Skip to content

[2.x] Bump org.mongodb:bson from 5.6.5 to 5.13.0 - #2715

Closed
dependabot[bot] wants to merge 1 commit into
2.xfrom
dependabot/maven/2.x/org.mongodb-bson-5.13.0
Closed

dependabot[bot] wants to merge 1 commit into
2.xfrom
dependabot/maven/2.x/org.mongodb-bson-5.13.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps org.mongodb:bson from 5.6.5 to 5.13.0.

Release notes

Sourced from org.mongodb:bson's releases.

Java Driver 5.13.0 (September 25, 2026)

What's Changed

New Contributors

Full Changelog: mongodb/mongo-java-driver@r5.12.0...r5.13.0

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/languages/java/mongodb-hibernate/upcoming/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Java Driver 5.12.0 (September 17, 2026)

What's Changed

Full Changelog: mongodb/mongo-java-driver@r5.11.0...r5.12.0

Intelligent Workload Management (IWM)

Added support for MongoDB 9.0's Intelligent Workload Management (IWM). The driver now gracefully handles write-blocking scenarios and optimizes connection establishment during high-load conditions to maintain application availability.

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/languages/java/mongodb-hibernate/upcoming/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Java Driver 5.11.1 (September 10, 2026)

What's Changed

[!WARNING] Starting from driver version 3.3.0, an improper neutralization of a query operator in the GridFS delete methods allowed unintended data deletion.

... (truncated)

Commits
  • f949913 Version: bump 5.13.0
  • 9174214 JAVA-6235 Add SRV allow hosts option to legacy driver (#2065)
  • ee2c0ba JAVA-6235: Configurable DNS domain validation for SRV records (#2054)
  • 551f88b JAVA-6312 Increase testConnectionPoolBackpressure completion time on CI (#2062)
  • ff74470 build(deps): bump testing/resources/specifications from 92b3c0b to `529a2dd...
  • 3e75708 Version: bump 5.13.0-SNAPSHOT
  • f0bc4cb Update the specifications submodule from d4d0cdf to 92b3c0b to match the `m...
  • dbcd762 Remove a TODO-BACKPRESSURE comment because it is no longer relevant
  • 795f7ce Introduce temporary fallback scheduler into DefaultAsyncClientExecutor (#2056)
  • 71c3f6e Add baseBackoffMS support (#2052)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.mongodb:bson](https://github.com/mongodb/mongo-java-driver) from 5.6.5 to 5.13.0.
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.5...r5.13.0)

---
updated-dependencies:
- dependency-name: org.mongodb:bson
  dependency-version: 5.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 2, 2026

Copy link
Copy Markdown
Contributor Author

Looks like org.mongodb:bson is no longer being updated by Dependabot, so this is no longer needed.

@jmartisk jmartisk closed this Oct 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 2, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/maven/2.x/org.mongodb-bson-5.13.0 branch October 2, 2026 09:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant