Skip to content

Update dependency connect-mongo to v6#1370

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/connect-mongo-6.x
Open

Update dependency connect-mongo to v6#1370
renovate[bot] wants to merge 1 commit intomainfrom
renovate/connect-mongo-6.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 7, 2026

This PR contains the following updates:

Package Change Age Confidence
connect-mongo ^5.0.0^6.0.0 age confidence

Release Notes

jdesboeufs/connect-mongo (connect-mongo)

v6.0.0

Compare Source

  • Breaking: Requires Node.js 20.8+ (aligns with MongoDB driver 5–7 support).
  • Compatibility: Supported/tested matrix: Node 20/22/24 + MongoDB driver 5.x–7.x + MongoDB server 4.4–8.0 (peer range remains >=5.0.0).
  • Added: Optional timestamps flag to record createdAt/updatedAt on session documents for auditing while keeping the default schema unchanged.
  • Added: Pluggable cryptoAdapter interface with helpers createWebCryptoAdapter (AES-GCM via Web Crypto API) and createKrupteinAdapter; legacy crypto options are auto-wrapped and mutually exclusive with cryptoAdapter to avoid ambiguity.
  • Fixed: store.clear() now uses deleteMany({}) instead of collection.drop(), preserving TTL indexes and treating NamespaceNotFound as success so clears are idempotent.
  • Fixed: Decryption failures in get() now short-circuit after the first callback, preventing double-callback regressions when the crypto secret is wrong.
  • Packaging: npm package now ships dual ESM/CJS bundles via tsdown, with an explicit exports map and cleaned type declarations (.d.mts/.d.cts).
  • Types: MongoStore and option hooks are strongly typed to avoid any leaks.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/connect-mongo-6.x branch from 2afba54 to 67ec4c6 Compare March 7, 2026 17:01
@renovate renovate Bot force-pushed the renovate/connect-mongo-6.x branch from 67ec4c6 to e43d522 Compare March 27, 2026 09:30
@renovate renovate Bot force-pushed the renovate/connect-mongo-6.x branch from e43d522 to 54eb8e4 Compare March 27, 2026 09:33
@renovate renovate Bot force-pushed the renovate/connect-mongo-6.x branch from 54eb8e4 to fdb4d12 Compare March 27, 2026 14:59
@renovate renovate Bot force-pushed the renovate/connect-mongo-6.x branch from fdb4d12 to 049a4e1 Compare March 27, 2026 15:02
@renovate renovate Bot force-pushed the renovate/connect-mongo-6.x branch from 049a4e1 to ff0da1b Compare April 17, 2026 14:13
@renovate renovate Bot force-pushed the renovate/connect-mongo-6.x branch from ff0da1b to 1d357c6 Compare April 17, 2026 14:16
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants