Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-pymongo for openSUSE:Factory
checked in at 2026-09-17 17:00:01
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-pymongo (Old)
and /work/SRC/openSUSE:Factory/.python-pymongo.new.383539 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-pymongo"
Thu Sep 17 17:00:01 2026 rev:52 rq:1378560 version:4.18.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-pymongo/python-pymongo.changes
2026-08-09 21:37:46.367213619 +0200
+++
/work/SRC/openSUSE:Factory/.python-pymongo.new.383539/python-pymongo.changes
2026-09-17 17:00:12.515099739 +0200
@@ -1,0 +2,30 @@
+Mon Sep 14 07:19:43 UTC 2026 - Nico Krapp <[email protected]>
+
+- Update to 4.18.1 (fixes CVE-2026-88029 (bsc#1280073)):
+ * Fixed a bug where GridFS delete methods matched the file ID inexactly.
+ GridFS delete and delete_many now use an exact match for the file ID.
+- Update to 4.18.0:
+ * Dropped support for MongoDB 4.2. Added support for MongoDB 9.0.
+ * Improved performance for MongoDB 9.0’s Intelligent Workload Management
+ (IWM) by only retrying overload errors when expected to not worsen
+ server conditions.
+ * Added general availability support for Queryable Encryption prefix, suffix,
+ and substring queries against MongoDB 9.0+(requires libmongocrypt 1.20.0
+ or later).
+ * Added srvAllowedHostsSuffix as a URI option and keyword argument to
+ MongoClient. When connecting via mongodb+srv:// , this option overrides the
+ default requirement that SRV-returned hosts share the same parent domain as
+ the seed hostname, allowing hosts under a different domain suffix to be
+ accepted. The suffix must not be a public suffix (per the Public Suffix
+ List).
+ * Improved TLS connection performance by reusing TLS sessions across
+ connections to the same server.
+ * PyPy support is deprecated and will be removed in a future release.
+ * Breaking changes:
+ * Aggregation helpers now raise ConfigurationError when passed an aggregate
+ or pipeline keyword argument. Previously these silently replaced the
+ target namespace and pipeline.
+ * operation_id is now stable across a logical operation’s retry attempts
+ and no longer equals the per-attempt request_id.
+
+-------------------------------------------------------------------
Old:
----
pymongo-4.17.0.tar.gz
New:
----
pymongo-4.18.1.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-pymongo.spec ++++++
--- /var/tmp/diff_new_pack.w1c5cu/_old 2026-09-17 17:00:13.700149400 +0200
+++ /var/tmp/diff_new_pack.w1c5cu/_new 2026-09-17 17:00:13.704149567 +0200
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-pymongo
-Version: 4.17.0
+Version: 4.18.1
Release: 0
Summary: Python driver for MongoDB
License: Apache-2.0
@@ -30,6 +30,7 @@
BuildRequires: %{python_module dnspython >= 2.6.1}
BuildRequires: %{python_module hatch-requirements-txt}
BuildRequires: %{python_module hatch_vcs}
+BuildRequires: %{python_module numpy}
BuildRequires: %{python_module pip}
BuildRequires: %{python_module pytest-asyncio >= 0.24.0}
BuildRequires: %{python_module pytest}
++++++ pymongo-4.17.0.tar.gz -> pymongo-4.18.1.tar.gz ++++++
++++ 90577 lines of diff (skipped)
