dependabot[bot] opened a new pull request, #19290: URL: https://github.com/apache/pinot/pull/19290
Bumps [org.mongodb:bson](https://github.com/mongodb/mongo-java-driver) from 5.9.2 to 5.10.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mongodb/mongo-java-driver/releases";>org.mongodb:bson's releases</a>.</em></p> <blockquote> <h2>Java Driver 5.10.0 (August 14, 2026)</h2> <h2>What's Changed</h2> <ul> <li>Added <code>$scoreFusion</code> hybrid search stage for combining and normalizing the scores of multiple search pipelines (MongoDB 8.2+) <a href="https://redirect.github.com/mongodb/mongo-java-driver/pull/2024";>#2024</a> by <a href="https://github.com/nhachicha";><code>@nhachicha</code></a></li> <li>Added a fluent builder API for the <code>$score</code> aggregation stage, with normalization, weighting, and score details (MongoDB 8.2+) <a href="https://redirect.github.com/mongodb/mongo-java-driver/pull/2023";>#2023</a> by <a href="https://github.com/strogiyotec";><code>@strogiyotec</code></a></li> <li>Added <code>$vectorSearch</code> support for nested embeddings and arrays of embeddings via <code>parentFilter</code> and <code>nestedOptions</code> <a href="https://redirect.github.com/mongodb/mongo-java-driver/pull/2026";>#2026</a> by <a href="https://github.com/rozza";><code>@rozza</code></a></li> <li>Removed stale <code>@Beta</code> from <code>SearchOptions</code> and <code>VectorSearchOptions</code> in the Java and Scala drivers <a href="https://redirect.github.com/mongodb/mongo-java-driver/pull/2026";>#2026</a> by <a href="https://github.com/rozza";><code>@rozza</code></a></li> <li>Encoded Kotlin <code>ByteArray</code> data class fields as BSON Binary, and added an opt-in <code>ByteArray</code> BSON Binary serializer for <code>bson-kotlinx</code> <a href="https://redirect.github.com/mongodb/mongo-java-driver/pull/2019";>#2019</a> by <a href="https://github.com/rozza";><code>@rozza</code></a></li> <li>Included the fix for <a href="https://www.cve.org/CVERecord?id=CVE-2026-18710";>CVE-2026-18710</a> / <a href="https://jira.mongodb.org/browse/JAVA-6266";>JAVA-6266</a>, where <code>ProxySettings.toString()</code> rendered the SOCKS5 proxy username and password into application logs. First shipped in 5.9.2 <a href="https://redirect.github.com/mongodb/mongo-java-driver/pull/2035";>#2035</a> by <a href="https://github.com/strogiyotec";><code>@strogiyotec</code></a></li> <li><code>ByteArray</code> fields in Kotlin data classes are once again encoded as BSON Binary rather than a BSON array of int32, restoring the behavior from before 5.1.3. Decoding accepts both forms, so documents written by 5.1.3–5.9.x still read back correctly, but newly written documents change BSON type. Review any non-driver consumers of those fields before upgrading. See <a href="https://jira.mongodb.org/browse/JAVA-6224";>JAVA-6224</a></li> </ul> <h2>Verifying artifact signatures</h2> <p>Please refer to <a href="https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/";>https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/</a> for the full procedure.</p> <p>To download and import the public key for verifying signatures, execute</p> <pre><code>gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8 </code></pre> <p><strong>Full Changelog</strong>: <a href="https://github.com/mongodb/mongo-java-driver/compare/r5.9.0...r5.10.0";>https://github.com/mongodb/mongo-java-driver/compare/r5.9.0...r5.10.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mongodb/mongo-java-driver/commit/6acf4b6d54dfb1e38b09423ff5d2164e7fda4b13";><code>6acf4b6</code></a> Version: bump 5.10.0</li> <li><a href="https://github.com/mongodb/mongo-java-driver/commit/09aa01950d6900bbaa078f6f0e17c6a3af83f9cf";><code>09aa019</code></a> Merge commit from fork (<a href="https://redirect.github.com/mongodb/mongo-java-driver/issues/2035";>#2035</a>)</li> <li><a href="https://github.com/mongodb/mongo-java-driver/commit/d7519509dd553669897f06ffa54d635b56702db5";><code>d751950</code></a> Evergreen CI windows fixes</li> <li><a href="https://github.com/mongodb/mongo-java-driver/commit/533b2b6c2f6ae640f8a71bf16e6927ccce7d8cde";><code>533b2b6</code></a> Ensure Kotlin can encode ByteArrays efficiently (<a href="https://redirect.github.com/mongodb/mongo-java-driver/issues/2019";>#2019</a>)</li> <li><a href="https://github.com/mongodb/mongo-java-driver/commit/94863faefd4dddfd0a5c3d33bf9dab21fe216b67";><code>94863fa</code></a> Support $vectorSearch against nested embeddings and arrays of embeddings (<a href="https://redirect.github.com/mongodb/mongo-java-driver/issues/2026";>#2026</a>)</li> <li><a href="https://github.com/mongodb/mongo-java-driver/commit/1b958ae0404e5f42669d2c35a170a47725cb9e50";><code>1b958ae</code></a> JAVA-5990 Hybrid Search Score Fusion (<a href="https://redirect.github.com/mongodb/mongo-java-driver/issues/2024";>#2024</a>)</li> <li><a href="https://github.com/mongodb/mongo-java-driver/commit/dd814f88e4dbd8c2a5ab73d010d07c9fd2e9ecab";><code>dd814f8</code></a> JAVA-6146 Move detail out of the root AGENTS.md into references</li> <li><a href="https://github.com/mongodb/mongo-java-driver/commit/d87d93a8035f8030ba6d95759a8f9da1bc530a64";><code>d87d93a</code></a> Fluent API for $score (<a href="https://redirect.github.com/mongodb/mongo-java-driver/issues/2023";>#2023</a>)</li> <li><a href="https://github.com/mongodb/mongo-java-driver/commit/0956b9fa0ad8b57f11550ddd0658457158262570";><code>0956b9f</code></a> Resolve forwarded type arguments across POJO hierarchy edges (<a href="https://redirect.github.com/mongodb/mongo-java-driver/issues/2014";>#2014</a>)</li> <li><a href="https://github.com/mongodb/mongo-java-driver/commit/cab37d0aa7a564935cd77c0cf8aedb46d5bba5a3";><code>cab37d0</code></a> Improve readability of NettyStreamCloseFutureListenerTest</li> <li>Additional commits viewable in <a href="https://github.com/mongodb/mongo-java-driver/compare/r5.9.2...r5.10.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
