Skip to content

ci(deps): bump the prod-dependencies group across 1 directory with 2 updates - #5013

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-1bf1dc57d2
Open

ci(deps): bump the prod-dependencies group across 1 directory with 2 updates#5013
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-1bf1dc57d2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-dependencies group with 2 updates in the / directory: @mongodb-js/saslprep and mongodb-connection-string-url.

Updates @mongodb-js/saslprep from 1.4.11 to 1.4.13

Commits
  • 58acee6 chore(ci): bump packages
  • 2e5b986 chore: sort deps and run pkg fix (#831)
  • 0d00af7 chore: update cidrs.json [skip ci]
  • d34d43a chore(ci): bump packages
  • 5b02887 chore: bump mongodb and bson dependencies (#829)
  • 2a6936c chore: update cidrs.json [skip ci]
  • cd4dc88 chore: update cidrs.json [skip ci]
  • 14be3da chore(ci): bump packages
  • 209d4ec fix(mongodb-constants): wrap in quotes to avoid error (#825)
  • 3486a11 chore(ci): bump packages
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by devtools-npm-user, a new releaser for @​mongodb-js/saslprep since your current version.


Updates mongodb-connection-string-url from 7.0.1 to 7.0.2

Release notes

Sourced from mongodb-connection-string-url's releases.

v7.0.2

7.0.2 (2026-07-15)

The MongoDB Node.js team is pleased to announce version 7.0.2 of the mongodb-connection-string-url package!

Release Notes

Loosened type restriction on generic arugments

  • .typedSearchParams<...>()
  • CommaAndColonSeparatedRecord<...>

The generics passed into these APIs were inadvertently made stricter than desirable. They've been updated to use the extends {} condition which permits string keyed types as a type argument. Notably improving the compatibility with the driver's AuthMechanismProperties type, a possible output of connection string parsing.

Fixed parsing issue

Unescaped @ in credentials now throws instead of silently misparsing.

Error messages no longer reveal invalid connection strings

Invalid connection strings are no longer revealed in error messages, reducing sensitive information disclosure. Historically we've had URI's embedded in error messages from validation failures.

Bug Fixes

Documentation

We invite you to try the mongodb-connection-string-url library immediately, and report any issues to the NODE project.

Changelog

Sourced from mongodb-connection-string-url's changelog.

7.0.2 (2026-07-09)

Bug Fixes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mongodb-connection-string-url since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates

Bumps the prod-dependencies group with 2 updates in the / directory: [@mongodb-js/saslprep](https://github.com/mongodb-js/devtools-shared) and [mongodb-connection-string-url](https://github.com/mongodb-js/mongodb-connection-string-url).


Updates `@mongodb-js/saslprep` from 1.4.11 to 1.4.13
- [Commits](https://github.com/mongodb-js/devtools-shared/compare/@mongodb-js/saslprep@1.4.11...@mongodb-js/saslprep@1.4.13)

Updates `mongodb-connection-string-url` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/mongodb-js/mongodb-connection-string-url/releases)
- [Changelog](https://github.com/mongodb-js/mongodb-connection-string-url/blob/main/HISTORY.md)
- [Commits](mongodb-js/mongodb-connection-string-url@v7.0.1...v7.0.2)

---
updated-dependencies:
- dependency-name: "@mongodb-js/saslprep"
  dependency-version: 1.4.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: mongodb-connection-string-url
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 1, 2026 06:13
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants