Skip to content

build(deps): bump bson from 7.2.0 to 7.3.3 - #480

Merged
flex-development[bot] merged 1 commit into
mainfrom
dependabot/bun/bson-7.3.3
Oct 19, 2026
Merged

flex-development[bot] merged 1 commit into
mainfrom
dependabot/bun/bson-7.3.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps bson from 7.2.0 to 7.3.3.

Release notes

Sourced from bson's releases.

v7.3.3

7.3.3 (2026-09-11)

The MongoDB Node.js team is pleased to announce version 7.3.3 of the bson package!

Release Notes

Fixed BSON.calculateObjectSize infinite hang

Fixed a bug where BSON.calculateObjectSize would hang indefinitely on an object containing a circular reference. The method now throws an exception when a circular reference is detected.

Also a big thank you to @​mcmorisi for his contribution on #912 security warning in EJSON.parse documentation!

Bug Fixes

  • NODE-7696: calculateObjectSize hangs indefinitely on an object containing a circular reference (#926) (f35af5c)

Documentation

We invite you to try the bson library immediately, and report any issues to the NODE project.

v7.3.2

7.3.2 (2026-07-31)

The MongoDB Node.js team is pleased to announce version 7.3.2 of the bson package!

Release Notes

calculateObjectSize() now returns accurate byte counts for Int32 and BSONSymbol

Previously, each Int32 or BSONSymbol value caused a 12-byte overcount.

calculateObjectSize() now yields proper size calculations on ES Map's

This release of js-bson fixes an issue where we were incorrectly considering ES Map objects inside calculateObjectSize. This issue did not impact serialization, just size calculation.

Fixed incorrect date boundary in relaxed EJSON

This release of js-bson fixes an issue where the date boundary for relaxed EJSON was incorrectly set to a date 5 hours after the maximum limit of 10,000 AD.

Fixed an issue with ObjectId initialization in Cloudflare Workers

This release of js-bson fixes an issue where we were making crypto calls during module initialization, which is forbidden by Cloudflare Workers and other environments.

Memory optimization via smaller ObjectIds

... (truncated)

Changelog

Sourced from bson's changelog.

7.3.3 (2026-09-11)

Bug Fixes

  • NODE-7696: calculateObjectSize hangs indefinitely on an object containing a circular reference (#926) (f35af5c)

7.3.2 (2026-07-31)

Bug Fixes

  • NODE-7631: count Int32 and BSONSymbol in calculateObjectSize (#901) (7f948a6)
  • NODE-7645: use the first instant of year 10000 as the relaxed EJSON date bound (#917) (9272c9a)
  • NODE-7646: count ES Map entries in calculateObjectSize (#910) (8d28b12)
  • NODE-7667: remove early initialization from ObjectId (#916) (665286f)

Performance Improvements

  • NODE-6246: store ObjectId bytes as four packed integers (#893) (a84229c)

7.3.1 (2026-06-23)

Bug Fixes

  • NODE-7630: make startup snapshot calls more defensive (#899) (99433cd)

7.3.0 (2026-06-17)

Features

  • NODE-7069: deprecate Long members inapplicable to Timestamp (#887) (c5d1dd8)

Bug Fixes

  • NODE-5937: rewrite deserializeObject as iterative, not recursive (#886) (0231603)
  • NODE-7354: eagerly make Binary sub_type into a number (#858) (5b42c5a)
  • NODE-7436: EJSON.stringify type signature (#870) (c949780)
  • NODE-7575: reset ObjectId state when building startup snapshot (#884) (ba29d33)
  • NODE-7606: restore serializer performance by removing generator-based iteration (#890) (7c4d1aa)
  • NODE-7618: propagate serializing flags to the parsing frames (#891) (a7cee8c)
  • NODE-7619: reject embedded BSON document sizes below minimum valid length (#892) (b43c657)
Commits
  • 7b8f7b7 chore(main): release 7.3.3 (#927)
  • 27f1ef6 test(NODE-7545): update deep_bson.json from mongodb/specifications (#925)
  • 9b58a51 docs(NODE-7668): Add security warning to EJSON.parse documentation (#912)
  • d3f563e chore(NODE-7806): restrict release_notes to PRs from this repository (#929)
  • f35af5c fix(NODE-7696): calculateObjectSize hangs indefinitely on an object containin...
  • 8699bb4 chore(NODE-7672): update dependencies (#922)
  • 8a9085d docs(NODE-7682): add agents file (#915)
  • 9cd2e68 chore(main): release 7.3.2 (#902)
  • 9272c9a fix(NODE-7645): use the first instant of year 10000 as the relaxed EJSON date...
  • 8d28b12 fix(NODE-7646): count ES Map entries in calculateObjectSize (#910)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for bson since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [bson](https://github.com/mongodb/js-bson) from 7.2.0 to 7.3.3.
- [Release notes](https://github.com/mongodb/js-bson/releases)
- [Changelog](https://github.com/mongodb/js-bson/blob/main/HISTORY.md)
- [Commits](mongodb/js-bson@v7.2.0...v7.3.3)

---
updated-dependencies:
- dependency-name: bson
  dependency-version: 7.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added scope:dependencies dependency updates type:build changes to the build system or external dependencies labels Oct 19, 2026
@flex-development
flex-development Bot enabled auto-merge (squash) October 19, 2026 20:45

@flex-development flex-development Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm 👍🏾

@github-project-automation github-project-automation Bot moved this from 🆕 New to 🤩 Approved in @flex-development/sneusers Oct 19, 2026
@flex-development
flex-development Bot merged commit af5a7b7 into main Oct 19, 2026
13 checks passed
@flex-development
flex-development Bot deleted the dependabot/bun/bson-7.3.3 branch October 19, 2026 20:48
@github-project-automation github-project-automation Bot moved this from 🤩 Approved to ✅ Done in @flex-development/sneusers Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

scope:dependencies dependency updates type:build changes to the build system or external dependencies

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

0 participants