineProperty from hot path (#​4321) (48ed47e)

v6.10.0

Compare Source

Features
Bug Fixes
  • NODE-6374: MongoOperationTimeoutError inherits MongoRuntimeError (#​4237) (9fb896a)
  • NODE-6412: read stale response from previously timed out connection (#​4273) (fd8f3bd)
  • NODE-6454: use timeoutcontext for state machine execute() cursor options (#​4291) (5dd8ee5)
  • NODE-6469: pool is cleared before connection checkin on error (#​4296) (06a2e2c)
  • NODE-6523: deleteMany in gridfs passes timeoutMS to predicate, not options (#​4319) (1965ed5)
Performance Improvements
  • NODE-6525: remove setPrototype and defineProperty from hot path (#​4321) (48ed47e)

v6.9.0

Compare Source

Features
Bug Fixes
  • NODE-5720: on pre-4.4 sharded servers, the node driver uses error.writeConcern.code to determine retryability (#​4155) (b26c328)
  • NODE-6241: allow Binary as local kms provider key for auto encryption (#​4165) (d85f827)
  • NODE-6259: replace dynamically assigned length property with a static getter (#​4173) (320dde0)
  • NODE-6276: preserve top level error code MongoWriteConcernError (#​4183) (e902584)
  • NODE-6284: make sparsity and trimFactor optional (#​4189) (8622545)
  • NODE-6355: respect utf8 validation options when iterating cursors (#​4214) (8bfe187)
  • NODE-6362: cache cursor deserialization opti

@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Feb 11, 2025 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: @finos/git-proxy@2.0.0-rc.5
npm error Found: react@16.14.0
npm error node_modules/react
npm error   react@"^16.14.0" from the root project
npm error
npm error Could not resolve dependency:
npm error peer react@">=18" from react-router-dom@7.14.0
npm error node_modules/react-router-dom
npm error   react-router-dom@"7.14.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-04-05T21_16_35_083Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-04-05T21_16_35_083Z-debug-0.log

@github-actions
Copy link
Copy Markdown

github-actions bot commented Feb 11, 2025 •
edited
Loading

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA e289214.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

package.json

PackageVersionLicenseIssue Type
@types/supertest^7.2.0NullUnknown License
mongodb^7.1.1NullUnknown License
Allowed Licenses: MIT, MIT-0, Apache-2.0, BSD-3-Clause, BSD-3-Clause-Clear, ISC, BSD-2-Clause, Unlicense, CC0-1.0, 0BSD, X11, MPL-2.0, MPL-1.0, MPL-1.1, MPL-2.0, OFL-1.1, Zlib, BlueOak-1.0.0, Ubuntu-font-1.0, Artistic-2.0
Excluded from license check: pkg:npm/caniuse-lite

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@types/supertest ^7.2.0 UnknownUnknown
npm/mongodb ^7.1.1 UnknownUnknown
npm/react-router-dom 7.14.0 🟢 5.1
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review⚠️ 1Found 5/28 approved changesets -- score normalized to 1
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • package.json

@netlify
Copy link
Copy Markdown

netlify bot commented Feb 11, 2025 •
edited
Loading

✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name Link
🔨 Latest commit e289214
🔍 Latest deploy log https://app.netlify.com/projects/endearing-brigadeiros-63f9d0/deploys/69d2d13a1652320008102a50

@github-actions github-actions bot added the fix label Feb 11, 2025
@renovate renovate bot force-pushed the renovate/major-7-npm branch 17 times, most recently from 99706c0 to 4f47260 Compare February 23, 2025 23:30
@renovate renovate bot force-pushed the renovate/major-7-npm branch 3 times, most recently from db74f54 to 4ea6825 Compare March 5, 2025 13:47
@renovate renovate bot force-pushed the renovate/major-7-npm branch 6 times, most recently from c289e33 to 7ed1046 Compare March 13, 2025 15:09
@renovate renovate bot force-pushed the renovate/major-7-npm branch 3 times, most recently from a1ce621 to 79a729d Compare March 28, 2025 23:32
@renovate renovate bot force-pushed the renovate/major-7-npm branch 5 times, most recently from f915e38 to ca26053 Compare April 11, 2025 09:09
@renovate renovate bot force-pushed the renovate/major-7-npm branch 2 times, most recently from f8783f8 to f60ac6b Compare April 17, 2025 18:57
@renovate renovate bot force-pushed the renovate/major-7-npm branch 10 times, most recently from ff29e3a to a42a513 Compare April 30, 2025 08:14
@renovate renovate bot force-pushed the renovate/major-7-npm branch from a42a513 to dc7b01b Compare May 3, 2025 21:50
@renovate renovate bot changed the title fix(deps): update dependency react-router-dom to v7 - - package.json fix(deps): update npm to v7 - - package.json (major) May 3, 2025
@renovate renovate bot force-pushed the renovate/major-7-npm branch 7 times, most recently from 847a78a to 3c2dddc Compare May 8, 2025 08:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

fix

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants