PYTHON-5288: [v4.12] SRV hostname validation fails when resolver and resolved hostnames are identical with three domain levels by @blink1073 in mongodb/mongo-python-driver#2276
PyMongo 4.16 brings a number of changes including:
Removed invalid documents from :class:bson.errors.InvalidDocument error messages as
doing so may leak sensitive user data.
Instead, invalid documents are stored in :attr:bson.errors.InvalidDocument.document.
PyMongo now requires dnspython>=2.6.1, since dnspython 1.0 is no longer maintained.
The minimum version is 2.6.1 to account for CVE-2023-29483 <https://www.cve.org/CVERecord?id=CVE-2023-29483>_.
Removed support for Eventlet.
Eventlet is actively being sunset by its maintainers and has compatibility issues with PyMongo's dnspython dependency.
Use Zstandard support from the standard library for Python 3.14+, and use backports.zstd for older versions.
Fixed return type annotation for find_one_and_* methods on :class:~pymongo.asynchronous.collection.AsyncCollection
and :class:~pymongo.synchronous.collection.Collection to include None.
Added support for NumPy 1D-arrays in :class:bson.binary.BinaryVector.
Prevented :class:~pymongo.encryption.ClientEncryption from loading the crypt
shared library to fix "MongoCryptError: An existing crypt_shared library is
loaded by the application" unless the linked library search path is set.
Changes in Version 4.15.5 (2025/12/02)
Version 4.15.5 is a bug fix release.
Fixed a bug that could cause AutoReconnect("connection pool paused") errors when cursors fetched more documents from the database after SDAM heartbeat failures.
Changes in Version 4.15.4 (2025/10/21)
Version 4.15.4 is a bug fix release.
Relaxed the callback type of :meth:~pymongo.asynchronous.client_session.AsyncClientSession.with_transaction to allow the broader Awaitable type rather than only Coroutine objects.
Added the missing Python 3.14 trove classifier to the package metadata.
Issues Resolved
...............
See the PyMongo 4.15.4 release notes in JIRA_ for the list of resolved issues
in this release.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/open-webui/open-webui/pull/22055
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 3/1/2026
**Status:** ❌ Closed
**Base:** `dev` ← **Head:** `dependabot/uv/dev/pymongo-4.16.0`
---
### 📝 Commits (1)
- [`97943c4`](https://github.com/open-webui/open-webui/commit/97943c43146e95d2841c63dfac1b2d3ce6016f33) chore(deps): bump pymongo from 4.10.1 to 4.16.0
### 📊 Changes
**1 file changed** (+1385 additions, -1028 deletions)
<details>
<summary>View changed files</summary>
📝 `uv.lock` (+1385 -1028)
</details>
### 📄 Description
Bumps [pymongo](https://github.com/mongodb/mongo-python-driver) from 4.10.1 to 4.16.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/mongodb/mongo-python-driver/releases">pymongo's releases</a>.</em></p>
<blockquote>
<h2>PyMongo 4.16.0</h2>
<p>Community notes: <!-- raw HTML omitted --></p>
<h2>PyMongo 4.15.5</h2>
<p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-15-5-released/332185">https://www.mongodb.com/community/forums/t/pymongo-4-15-5-released/332185</a></p>
<h2>PyMongo 4.15.4</h2>
<p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-15-4-released/331292">https://www.mongodb.com/community/forums/t/pymongo-4-15-4-released/331292</a></p>
<h2>PyMongo 4.15.3</h2>
<p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-15-3-released/329778">https://www.mongodb.com/community/forums/t/pymongo-4-15-3-released/329778</a></p>
<h2>PyMongo 4.15.2</h2>
<p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-15-2-released/329543">https://www.mongodb.com/community/forums/t/pymongo-4-15-2-released/329543</a></p>
<h2>PyMongo 4.15.1</h2>
<p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-15-1-released/328837">https://www.mongodb.com/community/forums/t/pymongo-4-15-1-released/328837</a></p>
<h2>PyMongo 4.15.0</h2>
<p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-15-released/328574">https://www.mongodb.com/community/forums/t/pymongo-4-15-released/328574</a></p>
<h2>PyMongo 4.14.1</h2>
<p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-14-1-released/327511">https://www.mongodb.com/community/forums/t/pymongo-4-14-1-released/327511</a></p>
<h2>PyMongo 4.14.0</h2>
<p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-14-released/326906">https://www.mongodb.com/community/forums/t/pymongo-4-14-released/326906</a></p>
<h2>PyMongo 4.13.2</h2>
<p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-13-2-released/323705">https://www.mongodb.com/community/forums/t/pymongo-4-13-2-released/323705</a></p>
<h2>PyMongo 4.13.1</h2>
<p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-13-1-released/323356">https://www.mongodb.com/community/forums/t/pymongo-4-13-1-released/323356</a></p>
<h2>PyMongo 4.13.0</h2>
<p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-13-0-released/321391">https://www.mongodb.com/community/forums/t/pymongo-4-13-0-released/321391</a>.</p>
<h2>PyMongo 4.12.1</h2>
<p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-12-1-released/320326">https://www.mongodb.com/community/forums/t/pymongo-4-12-1-released/320326</a></p>
<h2>What's Changed</h2>
<ul>
<li>PYTHON-5288: [v4.12] SRV hostname validation fails when resolver and resolved hostnames are identical with three domain levels by <a href="https://github.com/blink1073"><code>@blink1073</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2276">mongodb/mongo-python-driver#2276</a></li>
<li>PYTHON-5297 [v4.12] AsyncMongoClient connection error causes UnboundLocalError by <a href="https://github.com/blink1073"><code>@blink1073</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2277">mongodb/mongo-python-driver#2277</a></li>
<li>PYTHON-5295 [v4.12] Update lockfile for compat with older versions of uv by <a href="https://github.com/blink1073"><code>@blink1073</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2278">mongodb/mongo-python-driver#2278</a></li>
<li>PYTHON-5310 [v4.12] Fix uri_parser AttributeError when used directly (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2283">#2283</a>) by <a href="https://github.com/ShaneHarvey"><code>@ShaneHarvey</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2302">mongodb/mongo-python-driver#2302</a></li>
<li>PYTHON-5314 [v4.12] Fix default imports for modules that worked in v4.8 (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2300">#2300</a>) by <a href="https://github.com/ShaneHarvey"><code>@ShaneHarvey</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2303">mongodb/mongo-python-driver#2303</a></li>
<li>PYTHON-5348 Fix CodeQL Scanning for GitHub Actions (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2308">#2308</a>) [v4.12] by <a href="https://github.com/mongodb-drivers-pr-bot"><code>@mongodb-drivers-pr-bot</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2310">mongodb/mongo-python-driver#2310</a></li>
<li>PYTHON-5212 [v4.12] Do not hold Topology lock while resetting pool by <a href="https://github.com/blink1073"><code>@blink1073</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2307">mongodb/mongo-python-driver#2307</a></li>
<li>PYTHON-5346: [v4.12] test_init_disconnected_with_srv cannot run against sharded Topologies (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2304">#2304</a>) by <a href="https://github.com/NoahStapp"><code>@NoahStapp</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2309">mongodb/mongo-python-driver#2309</a></li>
<li>PYTHON-5306: [v4.12] - Fix use of public MongoClient attributes before connection (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2285">#2285</a>) by <a href="https://github.com/NoahStapp"><code>@NoahStapp</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2311">mongodb/mongo-python-driver#2311</a></li>
<li>PYTHON-5336 Added VECTOR_SUBTYPE line to API docs (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2313">#2313</a>) [v4.12] by <a href="https://github.com/mongodb-drivers-pr-bot"><code>@mongodb-drivers-pr-bot</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2314">mongodb/mongo-python-driver#2314</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst">pymongo's changelog</a>.</em></p>
<blockquote>
<h2>Changes in Version 4.16.0 (2026/01/07)</h2>
<p>PyMongo 4.16 brings a number of changes including:</p>
<ul>
<li>Removed invalid documents from :class:<code>bson.errors.InvalidDocument</code> error messages as
doing so may leak sensitive user data.
Instead, invalid documents are stored in :attr:<code>bson.errors.InvalidDocument.document</code>.</li>
<li>PyMongo now requires <code>dnspython>=2.6.1</code>, since <code>dnspython</code> 1.0 is no longer maintained.
The minimum version is <code>2.6.1</code> to account for <code>CVE-2023-29483 <https://www.cve.org/CVERecord?id=CVE-2023-29483></code>_.</li>
<li>Removed support for Eventlet.
Eventlet is actively being sunset by its maintainers and has compatibility issues with PyMongo's dnspython dependency.</li>
<li>Use Zstandard support from the standard library for Python 3.14+, and use <code>backports.zstd</code> for older versions.</li>
<li>Fixed return type annotation for <code>find_one_and_*</code> methods on :class:<code>~pymongo.asynchronous.collection.AsyncCollection</code>
and :class:<code>~pymongo.synchronous.collection.Collection</code> to include <code>None</code>.</li>
<li>Added support for NumPy 1D-arrays in :class:<code>bson.binary.BinaryVector</code>.</li>
<li>Prevented :class:<code>~pymongo.encryption.ClientEncryption</code> from loading the crypt
shared library to fix "MongoCryptError: An existing crypt_shared library is
loaded by the application" unless the linked library search path is set.</li>
</ul>
<h2>Changes in Version 4.15.5 (2025/12/02)</h2>
<p>Version 4.15.5 is a bug fix release.</p>
<ul>
<li>Fixed a bug that could cause <code>AutoReconnect("connection pool paused")</code> errors when cursors fetched more documents from the database after SDAM heartbeat failures.</li>
</ul>
<h2>Changes in Version 4.15.4 (2025/10/21)</h2>
<p>Version 4.15.4 is a bug fix release.</p>
<ul>
<li>Relaxed the callback type of :meth:<code>~pymongo.asynchronous.client_session.AsyncClientSession.with_transaction</code> to allow the broader Awaitable type rather than only Coroutine objects.</li>
<li>Added the missing Python 3.14 trove classifier to the package metadata.</li>
</ul>
<p>Issues Resolved
...............</p>
<p>See the <code>PyMongo 4.15.4 release notes in JIRA</code>_ for the list of resolved issues
in this release.</p>
<p>.. _PyMongo 4.15.4 release notes in JIRA: <a href="https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=47237">https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=47237</a></p>
<h2>Changes in Version 4.15.3 (2025/10/07)</h2>
<p>Version 4.15.3 is a bug fix release.</p>
<ul>
<li>Fixed a memory leak when raising :class:<code>bson.errors.InvalidDocument</code> with C extensions.</li>
<li>Fixed the return type of the :meth:<code>~pymongo.asynchronous.collection.AsyncCollection.distinct</code>,</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/mongodb/mongo-python-driver/commit/32901018ca14d9acb05004a88d65b6ab0b29c877"><code>3290101</code></a> Prepare 4.16.0 release (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2672">#2672</a>)</li>
<li><a href="https://github.com/mongodb/mongo-python-driver/commit/1be94d262dd0281b032b6f9e56d381cac3a7a6d9"><code>1be94d2</code></a> PYTHON-5685 Fix unified spec sync metadata for csot and sessions tests (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2669">#2669</a>)</li>
<li><a href="https://github.com/mongodb/mongo-python-driver/commit/6585d9cb51d5c9b2d85eec4f49b8196612d9e8ee"><code>6585d9c</code></a> PYTHON-2442: Refactor: use _asdict() in _options_dict() (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2670">#2670</a>)</li>
<li><a href="https://github.com/mongodb/mongo-python-driver/commit/fdb1f7ea4abe128ae4e59e3d063fd95d7daaa964"><code>fdb1f7e</code></a> PYTHON-5677 Prevent ClientEncryption from loading crypt shared library (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2659">#2659</a>)</li>
<li><a href="https://github.com/mongodb/mongo-python-driver/commit/0cd9763423b85cd37779ea934bf7b1f8be8bbf8e"><code>0cd9763</code></a> Bump zizmorcore/zizmor-action from cb3d8e846e148d1111d90b03375b9c03deceda37 t...</li>
<li><a href="https://github.com/mongodb/mongo-python-driver/commit/2f263d4d3f11eb4a2b32ace467fd2767c371f4d7"><code>2f263d4</code></a> PYTHON-5680 Fix handling of expectedDocuments in Unified Test Runner (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2665">#2665</a>)</li>
<li><a href="https://github.com/mongodb/mongo-python-driver/commit/e9658b2406232b6bd6ac1d961b368142f8819479"><code>e9658b2</code></a> Add 4.15.5 release date to changelog (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2666">#2666</a>)</li>
<li><a href="https://github.com/mongodb/mongo-python-driver/commit/10dd20405ba19c643a1b305ff84f742b19c40daf"><code>10dd204</code></a> Update coverage[toml] requirement from <=7.10.6,>=5 to >=5,<=7.10.7 (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2662">#2662</a>)</li>
<li><a href="https://github.com/mongodb/mongo-python-driver/commit/130067799cc671d4dcc2f34dafff73c4ef5ddeaf"><code>1300677</code></a> [Spec Resync] 12-22-2025 (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2663">#2663</a>)</li>
<li><a href="https://github.com/mongodb/mongo-python-driver/commit/18c1f142b5b3fd179a677b2736332dc17770b7c2"><code>18c1f14</code></a> PYTHON-5529 Introduce optin setting to await for MinPoolSize population (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2664">#2664</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/mongodb/mongo-python-driver/compare/4.10.1...4.16.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-webui/pull/22055
Author: @dependabot[bot]
Created: 3/1/2026
Status: ❌ Closed
Base:
dev← Head:dependabot/uv/dev/pymongo-4.16.0📝 Commits (1)
97943c4chore(deps): bump pymongo from 4.10.1 to 4.16.0📊 Changes
1 file changed (+1385 additions, -1028 deletions)
View changed files
📝
uv.lock(+1385 -1028)📄 Description
Bumps pymongo from 4.10.1 to 4.16.0.
Release notes
Sourced from pymongo's releases.
... (truncated)
Changelog
Sourced from pymongo's changelog.
... (truncated)
Commits
3290101Prepare 4.16.0 release (#2672)1be94d2PYTHON-5685 Fix unified spec sync metadata for csot and sessions tests (#2669)6585d9cPYTHON-2442: Refactor: use _asdict() in _options_dict() (#2670)fdb1f7ePYTHON-5677 Prevent ClientEncryption from loading crypt shared library (#2659)0cd9763Bump zizmorcore/zizmor-action from cb3d8e846e148d1111d90b03375b9c03deceda37 t...2f263d4PYTHON-5680 Fix handling of expectedDocuments in Unified Test Runner (#2665)e9658b2Add 4.15.5 release date to changelog (#2666)10dd204Update coverage[toml] requirement from <=7.10.6,>=5 to >=5,<=7.10.7 (#2662)1300677[Spec Resync] 12-22-2025 (#2663)18c1f14PYTHON-5529 Introduce optin setting to await for MinPoolSize population (#2664)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.