chore(deps): update dependency pymongo to v4 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pymongo	==3.7.1 -> ==4.6.3

GitHub Vulnerability Alerts

CVE-2024-5629

Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the following bytes are not printable UTF-8 the parser throws an exception with a single byte.

---

Release Notes

mongodb/mongo-python-driver (pymongo)

v4.6.3: PyMongo 4.6.3

Compare Source

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-3-release-for-cve-2024-5629/284348

v4.6.2: PyMongo 4.6.2

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-2-released/267404

v4.6.1: PyMongo 4.6.1

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-1-released/255752

v4.6.0: PyMongo 4.6.0

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-0-released/251866

v4.5.0: PyMongo 4.5.0

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-5-0-released/240662

v4.4.1: PyMongo 4.4.1

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-4-1-released/235045

v4.4.0: PyMongo 4.4.0

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-4-released/232211

v4.3.3: PyMongo 4.3.3

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-3-3-release/200145

v4.3.2: PyMongo 4.3.2

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-3-2-released/194266

v4.2.0: PyMongo 4.2.0

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-2-0-released/176012

v4.1.1: PyMongo 4.1.1

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-1-1-released/157895

v4.1.0: PyMongo 4.1.0

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-1-0-released/156029

v4.0.2: PyMongo 4.0.2

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-0-2-released/150457

v4.0.1: PyMongo 4.0.1

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-0-1-released/135979

v4.0: PyMongo 4.0

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-0-released/134677

v3.13.0: PyMongo 3.13.0

Compare Source

Release notes https://www.mongodb.com/community/forums/t/pymongo-3-13-0-released/197141

v3.12.3: PyMongo 3.12.3

Compare Source

Release notes: https://www.mongodb.com/community/forums/t/pymongo-3-12-3-released/135978

v3.12.2

Compare Source

v3.12.1

Compare Source

v3.12.0: PyMongo 3.12.0 - MongoDB 5.0 Support

Compare Source

Release notes: https://developer.mongodb.com/community/forums/t/pymongo-3-12-0-released/115111/

v3.11.4: PyMongo 3.11.4

Compare Source

https://developer.mongodb.com/community/forums/t/pymongo-3-11-4-released/105609

v3.11.3

Compare Source

v3.11.2: PyMongo 3.11.2

Compare Source

Release notes: https://developer.mongodb.com/community/forums/t/pymongo-3-11-2-released/12475

v3.11.1: PyMongo 3.11.1

Compare Source

Release notes: https://developer.mongodb.com/community/forums/t/pymongo-3-11-1-released/11782

v3.11.0

Compare Source

PyMongo 3.11.0 - Add support for MongoDB 4.4

Release notes: https://developer.mongodb.com/community/forums/t/pymongo-3-11-0-released/7371

v3.10.1

Compare Source

Version 3.10.1 fixes the following issues discovered since the release of 3.10.0:

• Fix a TypeError logged to stderr that could be triggered during server maintenance or during pymongo.mongo_client.MongoClient.close().
• Avoid creating new connections during pymongo.mongo_client.MongoClient.close().

Documentation - https://pymongo.readthedocs.io/en/3.10.1/
Changelog - https://pymongo.readthedocs.io/en/3.10.1/changelog.html
Installation - https://pymongo.readthedocs.io/en/3.10.1/installation.html

v3.10.0

Compare Source

Support for Client-Side Field Level Encryption with MongoDB 4.2 and support for Python 3.8.

Documentation - https://pymongo.readthedocs.io/en/3.10.0/
Changelog - https://pymongo.readthedocs.io/en/3.10.0/changelog.html
Installation - https://pymongo.readthedocs.io/en/3.10.0/installation.html

v3.9.0

Compare Source

MongoDB 4.2 support.

Documentation - https://pymongo.readthedocs.io/en/3.9.0/
Changelog - https://pymongo.readthedocs.io/en/3.9.0/changelog.html
Installation - https://pymongo.readthedocs.io/en/3.9.0/installation.html

v3.8.0

Compare Source

v3.7.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "" in timezone US/Eastern, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.