Skip to content

chore(deps): bump the prod-dependencies group across 1 directory with 2 updates - #4865

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-810be302dd
Closed

chore(deps): bump the prod-dependencies group across 1 directory with 2 updates#4865
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-810be302dd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-dependencies group with 2 updates in the / directory: @mongodb-js/saslprep and mongodb-connection-string-url.

Updates @mongodb-js/saslprep from 1.3.2 to 1.4.11

Commits
  • 93a690e chore(ci): bump packages
  • c7dcfb8 [agent] chore(deps): bump eslint-plugin-jsx-a11y to ^6.7.0 (fixes CVE-2025-27...
  • 7167e37 chore: update cidrs.json [skip ci]
  • a9b9ef6 chore(ci): bump packages
  • 577a512 feat(constants): add $rerank stage (#709)
  • 42d4798 chore: update cidrs.json [skip ci]
  • 456868f chore(ci): bump packages
  • 045cf8b chore(deps): bump sinon-chai and @​types/sinon-chai (#696)
  • e9b9b4e chore(ci): bump packages
  • 7125761 fix(mongodb-constants): update auto embed version of $vectorSearch stage COMP...
  • Additional commits viewable in compare view

Updates mongodb-connection-string-url from 7.0.0 to 7.0.1

Release notes

Sourced from mongodb-connection-string-url's releases.

v7.0.1

7.0.1 (2026-01-26)

The MongoDB Node.js team is pleased to announce version 7.0.1 of the mongodb-connection-string-url package!

Release Notes

This release does not contain public-facing changes.

Documentation

We invite you to try the mongodb-connection-string-url library immediately, and report any issues to the NODE project.

Changelog

Sourced from mongodb-connection-string-url's changelog.

7.0.1 (2026-01-26)

Miscellaneous Chores

  • deps-dev: bump js-yaml from 3.14.1 to 3.14.2 (#109) (d6e7654)
Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 5, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner February 5, 2026 20:49
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-dependencies-810be302dd branch from 28fc9df to 9fb1c74 Compare March 1, 2026 06:16
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-dependencies-810be302dd branch from 9fb1c74 to 31fa95e Compare April 1, 2026 06:39
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-dependencies-810be302dd branch from 31fa95e to 52ba5f1 Compare May 1, 2026 07:04
… 2 updates

Bumps the prod-dependencies group with 2 updates in the / directory: [@mongodb-js/saslprep](https://github.com/mongodb-js/devtools-shared) and [mongodb-connection-string-url](https://github.com/mongodb-js/mongodb-connection-string-url).


Updates `@mongodb-js/saslprep` from 1.3.2 to 1.4.11
- [Commits](https://github.com/mongodb-js/devtools-shared/compare/@mongodb-js/saslprep@1.3.2...@mongodb-js/saslprep@1.4.11)

Updates `mongodb-connection-string-url` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/mongodb-js/mongodb-connection-string-url/releases)
- [Changelog](https://github.com/mongodb-js/mongodb-connection-string-url/blob/main/HISTORY.md)
- [Commits](mongodb-js/mongodb-connection-string-url@v7.0.0...v7.0.1)

---
updated-dependencies:
- dependency-name: "@mongodb-js/saslprep"
  dependency-version: 1.4.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: mongodb-connection-string-url
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/prod-dependencies-810be302dd branch from 52ba5f1 to 17519b8 Compare June 1, 2026 21:00
@dependabot @github

dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 1, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/prod-dependencies-810be302dd branch July 1, 2026 06:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants