Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps-dev): bump the patch-level group in /packages/opentelemetry-node with 2 updates #622

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 24, 2025

Bumps the patch-level group in /packages/opentelemetry-node with 2 updates: mongodb and openai.

Updates mongodb from 6.13.0 to 6.13.1

Release notes

Sourced from mongodb's releases.

v6.13.1

6.13.1 (2025-02-20)

The MongoDB Node.js team is pleased to announce version 6.13.1 of the mongodb package!

Release Notes

Remove extraneous Promise<Document> in Collection.replaceOne return type

The return type signature of the replaceOne method no longer includes the general Promise<Document> type. Thanks to @​arturmuller, the replaceOne type signature is now more accurate! 🎉

Fix writeConcern omitted when timeoutMS is provided

When timeoutMS and a write concern were provided, the writeConcern was incorrectly omitted from the final command executed by the driver.

Thanks @​stepanho for contributing the fix!

Update BSON version requirement to 6.10.3

This pulls in fixes made in bson versions 6.10.3 and 6.10.2 into the driver.

BSON 6.10.2 fixed an issue in calculateObjectSize ignoring the size contributed by BigInt values to a BSON document. This impacted batch splitting logic in bulkWrite operations: if the actual BSON was over the size returned by calculateObjectSize the server would return an error.

[!WARNING] BSON 6.10.3 addresses a potential data corruption risk with the use of useBigInt64 flag introduced in BSON 6.4.0, where negative Long values would be deserialized into BigInt as unsigned integers when the useBigInt64 flag was enabled. (Thanks to @​rkistner for reporting this issue!)

Bug Fixes

  • NODE-6407: use conversationId returned from server in saslContinue (#4368) (fbefa6b)
  • NODE-6613: Update error messages when primaries go stale (#4397) (6528c8d)
  • NODE-6690: Remove extraneous Document in replaceOne return type (#4383) (6c81d4e)
  • NODE-6763: pass WriteConcernOptions instead on WriteConcernSettings (#4421) (26f15d7)
  • NODE-6777: update BSON to 6.10.3 (#4428) (db5b9e0)

Documentation

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

Changelog

Sourced from mongodb's changelog.

6.13.1 (2025-02-20)

Bug Fixes

  • NODE-6407: use conversationId returned from server in saslContinue (#4368) (fbefa6b)
  • NODE-6613: Update error messages when primaries go stale (#4397) (6528c8d)
  • NODE-6690: Remove extraneous Document in replaceOne return type (#4383) (6c81d4e)
  • NODE-6763: pass WriteConcernOptions instead on WriteConcernSettings (#4421) (26f15d7)
  • NODE-6777: update BSON to 6.10.3 (#4428) (db5b9e0)
Commits
  • 21f2cb9 chore(main): release 6.13.1 [skip-ci] (#4391)
  • db5b9e0 fix(NODE-6777): update BSON to 6.10.3 (#4428)
  • 0789dff ci(NODE-6570): re-enable azure oidc auth tests (#4424)
  • a2998d5 ci(NODE-6768): regenerate lockfile (#4425)
  • 45233da test(NODE-6745): only find python when installing native (#4422)
  • efea166 ci(NODE-6728): test FLE on Alpine linux (#4417)
  • 26f15d7 fix(NODE-6763): pass WriteConcernOptions instead on WriteConcernSettings (#4421)
  • 94122fb ci(NODE-6749): make Atlas cluster prefix < 23 characters long (#4420)
  • d18108c ci: dont test aws on all server versions (#4418)
  • ae234a8 ci(NODE-6748): unskip serverless tests (#4416)
  • Additional commits viewable in compare view

Updates openai from 4.85.1 to 4.85.4

Release notes

Sourced from openai's releases.

v4.85.4

4.85.4 (2025-02-22)

Full Changelog: v4.85.3...v4.85.4

Chores

v4.85.3

4.85.3 (2025-02-20)

Full Changelog: v4.85.2...v4.85.3

Bug Fixes

  • parsing: remove tool_calls default empty array (#1341) (2672160)

v4.85.2

4.85.2 (2025-02-18)

Full Changelog: v4.85.1...v4.85.2

Bug Fixes

  • optimize sse chunk reading off-by-one error (#1339) (c82795b)
Changelog

Sourced from openai's changelog.

4.85.4 (2025-02-22)

Full Changelog: v4.85.3...v4.85.4

Chores

4.85.3 (2025-02-20)

Full Changelog: v4.85.2...v4.85.3

Bug Fixes

  • parsing: remove tool_calls default empty array (#1341) (2672160)

4.85.2 (2025-02-18)

Full Changelog: v4.85.1...v4.85.2

Bug Fixes

  • optimize sse chunk reading off-by-one error (#1339) (c82795b)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patch-level group in /packages/opentelemetry-node with 2 updates: [mongodb](https://github.com/mongodb/node-mongodb-native) and [openai](https://github.com/openai/openai-node).


Updates `mongodb` from 6.13.0 to 6.13.1
- [Release notes](https://github.com/mongodb/node-mongodb-native/releases)
- [Changelog](https://github.com/mongodb/node-mongodb-native/blob/main/HISTORY.md)
- [Commits](mongodb/node-mongodb-native@v6.13.0...v6.13.1)

Updates `openai` from 4.85.1 to 4.85.4
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v4.85.1...v4.85.4)

---
updated-dependencies:
- dependency-name: mongodb
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-level
- dependency-name: openai
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-level
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 24, 2025
@dependabot dependabot bot requested a review from a team February 24, 2025 01:57
@trentm trentm merged commit 84697f9 into main Feb 26, 2025
11 checks passed
@trentm trentm deleted the dependabot/npm_and_yarn/packages/opentelemetry-node/patch-level-3816305ee9 branch February 26, 2025 21:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant