Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 20, 2025

Bumps bson from 6.10.1 to 6.10.3.

Release notes

Sourced from bson's releases.

v6.10.3

6.10.3 (2025-02-19)

The MongoDB Node.js team is pleased to announce version 6.10.3 of the bson package!

Release Notes

⚠️ Fixed potential data corruption bug when useBigInt64 is enabled

After refactoring to improve deserialization performance in #649, we inadvertently introduced a bug that manifested when deserializing Long values with the useBigInt64 flag enabled. The bug would lead to negative Long values being deserialized as unsigned integers. This issue has been resolved here.

Thanks to @​rkistner for reporting this bug!

Bug Fixes

  • NODE-6764: incorrect negative bigint handling (#752) (b3212b4)

Documentation

We invite you to try the bson library immediately, and report any issues to the NODE project.

v6.10.2

6.10.2 (2025-01-29)

The MongoDB Node.js team is pleased to announce version 6.10.2 of the bson package!

Release Notes

Fix calculateObjectSize not accounting for BigInt value size

BSON.calculateObjectSize was missing a condition for BigInt values, meaning it did not account for them in the same way that it would for Long values. This has been corrected.

We also added a new default condition that will catch any new values that may be returned by typeof in the future and will throw an error rather than returning an inaccurate size.

Bug Fixes

  • NODE-6608: calculateObjectSize returns the wrong value for bigint (#742) (1fed073)

Documentation

We invite you to try the bson library immediately, and report any issues to the NODE project.

Changelog

Sourced from bson's changelog.

6.10.3 (2025-02-19)

Bug Fixes

  • NODE-6764: incorrect negative bigint handling (#752) (b3212b4)

6.10.2 (2025-01-29)

Bug Fixes

  • NODE-6608: calculateObjectSize returns the wrong value for bigint (#742) (1fed073)
Commits
  • d22dee9 chore(main): release 6.10.3 [skip-ci] (#754)
  • 689212f ci(NODE-6769): regenerate lockfile (#755)
  • b3212b4 fix(NODE-6764): incorrect negative bigint handling (#752)
  • 011e85e chore(deps): bump serialize-javascript and mocha in /etc/eslint/no-bigint-usa...
  • b5ad49a chore(deps-dev): bump the development-dependencies group across 1 directory w...
  • bd326a8 chore: Add CODEOWNERS file [skip-ci]
  • 306b607 chore(main): release 6.10.2 [skip-ci] (#743)
  • bf5b66e test(NODE-6679): restore node latest testing (#746)
  • eca63c9 chore(NODE-6634): pin NPM to 10 when Node version is 18 (#745)
  • 1fed073 fix(NODE-6608): calculateObjectSize returns the wrong value for bigint (#742)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [bson](https://github.com/mongodb/js-bson) from 6.10.1 to 6.10.3.
- [Release notes](https://github.com/mongodb/js-bson/releases)
- [Changelog](https://github.com/mongodb/js-bson/blob/main/HISTORY.md)
- [Commits](mongodb/js-bson@v6.10.1...v6.10.3)

---
updated-dependencies:
- dependency-name: bson
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant