chore(deps): update all (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v3 -> v4
dashmap	dependencies	major	5.5.0 -> 6.0.0
jsonwebtoken	dependencies	major	8.3.0 -> 9.0.0
mongodb (source)	dependencies	major	2.6.0 -> 3.0.0

---

Release Notes

actions/checkout (actions/checkout)

v4

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in https://github.com/actions/checkout/pull/1739
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1697
• Check out other refs/* by commit by @​orhantoy in https://github.com/actions/checkout/pull/1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in https://github.com/actions/checkout/pull/1776

xacrimon/dashmap (dashmap)

v6.0.1

Compare Source

This is a patch release, now the main release for v6 as v6.0.0 was yanked shortly after release.

Thanks to @​JesusGuzmanJr for notifying me about a critical bug that was introduced so that I could resolve it: #​304.

PRs for this release: #​305 + xacrimon/dashmap@d5c8be6

v6.0.0

Compare Source

This release contains performance optimizations, most notably 10-40% gains on Apple Silicon but also 5-10% gains when measured in Intel Sapphire Rapids. This work was accomplished in:

• #​303
• #​287

Minor QoL improvements were made in:

• #​302
• #​300

Special to the following contributors for making this release possible:

• @​conradludgate
• @​arthurprs
• @​joshtriplett
• @​dtzxporter

v5.5.3

Compare Source

v5.5.2

Compare Source

This release merely reverts #​259 since it introduced data race violations. We'll look into this more in the coming time and try to investigate why and how to gain back the additional 0.5%-ish lost performance. Additionally, v5.5.1 has been yanked.

Thanks to @​Turbo87 and the crates.io team for reporting this issue.

v5.5.1

Compare Source

This release includes a couple of internal changes such as committing Cargo.lock as well as minor optimizations to lookup performance.

Keats/jsonwebtoken (jsonwebtoken)

v9.3.0

Compare Source

• Add Validation.reject_tokens_expiring_in_less_than, the opposite of leeway

v9.2.0

Compare Source

• Add an option to not validate aud in the Validation struct
• Get the current timestamp in wasm without using std
• Update ring to 0.17

v9.1.0

Compare Source

• Supports deserialization of unsupported algorithms for JWKs

v9.0.0

Compare Source

• Update ring
• Rejects JWTs containing audiences when the Validation doesn't contain any

mongodb/mongo-rust-driver (mongodb)

v3.0.1

Compare Source

The MongoDB Rust driver team is pleased to announce the v3.0.1 release of the mongodb crate, now available for download from crates.io.

This release fixes two bugs:

• Aggregations with both explicit sessions and custom types wouldn't compile, and
• Collection::watch didn't use the Collection's type parameter

Full Release Notes

Bugfixes

• RUST-1986 Use Collection type parameter for change streams (#​1162)
• RUST-1982 Fix aggregate with_type with explicit session (#​1155)

v3.0.0

Compare Source

The MongoDB Rust driver team is pleased to announce the v3.0.0 release of the mongodb crate, now available for download from crates.io.

Highlighted Changes

Breaking Changes

3.0 introduces a wide variety of improvements that required backwards-incompatible API changes; in most cases these changes should require only minor updates in application code.

Most notably:

• Fluent API: Async methods that accepted options have been updated to allow the individual options to be given directly in line with the call to reduce required boilerplate.
• Events: 3.0 introduces the EventHandler type, which can be constructed from a callback, async callback, or an async channel sender.
• Async Runtime: 3.0 only supports tokio; support for async-std has been discontinued.

For detailed information on breaking changes and examples of migrating from 2.x to 3.0, please see the migration guide.

Bulk Write

The Rust driver now implements the new Bulk Write specification, which supports performing mixed write operations against multiple namespaces in a minimized number of round-trips to the server. This feature is only available for early testing using MongoDB 8.0 release candidate binaries. This feature is not recommended for use in production until the stable release of MongoDB 8.0.

OIDC Authentication

The Rust driver can now authenticate using an OpenID Connect access token, including support for both the machine and human authentication flows, and automatic token acquisition for Azure and GCP.

Included Changes

Below are a selected list of other changes with user impact; for a full list of changes see this GitHub query.

Breaking Changes

• RUST-1810 Clean up concern helpers (#​1011)
• RUST-1603 Support the authorized_collections option (#​1033)
• RUST-1876 Require T: Send + Sync for Collection (#​1043)
• RUST-1306 Move Compression enum behind compression feature flags (#​1055)
• RUST-1563 Make ReadPreferenceOptions optional (#​1059)
• RUST-1208 Future-proof features (#​1062)
• RUST-1764 Drop human_readable options in favor of HumanReadable (#​1064)
• RUST-1695 Use consistent defaults for TypedBuilder (#​1072)
• RUST-1364 Collapse comment and comment_bson (#​1070)

New Features

• RUST-1652 Add a find_one method to GridFsBucket (#​1015)
• RUST-1856 expose Database::client (#​1035) (thanks dgrijalva!)
• RUST-1830 Support KMIP delegated protocol (#​1115)

Improvements

• chore: bump socket2 to 0.5 (#​1020) (thanks attila-lin!)
• chore: move lazy_static to once_cell (#​1022) (thanks attila-lin!)
• RUST-1631 Always use polling monitoring when running in a FaaS environment (#​1030)

Bugfixes

• RUST-1881 Check integer conversions (#​1045)

v2.8.2

Compare Source

The MongoDB Rust driver team is pleased to announce the v2.8.2 release of the mongodb crate, now available for download from crates.io.

This release fixes a potential issue when serializing messages.

Full Release Notes

Improvements

• RUST-1553 Add support for document sequences (OP_MSG payload type 1) (#​1009)

Bugfixes

• RUST-1881 Check integer conversions (#​1045)

v2.8.1

Compare Source

The MongoDB Rust driver team is pleased to announce the v2.8.1 release of the mongodb crate, now available for download from crates.io.

This release fixes two bugs:

• on-demand KMS credentials wouldn't work with automatic encryption, and
• initial connection responses from the server could fail to parse under certain circumstances.

Full Release Notes

Bugfixes

• RUST-1883 Set use_need_kms_credentials_state unconditionally when creating a new ClientState (#​1018)
• RUST-1841 Allow double-valued connectionIds (#​1025)

v2.8.0

Compare Source

The MongoDB Rust driver team is pleased to announce the v2.8.0 release of the mongodb crate, now available for download from crates.io.

Highlighted Changes

Search Index Management Helpers

The Collection type now has the create_search_index, create_search_indexes, update_search_index, drop_search_index, and list_search_indexes methods, allowing comprehensive management of search indexes from client code.

Reliability Improvements

More error types will be automatically retried, and retries will avoid mongos backends with network connectivity issues. Also note that the documentation for with_transaction has been updated to clarify error handling requirements to avoid a deadlock.

Included Changes

Below are a selected list of changes with user impact; for a full list of changes see this GitHub query.

New Features

• RUST-1703 Add docker and kubernetes metrics (#​940)
• RUST-1701 Log when CosmosDB or DocumentDB are detected (#​958)
• RUST-1707 Add durations to connection pool events (#​976)
• RUST-933 Add support for the srvMaxHosts option (#​977)
• RUST-1667 Add search index management helpers (#​989)

Improvements

• RUST-877 Delay replacement document serialization until Operation::build (#​942)
• RUST-1763 deprecate CollectionOptions::human_readable_serialization (#​957)
• RUST-1414 disable causal consistency for implicit sessions (#​969)
• RUST-935 direct retries to different mongos (#​968)
• docs: remove pointless recommendation (#​973) (thanks @​cailloumajor!)
• RUST-1780 Bump MSRV to 1.61.0, upgrade ahash to 0.8.5 in MSRV-Cargo.lock (#​981) (thanks @​stIncMale!)
• RUST-1676 Simplify GenericCursor by refactoring the GetMoreProvider trait into a generic struct (#​983) (thanks @​stIncMale!)
• RUST-1804 Replace async_once with tokio::sync::OnceCell (#​992) (thanks @​Expyron!)
• RUST-1786 Make ReadConcernMajorityNotAvailableYet a retryable read error (#​996)
• RUST-1785 Make ExceededTimeLimit a read-retryable error (#​997)
• RUST-1788 Update docs for with_transaction to avoid infinite loop (#​998)

Bugfixes

• RUST-1698 Fix reading gridfs chunks from async-std file stream (#​950)
• RUST-1757 Fix final cursor batch handling (#​951)
• fixing the find or delete serde inconsistency (#​948) (thanks @​mlokr!)

v2.7.1

Compare Source

The MongoDB Rust driver team is pleased to announce the v2.7.1 release of the mongodb crate, now available for download from crates.io.

This release fixes a bug that caused a memory leak in various circumstances.

Full Release Notes

Bugfixes

• RUST-1779 Fix a memory leak in cleanup tracking (#​979)

v2.7.0

Compare Source

The MongoDB Rust driver team is pleased to announce the v2.7.0 release of the mongodb crate, now available for download from crates.io.

The Rust driver documentation is now hosted at https://www.mongodb.com/docs/drivers/rust/current/. This documentation includes detailed content about features, runnable examples, troubleshooting resources, and more.

Highlighted Changes

Serialization Behavior Change

When serializing values via serde, the serializer can indicate whether or not the target format is human-readable, allowing types to change behavior based on that. The Rust driver had inadvertently been serializing values given to find_one_and_replace and replace_one as human-readible when all other methods serialize as non-human-readible; this bug is fixed in 2.7.0, with those methods also serializing as non-human-readible.

However, it is potentially possible (if unlikely) that user code may rely on this bug. If your code does rely on human-readable serialization, you can specify that via the new human_readable_serialization field in CollectionOptions.

run_cursor_command

The Rust driver provides the run_command method as a way for users to directly send bson commands to the server; this is particularly useful when the driver does not yet have support for a newly-added server command. However, using this with commands that return a cursor requires re-implementing the logic for cursor iteration, which can be tedious and error-prone. The new run_cursor_command method avoids those problems, directly returning a Cursor using the same iteration logic as other methods.

SDAM Logging

The Rust driver will now log SDAM events when using the tracing-unstable feature.

Client Management

The Client type now provides three additional ways to shape behavior to fit your workload:

• ClientOptions.max_connecting lets you specify how many "in flight" connections can be established in parallel. This was previously fixed at 2 and defaults to the same value.
• Client::warm_connection_pool will create new connections to bring the connection pool up to min_pool_size, which can provide more predictable performance in some circumstances.
• Client::shutdown will cleanly stop background tasks and wait for outstanding handles to be dropped. This is particularly useful when using event handlers that reference external resources, as otherwise those handlers may be invoked in a background task even after the Client has been dropped.

Included Changes

Below are a selected list of changes with user impact; for a full list of changes see this GitHub query.

New Features

• RUST-1420 Cache AWS credentials received from endpoints (#​905)
• RUST-1604 Add custom bucketing fields to timeseries options (#​907)
• RUST-1588: Add RunCursorCommand (#​912)
• RUST-802 Support Unix Domain Sockets (#​908) (thanks @​PureWhiteWu!)
• RUST-1509 SDAM Logging (#​918)
• RUST-1608 Clean shutdown for Client (#​920)
• RUST-1712 Provide a connection pool warmup method (#​932)
• RUST-1712 Support User Configuration for max_connecting (#​923) (thanks @​LuisOsta!)
• RUST-1687 Add human_readable_serialization option to Collection (#​902) (thanks @​maiconpavi!)

Improvements

• RUST-1433 Propagate original error for some labeled retry errors (#​903)
• minor: improve README.md (#​934)
• upgrade webpki (#​935) (thanks @​fuchsnj!)
• RUST-1763 deprecate CollectionOptions::human_readable_serialization (#​957) (#​959)

Bugfixes

• Force non-human readable serialization in collections (#​919) (#​924) (thanks @​kodemartin!)
• RUST-1699 / RUST-1718 AWS authentication fixes (#​926)
• RUST-1719 Fix panic after SessionCursor::with_type is called (#​928) (thanks @​mlokr!)
• RUST-1743 Fix gridfs numeric type serialization (#​941)
• RUST-1757 Fix final cursor batch handling (#​951) (#​954)
• fixing the find or delete serde inconsistency (#​948) (#​955) (thanks @​mlokr!)
• minor: pin async-executor (#​964) (#​965)

v2.6.1

Compare Source

The MongoDB Rust driver team is pleased to announce the v2.6.1 release of the mongodb crate, now available for download from crates.io. This release removes a potential panic from the SessionCursor::with_type method.

Included Changes

Bugfixes

• RUST-1719 Fix panic after SessionCursor::with_type is called (#​928) (thank you @​mlokr for this fix!)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.