Skip to content

chore(deps-dev): bump pymongo from 4.7.3 to 4.12.1#1177

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pymongo-4.12.1
Closed

chore(deps-dev): bump pymongo from 4.7.3 to 4.12.1#1177
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pymongo-4.12.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 30, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps pymongo from 4.7.3 to 4.12.1.

Release notes

Sourced from pymongo's releases.

PyMongo 4.12.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-12-1-released/320326

What's Changed

Full Changelog: mongodb/mongo-python-driver@4.12.0...4.12.1

PyMongo 4.12.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-12-released/318187

PyMongo 4.11.3

What's Changed

New Contributors

Full Changelog: mongodb/mongo-python-driver@4.11.2...4.11.3

PyMongo 4.11.2

Community notes:

What's Changed

Full Changelog: mongodb/mongo-python-driver@4.11.1...4.11.2

PyMongo 4.11.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-11-1-released/312193

PyMongo 4.11.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-11-released/310976

... (truncated)

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.12.1 (2025/04/29)

Version 4.12.1 is a bug fix release.

  • Fixed a bug that could raise UnboundLocalError when creating asynchronous connections over SSL.
  • Fixed a bug causing SRV hostname validation to fail when resolver and resolved hostnames are identical with three domain levels.
  • Fixed a bug that caused direct use of pymongo.uri_parser to raise an AttributeError.
  • Fixed a bug where clients created with connect=False and a "mongodb+srv://" connection string could cause public pymongo.MongoClient and pymongo.AsyncMongoClient attributes (topology_description, nodes, address, primary, secondaries, arbiters) to incorrectly return a Database, leading to type errors such as: "NotImplementedError: Database objects do not implement truth value testing or bool()".
  • Removed Eventlet testing against Python versions newer than 3.9 since Eventlet is actively being sunset by its maintainers and has compatibility issues with PyMongo's dnspython dependency.
  • Fixed a bug where MongoDB cluster topology changes could cause asynchronous operations to take much longer to complete due to holding the Topology lock while closing stale connections.
  • Fixed a bug that would cause AsyncMongoClient to attempt to use PyOpenSSL when available, resulting in errors such as "pymongo.errors.ServerSelectionTimeoutError: 'SSLContext' object has no attribute 'wrap_bio'".

Issues Resolved ...............

See the PyMongo 4.12.1 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.12.1 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=43094

Changes in Version 4.12.0 (2025/04/08)

.. warning:: Driver support for MongoDB 4.0 reached end of life in April 2025. PyMongo 4.12 will be the last release to support MongoDB 4.0.

PyMongo 4.12 brings a number of changes including:

  • Support for configuring DEK cache lifetime via the key_expiration_ms argument to :class:~pymongo.encryption_options.AutoEncryptionOpts.
  • Support for $lookup in CSFLE and QE supported on MongoDB 8.1+.
  • pymongocrypt>=1.13 is now required for :ref:In-Use Encryption support.
  • Added :meth:gridfs.asynchronous.grid_file.AsyncGridFSBucket.rename_by_name and :meth:gridfs.grid_file.GridFSBucket.rename_by_name for more performant renaming of a file with multiple revisions.
  • Added :meth:gridfs.asynchronous.grid_file.AsyncGridFSBucket.delete_by_name and :meth:gridfs.grid_file.GridFSBucket.delete_by_name for more performant deletion of a file with multiple revisions.
  • AsyncMongoClient no longer performs DNS resolution for "mongodb+srv://" connection strings on creation. To avoid blocking the asyncio loop, the resolution is now deferred until the client is first connected.
  • Added index hinting support to the :meth:~pymongo.asynchronous.collection.AsyncCollection.distinct and :meth:~pymongo.collection.Collection.distinct commands.
  • Deprecated the hedge parameter for :class:~pymongo.read_preferences.PrimaryPreferred,

... (truncated)

Commits
  • 84d0d3d BUMP 4.12.1
  • c52a456 PYTHON-5357 Update changelog for 4.12.1 release (#2321) (#2323)
  • dd99f80 PYTHON-5309: [v4.12] AsyncMongoClient doesn't use PyOpenSSL (#2286) (#2319)
  • fecd29c PYTHON-5336 Added VECTOR_SUBTYPE line to API docs (#2313) [v4.12] (#2314)
  • c11d0f4 PYTHON-5306: [v4.12] - Fix use of public MongoClient attributes before connec...
  • f5836b3 PYTHON-5346: [v4.12] test_init_disconnected_with_srv cannot run against shard...
  • 38bc13d PYTHON-5212 [v4.12] Do not hold Topology lock while resetting pool (#2307)
  • c6671e2 PYTHON-5348 Fix CodeQL Scanning for GitHub Actions (#2308) [v4.12] (#2310)
  • 79cb34a PYTHON-5314 [v4.12] Fix default imports for modules that worked in v4.8 (#230...
  • c837846 PYTHON-5310 [v4.12] Fix uri_parser AttributeError when used directly (#2283) ...
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Greptile Summary

Disclaimer: Experimental PR review

Updates pymongo development dependency from 4.7.3 to 4.12.1, bringing several bug fixes and improvements to MongoDB driver functionality.

  • Fixed AsyncMongoClient SSL connection issues that could raise UnboundLocalError
  • Fixed SRV hostname validation failures with three domain levels
  • Fixed performance issues with MongoDB cluster topology changes due to Topology lock handling
  • Fixed AsyncMongoClient incorrectly attempting to use PyOpenSSL
  • Added support for configuring DEK cache lifetime and $lookup in CSFLE/QE for MongoDB 8.1+

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 30, 2025
@dependabot dependabot Bot mentioned this pull request Apr 30, 2025
Closed
greptile-apps[bot]
greptile-apps Bot reviewed Apr 30, 2025
View reviewed changes

@greptile-apps greptile-apps Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

No file(s) reviewed, no comment(s)
Edit PR Review Bot Settings | Greptile

@dependabot dependabot Bot force-pushed the dependabot/pip/pymongo-4.12.1 branch from 0eb4239 to 53c08c1 Compare May 8, 2025 05:33
@dependabot dependabot Bot force-pushed the dependabot/pip/pymongo-4.12.1 branch 2 times, most recently from 75725fd to 7dd0639 Compare May 22, 2025 05:19
@dependabot dependabot Bot force-pushed the dependabot/pip/pymongo-4.12.1 branch 2 times, most recently from 8b85ffa to 70bad6a Compare May 28, 2025 05:29
@dependabot
chore(deps-dev): bump pymongo from 4.7.3 to 4.12.1
57b4e99 
Bumps [pymongo](https://github.com/mongodb/mongo-python-driver) from 4.7.3 to 4.12.1.
- [Release notes](https://github.com/mongodb/mongo-python-driver/releases)
- [Changelog](https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst)
- [Commits](mongodb/mongo-python-driver@4.7.3...4.12.1)

---
updated-dependencies:
- dependency-name: pymongo
  dependency-version: 4.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/pymongo-4.12.1 branch from 70bad6a to 57b4e99 Compare May 30, 2025 05:37
@dependabot @github

dependabot Bot commented on behalf of github Jun 12, 2025

Copy link
Copy Markdown
Contributor Author

Superseded by #1212.

@dependabot dependabot Bot closed this Jun 12, 2025
@dependabot dependabot Bot deleted the dependabot/pip/pymongo-4.12.1 branch June 12, 2025 05:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@greptile-apps greptile-apps[bot] greptile-apps[bot] left review comments
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants