[PR #22055] [CLOSED] chore(deps): bump pymongo from 4.10.1 to 4.16.0 #26448

Closed
opened 2026-04-20 06:29:58 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/22055
Author: @dependabot[bot]
Created: 3/1/2026
Status: Closed

Base: devHead: dependabot/uv/dev/pymongo-4.16.0


📝 Commits (1)

  • 97943c4 chore(deps): bump pymongo from 4.10.1 to 4.16.0

📊 Changes

1 file changed (+1385 additions, -1028 deletions)

View changed files

📝 uv.lock (+1385 -1028)

📄 Description

Bumps pymongo from 4.10.1 to 4.16.0.

Release notes

Sourced from pymongo's releases.

PyMongo 4.16.0

Community notes:

PyMongo 4.15.5

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-5-released/332185

PyMongo 4.15.4

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-4-released/331292

PyMongo 4.15.3

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-3-released/329778

PyMongo 4.15.2

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-2-released/329543

PyMongo 4.15.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-1-released/328837

PyMongo 4.15.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-released/328574

PyMongo 4.14.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-14-1-released/327511

PyMongo 4.14.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-14-released/326906

PyMongo 4.13.2

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-13-2-released/323705

PyMongo 4.13.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-13-1-released/323356

PyMongo 4.13.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-13-0-released/321391.

PyMongo 4.12.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-12-1-released/320326

What's Changed

... (truncated)

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.16.0 (2026/01/07)

PyMongo 4.16 brings a number of changes including:

  • Removed invalid documents from :class:bson.errors.InvalidDocument error messages as doing so may leak sensitive user data. Instead, invalid documents are stored in :attr:bson.errors.InvalidDocument.document.
  • PyMongo now requires dnspython>=2.6.1, since dnspython 1.0 is no longer maintained. The minimum version is 2.6.1 to account for CVE-2023-29483 <https://www.cve.org/CVERecord?id=CVE-2023-29483>_.
  • Removed support for Eventlet. Eventlet is actively being sunset by its maintainers and has compatibility issues with PyMongo's dnspython dependency.
  • Use Zstandard support from the standard library for Python 3.14+, and use backports.zstd for older versions.
  • Fixed return type annotation for find_one_and_* methods on :class:~pymongo.asynchronous.collection.AsyncCollection and :class:~pymongo.synchronous.collection.Collection to include None.
  • Added support for NumPy 1D-arrays in :class:bson.binary.BinaryVector.
  • Prevented :class:~pymongo.encryption.ClientEncryption from loading the crypt shared library to fix "MongoCryptError: An existing crypt_shared library is loaded by the application" unless the linked library search path is set.

Changes in Version 4.15.5 (2025/12/02)

Version 4.15.5 is a bug fix release.

  • Fixed a bug that could cause AutoReconnect("connection pool paused") errors when cursors fetched more documents from the database after SDAM heartbeat failures.

Changes in Version 4.15.4 (2025/10/21)

Version 4.15.4 is a bug fix release.

  • Relaxed the callback type of :meth:~pymongo.asynchronous.client_session.AsyncClientSession.with_transaction to allow the broader Awaitable type rather than only Coroutine objects.
  • Added the missing Python 3.14 trove classifier to the package metadata.

Issues Resolved ...............

See the PyMongo 4.15.4 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.15.4 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=47237

Changes in Version 4.15.3 (2025/10/07)

Version 4.15.3 is a bug fix release.

  • Fixed a memory leak when raising :class:bson.errors.InvalidDocument with C extensions.
  • Fixed the return type of the :meth:~pymongo.asynchronous.collection.AsyncCollection.distinct,

... (truncated)

Commits
  • 3290101 Prepare 4.16.0 release (#2672)
  • 1be94d2 PYTHON-5685 Fix unified spec sync metadata for csot and sessions tests (#2669)
  • 6585d9c PYTHON-2442: Refactor: use _asdict() in _options_dict() (#2670)
  • fdb1f7e PYTHON-5677 Prevent ClientEncryption from loading crypt shared library (#2659)
  • 0cd9763 Bump zizmorcore/zizmor-action from cb3d8e846e148d1111d90b03375b9c03deceda37 t...
  • 2f263d4 PYTHON-5680 Fix handling of expectedDocuments in Unified Test Runner (#2665)
  • e9658b2 Add 4.15.5 release date to changelog (#2666)
  • 10dd204 Update coverage[toml] requirement from <=7.10.6,>=5 to >=5,<=7.10.7 (#2662)
  • 1300677 [Spec Resync] 12-22-2025 (#2663)
  • 18c1f14 PYTHON-5529 Introduce optin setting to await for MinPoolSize population (#2664)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/22055 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/1/2026 **Status:** ❌ Closed **Base:** `dev` ← **Head:** `dependabot/uv/dev/pymongo-4.16.0` --- ### 📝 Commits (1) - [`97943c4`](https://github.com/open-webui/open-webui/commit/97943c43146e95d2841c63dfac1b2d3ce6016f33) chore(deps): bump pymongo from 4.10.1 to 4.16.0 ### 📊 Changes **1 file changed** (+1385 additions, -1028 deletions) <details> <summary>View changed files</summary> 📝 `uv.lock` (+1385 -1028) </details> ### 📄 Description Bumps [pymongo](https://github.com/mongodb/mongo-python-driver) from 4.10.1 to 4.16.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mongodb/mongo-python-driver/releases">pymongo's releases</a>.</em></p> <blockquote> <h2>PyMongo 4.16.0</h2> <p>Community notes: <!-- raw HTML omitted --></p> <h2>PyMongo 4.15.5</h2> <p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-15-5-released/332185">https://www.mongodb.com/community/forums/t/pymongo-4-15-5-released/332185</a></p> <h2>PyMongo 4.15.4</h2> <p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-15-4-released/331292">https://www.mongodb.com/community/forums/t/pymongo-4-15-4-released/331292</a></p> <h2>PyMongo 4.15.3</h2> <p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-15-3-released/329778">https://www.mongodb.com/community/forums/t/pymongo-4-15-3-released/329778</a></p> <h2>PyMongo 4.15.2</h2> <p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-15-2-released/329543">https://www.mongodb.com/community/forums/t/pymongo-4-15-2-released/329543</a></p> <h2>PyMongo 4.15.1</h2> <p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-15-1-released/328837">https://www.mongodb.com/community/forums/t/pymongo-4-15-1-released/328837</a></p> <h2>PyMongo 4.15.0</h2> <p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-15-released/328574">https://www.mongodb.com/community/forums/t/pymongo-4-15-released/328574</a></p> <h2>PyMongo 4.14.1</h2> <p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-14-1-released/327511">https://www.mongodb.com/community/forums/t/pymongo-4-14-1-released/327511</a></p> <h2>PyMongo 4.14.0</h2> <p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-14-released/326906">https://www.mongodb.com/community/forums/t/pymongo-4-14-released/326906</a></p> <h2>PyMongo 4.13.2</h2> <p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-13-2-released/323705">https://www.mongodb.com/community/forums/t/pymongo-4-13-2-released/323705</a></p> <h2>PyMongo 4.13.1</h2> <p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-13-1-released/323356">https://www.mongodb.com/community/forums/t/pymongo-4-13-1-released/323356</a></p> <h2>PyMongo 4.13.0</h2> <p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-13-0-released/321391">https://www.mongodb.com/community/forums/t/pymongo-4-13-0-released/321391</a>.</p> <h2>PyMongo 4.12.1</h2> <p>Community notes: <a href="https://www.mongodb.com/community/forums/t/pymongo-4-12-1-released/320326">https://www.mongodb.com/community/forums/t/pymongo-4-12-1-released/320326</a></p> <h2>What's Changed</h2> <ul> <li>PYTHON-5288: [v4.12] SRV hostname validation fails when resolver and resolved hostnames are identical with three domain levels by <a href="https://github.com/blink1073"><code>@​blink1073</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2276">mongodb/mongo-python-driver#2276</a></li> <li>PYTHON-5297 [v4.12] AsyncMongoClient connection error causes UnboundLocalError by <a