[Snyk] Upgrade bson from 4.6.5 to 4.7.0

[snyk-bot]

Snyk has created this PR to upgrade bson from 4.6.5 to 4.7.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 21 days ago, on 2022-08-18.

Release notes

Package name: bson

• 4.7.0 - 2022-08-18
  

  The MongoDB Node.js team is pleased to announce version 4.7.0 of the bson package!

  Release Highlights

  This release adds automatic UUID support. Now when serializing or deserializing BSON you can work directly with the UUID type without explicit conversion methods. The UUID class is now a subclass of binary so all existing code will continue to work (including the explicit conversion methods .toUUID/.toBinary). The same automatic support for UUID is also present in EJSON .parse/.stringify.

  Take a look at the following for the expected behavior:

  const document = BSON.deserialize(bytes)
  // { uuid: UUID('xxx') }
  BSON.serialize(document)
  // Buffer < document with uuid (binary subtype 4) >

  Special thanks to @ aditi-khare-mongoDB for all her hard work on this feature!! 🎉

  Features

  • NODE-4405: support serializing UUID class (#508) (f5dc9ed)
  • NODE-4419: UUID class deserialization (#509) (ff2b975)
  • NODE-4506: Make UUID a subclass of binary (#512) (e9afa9d)
  • NODE-4535: automatically promote UUIDs when deserializing and parsing UUIDs (#513) (1dc7eae)

  ---

  Documentation

  • API: https://github.com/mongodb/js-bson#readme
  • Changelog: https://github.com/mongodb/js-bson/blob/main/HISTORY.md#change-log

  We invite you to try the bson library immediately, and report any issues to the NODE project.

• 4.6.5 - 2022-07-07
  

  The MongoDB Node.js team is pleased to announce version 4.6.5 of the bson package!

  Release Highlights

  Along with some other bug fixes listed below in this release we've fixed the float parser logic for both deserialize and serialize to use JS Dataview APIs. The most delightful part of this change is an improvement to performance of serializing 64-bit floats. 🎉 🐎

  - cpu: Apple M1

  • cores: 8
  • os: darwin
  • ram: 16GB
  • iterations: 1,000,000
    testing: Double Serialization

  current - v 4.6.5 - avg 0.00024913ms
previous release - v 4.6.4 - avg 0.00036335ms
previous major - v 1.1.6 - avg 0.00036459ms


  Bug Fixes

  • NODE-3630: remove float parser and test edge cases for Double (#502) (54ca603)
  • NODE-4211: Do not require crypto in browser builds (#500) (b32ab40)
  • NODE-4302: remove downlevel ts and typesVersions (#501) (651b60e)
  • NODE-4381: handle __proto__ well in EJSON (#506) (4bda57d)

  Documentation

  • API: https://github.com/mongodb/js-bson#readme
  • Changelog: https://github.com/mongodb/js-bson/blob/main/HISTORY.md#change-log

  We invite you to try the bson library immediately, and report any issues to the NODE project.

from bson GitHub release notes

Commit messages

Package name: bson

• 853bbb0 chore(release): 4.7.0
• 1dc7eae feat(NODE-4535): automatically promote UUIDs when deserializing and parsing UUIDs (#513)
• e9afa9d feat(NODE-4506): Make UUID a subclass of binary (#512)
• ff2b975 feat(NODE-4419): UUID class deserialization (#509)
• f5dc9ed feat(NODE-4405): support serializing UUID class (#508)
• 4d75481 test(NODE-4357): delete windows tests (#510)
• 4d13309 chore(NODE-4401): enable isolatedModules tsc compiler option (#507)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[github-actions]

Greet Contributors Bot
Thank you for taking your time and effort for your contribution, we truly value it. 🎉

The amazing contributor in this pull request is @snyk-bot