GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Bump pymongo from 2.7.2 to 4.18.2 by dependabot[bot] · Pull Request #158 · codingo/NoSQLMap

Conversation

dependabot Bot commented on behalf of github Oct 13, 2026

Copy link

Copy Markdown

Contributor

Bumps pymongo from 2.7.2 to 4.18.2.

Release notes

Sourced from pymongo's releases.

PyMongo 4.18.2

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-18-2-released/343732

CVE-2026-96749 CVE-2026-96748 CVE-2026-96747

PyMongo 4.18.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-18-1-released/343338

PyMongo 4.18.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-18-released/343137

PyMongo 4.17.0

Community notes

What's Changed

refactor(ci): replace shell=True and awk pipes with native Python by @RinZ27 in mongodb/mongo-python-driver#2671

PYTHON-5697 - Migrate 8.0+ tests to Windows 2022 by @NoahStapp in mongodb/mongo-python-driver#2681

[Spec Resync] 01-19-2026 by @mongodb-drivers-pr-bot[bot] in mongodb/mongo-python-driver#2680

Bump pyright from 1.1.407 to 1.1.408 by @dependabot[bot] in mongodb/mongo-python-driver#2675

PYTHON-5692 - [Infrastructure] Improve dependabot version updates by @NoahStapp in mongodb/mongo-python-driver#2682

PYTHON-5605 - Drop usage of Ubuntu 20 by @NoahStapp in mongodb/mongo-python-driver#2683

PYTHON-5699 & PYTHON-5698 [Spec Resync] 01-26-2026 by @mongodb-drivers-pr-bot[bot] in mongodb/mongo-python-driver#2685

PYTHON-5703 Use Ubuntu24 for AWS Auth tests by @blink1073 in mongodb/mongo-python-driver#2686

PYTHON-5704 Skip free-threading for enterprise auth builds by @blink1073 in mongodb/mongo-python-driver#2687

Bump astral-sh/setup-uv from 7.1.6 to 7.2.0 in the actions group across 1 directory by @dependabot[bot] in mongodb/mongo-python-driver#2684

Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 in the actions group by @dependabot[bot] in mongodb/mongo-python-driver#2692

PYTHON-1357 - Refactor Cursor and CommandCursor by @NoahStapp in mongodb/mongo-python-driver#2691

[Spec Resync] 02-02-2026 by @mongodb-drivers-pr-bot[bot] in mongodb/mongo-python-driver#2694

PYTHON-5467 Add codecov integration by @blink1073 in mongodb/mongo-python-driver#2690

Bump astral-sh/setup-uv from 7.2.0 to 7.2.1 in the actions group by @dependabot[bot] in mongodb/mongo-python-driver#2700

PYTHON-XXXX Fixed typo in Running Tests Locally section. by @caseyclements in mongodb/mongo-python-driver#2698

PYTHON-5467 Fix codecov upload by @blink1073 in mongodb/mongo-python-driver#2701

PYTHON-5467 Fix codecov upload on Evergreen by @blink1073 in mongodb/mongo-python-driver#2702

PYTHON-5715 Add appName to OIDC test failpoints by @blink1073 in mongodb/mongo-python-driver#2697

PYTHON-5705 Improve fallback for PyOpenSSL windows system certs loading by @blink1073 in mongodb/mongo-python-driver#2688

PYTHON-3898 Add coverage to all variants by @blink1073 in mongodb/mongo-python-driver#2705

PYTHON-5729 Pin setuptools when using older gevent by @blink1073 in mongodb/mongo-python-driver#2708

Bump the actions group with 2 updates by @dependabot[bot] in mongodb/mongo-python-driver#2711

PYTHON-5708 Temporarily skip some BSON encryption tests by @blink1073 in mongodb/mongo-python-driver#2709

PYTHON-5732 Use mongodb-runner in Evergreen Tests by @blink1073 in mongodb/mongo-python-driver#2703

PYTHON-5731 - Server selection deprioritization only for overload errors on replica sets by @NoahStapp in mongodb/mongo-python-driver#2710

PYTHON-5737 - BSON encoding/decoding performance improvements by @NoahStapp in mongodb/mongo-python-driver#2715

[Spec Resync] 03-02-2026 by @mongodb-drivers-pr-bot[bot] in mongodb/mongo-python-driver#2716

Python 4542 - Improved sessions API by @NoahStapp in mongodb/mongo-python-driver#2712

PYTHON-5742 - Add Copilot instructions by @NoahStapp in mongodb/mongo-python-driver#2717

PYTHON-5747 Add jira link to spec resync PR by @sleepyStick in mongodb/mongo-python-driver#2723

PYTHON-5114 Test suite reduce killAllSessions calls by @ShaneHarvey in mongodb/mongo-python-driver#2721

PYTHON-5748 Remove unused SpecRunner class by @ShaneHarvey in mongodb/mongo-python-driver#2725

... (truncated)

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.18.2 (2026/09/24)

Version 4.18.2 is a bug fix release.

Hardened the bson buffer size guard against signed integer overflow. (CVE-2026-96749_).

Fixed connection string parsing to percent-decode each host individually. (CVE-2026-96748_).

Client-side field level encryption now rejects a KMS endpoint ending in .sock. (CVE-2026-96747_).

.. _CVE-2026-96749: https://www.cve.org/CVERecord?id=CVE-2026-96749 .. _CVE-2026-96748: https://www.cve.org/CVERecord?id=CVE-2026-96748 .. _CVE-2026-96747: https://www.cve.org/CVERecord?id=CVE-2026-96747

Issues Resolved ...............

See the PyMongo 4.18.2 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.18.2 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=52896

Changes in Version 4.18.1 (2026/09/10)

Version 4.18.1 is a bug fix release.

Use an exact match for the file ID in GridFS delete methods (CVE-2026-88029_).

.. _CVE-2026-88029: https://www.cve.org/CVERecord?id=CVE-2026-88029

Changes in Version 4.18.0 (2026/09/03)

PyMongo 4.18 brings a number of changes including:

Added srvAllowedHostsSuffix as a URI option and keyword argument to :class:~pymongo.synchronous.mongo_client.MongoClient and :class:~pymongo.asynchronous.mongo_client.AsyncMongoClient. When connecting via mongodb+srv://, this option overrides the default requirement that SRV-returned hosts share the same parent domain as the seed hostname, allowing hosts under a different domain suffix to be accepted. The suffix must not be a public suffix (per the Public Suffix List <https://publicsuffix.org/list/>_). See the :class:~pymongo.synchronous.mongo_client.MongoClient and :class:~pymongo.asynchronous.mongo_client.AsyncMongoClient documentation for security considerations.

Dropped support for MongoDB 4.2.

Added support for MongoDB 9.0.

PyPy support is deprecated and will be removed in a future release.

... (truncated)

Commits

640dd23 Prep 4.18.2 release (#3066)
6a0ec65 Update changelog for CVE-2026-88029 reference (#3049)
44be553 BUMP 4.18.2.dev0
127d140 PYTHON-6085 Prep for 4.18.1 release (#3047)
fa67658 PYTHON-5994 Use exact match for file ID in GridFS delete methods (#3046)
1011e57 Prep branch v4.18
4dd7303 PYTHON-6076 Request workflows permission in create-release-branch (#3039)
e66da83 PYTHON-5956 Use shared python/setup action for CI setup (#2990)
22a2ec8 PYTHON-6021 Move _write_concern_for_cmd into BaseObject (#3036)
2a4a004 PYTHON-5874 Fix test_fork.py failures on Python 3.15 due to fork() Deprecatio...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          Bump pymongo from 2.7.2 to 4.18.2

Bumps [pymongo](https://github.com/mongodb/mongo-python-driver) from 2.7.2 to 4.18.2.
- [Release notes](https://github.com/mongodb/mongo-python-driver/releases)
- [Changelog](https://github.com/mongodb/mongo-python-driver/blob/main/doc/changelog.rst)
- [Commits](mongodb/mongo-python-driver@2.7.2...4.18.2)

---
updated-dependencies:
- dependency-name: pymongo
  dependency-version: 4.18.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added dependencies

Pull requests that update a dependency file

python Pull requests that update python code labels

Oct 13, 2026

This branch has not been deployed

No deployments

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

dependencies

Pull requests that update a dependency file

python

Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

0 participants

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.