href="https://github.com/blink1073"><code>@​blink1073</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2277">mongodb/mongo-python-driver#2277</a></li> <li>PYTHON-5295 [v4.12] Update lockfile for compat with older versions of uv by <a href="https://github.com/blink1073"><code>@​blink1073</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2278">mongodb/mongo-python-driver#2278</a></li> <li>PYTHON-5310 [v4.12] Fix uri_parser AttributeError when used directly (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2283">#2283</a>) by <a href="https://github.com/ShaneHarvey"><code>@​ShaneHarvey</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2302">mongodb/mongo-python-driver#2302</a></li> <li>PYTHON-5314 [v4.12] Fix default imports for modules that worked in v4.8 (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2300">#2300</a>) by <a href="https://github.com/ShaneHarvey"><code>@​ShaneHarvey</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2303">mongodb/mongo-python-driver#2303</a></li> <li>PYTHON-5348 Fix CodeQL Scanning for GitHub Actions (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2308">#2308</a>) [v4.12] by <a href="https://github.com/mongodb-drivers-pr-bot"><code>@​mongodb-drivers-pr-bot</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2310">mongodb/mongo-python-driver#2310</a></li> <li>PYTHON-5212 [v4.12] Do not hold Topology lock while resetting pool by <a href="https://github.com/blink1073"><code>@​blink1073</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2307">mongodb/mongo-python-driver#2307</a></li> <li>PYTHON-5346: [v4.12] test_init_disconnected_with_srv cannot run against sharded Topologies (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2304">#2304</a>) by <a href="https://github.com/NoahStapp"><code>@​NoahStapp</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2309">mongodb/mongo-python-driver#2309</a></li> <li>PYTHON-5306: [v4.12] - Fix use of public MongoClient attributes before connection (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2285">#2285</a>) by <a href="https://github.com/NoahStapp"><code>@​NoahStapp</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2311">mongodb/mongo-python-driver#2311</a></li> <li>PYTHON-5336 Added VECTOR_SUBTYPE line to API docs (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2313">#2313</a>) [v4.12] by <a href="https://github.com/mongodb-drivers-pr-bot"><code>@​mongodb-drivers-pr-bot</code></a> in <a href="https://redirect.github.com/mongodb/mongo-python-driver/pull/2314">mongodb/mongo-python-driver#2314</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst">pymongo's changelog</a>.</em></p> <blockquote> <h2>Changes in Version 4.16.0 (2026/01/07)</h2> <p>PyMongo 4.16 brings a number of changes including:</p> <ul> <li>Removed invalid documents from :class:<code>bson.errors.InvalidDocument</code> error messages as doing so may leak sensitive user data. Instead, invalid documents are stored in :attr:<code>bson.errors.InvalidDocument.document</code>.</li> <li>PyMongo now requires <code>dnspython&gt;=2.6.1</code>, since <code>dnspython</code> 1.0 is no longer maintained. The minimum version is <code>2.6.1</code> to account for <code>CVE-2023-29483 &lt;https://www.cve.org/CVERecord?id=CVE-2023-29483&gt;</code>_.</li> <li>Removed support for Eventlet. Eventlet is actively being sunset by its maintainers and has compatibility issues with PyMongo's dnspython dependency.</li> <li>Use Zstandard support from the standard library for Python 3.14+, and use <code>backports.zstd</code> for older versions.</li> <li>Fixed return type annotation for <code>find_one_and_*</code> methods on :class:<code>~pymongo.asynchronous.collection.AsyncCollection</code> and :class:<code>~pymongo.synchronous.collection.Collection</code> to include <code>None</code>.</li> <li>Added support for NumPy 1D-arrays in :class:<code>bson.binary.BinaryVector</code>.</li> <li>Prevented :class:<code>~pymongo.encryption.ClientEncryption</code> from loading the crypt shared library to fix &quot;MongoCryptError: An existing crypt_shared library is loaded by the application&quot; unless the linked library search path is set.</li> </ul> <h2>Changes in Version 4.15.5 (2025/12/02)</h2> <p>Version 4.15.5 is a bug fix release.</p> <ul> <li>Fixed a bug that could cause <code>AutoReconnect(&quot;connection pool paused&quot;)</code> errors when cursors fetched more documents from the database after SDAM heartbeat failures.</li> </ul> <h2>Changes in Version 4.15.4 (2025/10/21)</h2> <p>Version 4.15.4 is a bug fix release.</p> <ul> <li>Relaxed the callback type of :meth:<code>~pymongo.asynchronous.client_session.AsyncClientSession.with_transaction</code> to allow the broader Awaitable type rather than only Coroutine objects.</li> <li>Added the missing Python 3.14 trove classifier to the package metadata.</li> </ul> <p>Issues Resolved ...............</p> <p>See the <code>PyMongo 4.15.4 release notes in JIRA</code>_ for the list of resolved issues in this release.</p> <p>.. _PyMongo 4.15.4 release notes in JIRA: <a href="https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&amp;version=47237">https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&amp;version=47237</a></p> <h2>Changes in Version 4.15.3 (2025/10/07)</h2> <p>Version 4.15.3 is a bug fix release.</p> <ul> <li>Fixed a memory leak when raising :class:<code>bson.errors.InvalidDocument</code> with C extensions.</li> <li>Fixed the return type of the :meth:<code>~pymongo.asynchronous.collection.AsyncCollection.distinct</code>,</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mongodb/mongo-python-driver/commit/32901018ca14d9acb05004a88d65b6ab0b29c877"><code>3290101</code></a> Prepare 4.16.0 release (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2672">#2672</a>)</li> <li><a href="https://github.com/mongodb/mongo-python-driver/commit/1be94d262dd0281b032b6f9e56d381cac3a7a6d9"><code>1be94d2</code></a> PYTHON-5685 Fix unified spec sync metadata for csot and sessions tests (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2669">#2669</a>)</li> <li><a href="https://github.com/mongodb/mongo-python-driver/commit/6585d9cb51d5c9b2d85eec4f49b8196612d9e8ee"><code>6585d9c</code></a> PYTHON-2442: Refactor: use _asdict() in _options_dict() (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2670">#2670</a>)</li> <li><a href="https://github.com/mongodb/mongo-python-driver/commit/fdb1f7ea4abe128ae4e59e3d063fd95d7daaa964"><code>fdb1f7e</code></a> PYTHON-5677 Prevent ClientEncryption from loading crypt shared library (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2659">#2659</a>)</li> <li><a href="https://github.com/mongodb/mongo-python-driver/commit/0cd9763423b85cd37779ea934bf7b1f8be8bbf8e"><code>0cd9763</code></a> Bump zizmorcore/zizmor-action from cb3d8e846e148d1111d90b03375b9c03deceda37 t...</li> <li><a href="https://github.com/mongodb/mongo-python-driver/commit/2f263d4d3f11eb4a2b32ace467fd2767c371f4d7"><code>2f263d4</code></a> PYTHON-5680 Fix handling of expectedDocuments in Unified Test Runner (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2665">#2665</a>)</li> <li><a href="https://github.com/mongodb/mongo-python-driver/commit/e9658b2406232b6bd6ac1d961b368142f8819479"><code>e9658b2</code></a> Add 4.15.5 release date to changelog (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2666">#2666</a>)</li> <li><a href="https://github.com/mongodb/mongo-python-driver/commit/10dd20405ba19c643a1b305ff84f742b19c40daf"><code>10dd204</code></a> Update coverage[toml] requirement from &lt;=7.10.6,&gt;=5 to &gt;=5,&lt;=7.10.7 (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2662">#2662</a>)</li> <li><a href="https://github.com/mongodb/mongo-python-driver/commit/130067799cc671d4dcc2f34dafff73c4ef5ddeaf"><code>1300677</code></a> [Spec Resync] 12-22-2025 (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2663">#2663</a>)</li> <li><a href="https://github.com/mongodb/mongo-python-driver/commit/18c1f142b5b3fd179a677b2736332dc17770b7c2"><code>18c1f14</code></a> PYTHON-5529 Introduce optin setting to await for MinPoolSize population (<a href="https://redirect.github.com/mongodb/mongo-python-driver/issues/2664">#2664</a>)</li> <li>Additional commits viewable in <a href="https://github.com/mongodb/mongo-python-driver/compare/4.10.1...4.16.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pymongo&package-manager=uv&previous-version=4.10.1&new-version=4.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-20 06:29:58 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#26448