Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps-dev): bump pymongo from 4.7.3 to 4.10.1 #953

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 7, 2024

Bumps pymongo from 4.7.3 to 4.10.1.

Release notes

Sourced from pymongo's releases.

PyMongo 4.10.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-10-1-released/299573

PyMongo 4.10.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-10-0-released/299474

PyMongo 4.9.2

  • Fixed a bug where pymongo.asynchronous.mongo_client.AsyncMongoClient could deadlock.
  • Fixed a bug where PyMongo could fail to import on Windows if asyncio is misconfigured.
  • Fixed a bug where pymongo.results.UpdateResult.did_upsert would raise a TypeError.

PyMongo 4.9.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-9-released/297833

PyMongo 4.8.0

Changes in Version 4.8.0

PyMongo 4.8 brings a number of improvements including:

  • The handshake metadata for "os.name" on Windows has been simplified to "Windows" to improve import time.
  • The repr of bson.binary.Binary is now redacted when the subtype is SENSITIVE_SUBTYPE(8).
  • Secure Software Development Life Cycle automation for release process. GitHub Releases now include a Software Bill of Materials, and signature files corresponding to the distribution files released on PyPI.
  • Fixed a bug in change streams where both startAtOperationTime and resumeToken could be added to a retry attempt, which caused the retry to fail.
  • Fallback to stdlib ssl module when pyopenssl import fails with AttributeError.
  • Improved performance of MongoClient operations, especially when many operations are being run concurrently.

Unavoidable breaking changes

  • Since we are now using hatch as our build backend, we no longer have a usable setup.py file and require installation using pip. Attempts to invoke the setup.py file will raise an exception. Additionally, pip >= 21.3 is now required for editable installs.

Issues Resolved

See the PyMongo 4.8 release notes in JIRA for the list of resolved issues in this release.


Full Changelog: mongodb/mongo-python-driver@4.7.1...4.8.0

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.10.1

Version 4.10.1 is a bug fix release.

  • Fixed a bug where :meth:~pymongo.results.UpdateResult.did_upsert would raise a TypeError.
  • Fixed Binary BSON subtype (9) support on big-endian operating systems (such as zSeries).

Issues Resolved ...............

See the PyMongo 4.10.1 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.10.1 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=40788

Changes in Version 4.10.0

  • Added provisional (BETA) support for a new Binary BSON subtype (9) used for efficient storage and retrieval of vectors: densely packed arrays of numbers, all of the same type. This includes new methods :meth:~bson.binary.Binary.from_vector and :meth:~bson.binary.Binary.as_vector.
  • Added C extension use to client metadata, for example: {"driver": {"name": "PyMongo|c", "version": "4.10.0"}, ...}
  • Fixed a bug where :class:~pymongo.asynchronous.mongo_client.AsyncMongoClient could deadlock.
  • Fixed a bug where PyMongo could fail to import on Windows if asyncio is misconfigured.

Issues Resolved ...............

See the PyMongo 4.10 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.10 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=40553

Changes in Version 4.9.2

  • Fixed a bug where :class:~pymongo.asynchronous.mongo_client.AsyncMongoClient could deadlock.
  • Fixed a bug where PyMongo could fail to import on Windows if asyncio is misconfigured.
  • Fixed a bug where :meth:~pymongo.results.UpdateResult.did_upsert would raise a TypeError.

Issues Resolved ...............

See the PyMongo 4.9.2 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.9.2 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=40732

... (truncated)

Commits
  • 77cd7ab BUMP 4.10.1
  • 1c28430 PYTHON-4808 Add changelog for 4.10.1 (#1890)
  • 7848feb PYTHON-4786 - Fix UpdateResult.did_upsert TypeError (#1878)
  • 0279407 PYTHON-4806 Fix expected metadata in mockupdb tests (#1888)
  • 7fbeca9 [PYTHON-4803] Big endian fix for binary bson vectors (#1885)
  • bfba548 PYTHON-4789 Migrate test_retryable_reads.py to async (#1877)
  • 8791aa0 PYTHON-4790 Migrate test_retryable_writes.py to async (#1876)
  • c0f7810 BUMP 4.11.0.dev0
  • 4713afa BUMP 4.10.0
  • ae6cfd6 [DRIVERS-2926] [PYTHON-4577] BSON Binary Vector Subtype Support (#1813)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 7, 2024
Copy link

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Disclaimer: Experimental PR review

PR Summary

This pull request updates the pymongo dependency from version 4.7.3 to 4.10.1 in the dev dependencies of the langfuse-python project.

  • The CI workflow in .github/workflows/ci.yml includes tests that likely use pymongo, as it's listed in the dev dependencies
  • The dependabot-merge workflow in .github/workflows/dependabot-merge.yml is configured to auto-merge patch updates, which this is not
  • The update includes bug fixes and improvements, such as fixing deadlock issues and improving vector storage support
  • No changes to the project's source files are required for this dependency update

No file(s) reviewed, no comment(s)
Edit PR Review Bot Settings

@dependabot dependabot bot force-pushed the dependabot/pip/pymongo-4.10.1 branch 2 times, most recently from 4890fda to 0b87e94 Compare October 15, 2024 05:43
Copy link

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Disclaimer: Experimental PR review

PR Summary

(updates since last review)

This pull request updates the pymongo dependency from version 4.7.3 to 4.10.1 and includes several changes across the project. Here are the key points to consider:

  • Updated pymongo to version 4.10.1, which includes bug fixes and new features like efficient vector storage support
  • Changed start_date field type from date to datetime in model-related files for more precise timestamp handling
  • Introduced new LlamaIndex instrumentation classes and removed the old LlamaIndexSpanHandler
  • Improved error logging and context management in various parts of the codebase
  • Updated test files to accommodate new features and changes in the LlamaIndex integration

Key changes to review:

  • Verify that the start_date field type change from date to datetime doesn't break existing functionality
  • Ensure that the new LlamaIndex instrumentation classes (LlamaIndexInstrumentor and LlamaIndexEventHandler) are properly integrated and tested
  • Check that the removal of LlamaIndexSpanHandler doesn't negatively impact existing integrations
  • Review the updated OpenAI integration for compatibility with different SDK versions and new features

25 file(s) reviewed, 4 comment(s)
Edit PR Review Bot Settings | Greptile

@dependabot dependabot bot force-pushed the dependabot/pip/pymongo-4.10.1 branch from 0b87e94 to b35aa34 Compare October 16, 2024 05:33
Copy link

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Disclaimer: Experimental PR review

PR Summary

(updates since last review)

This pull request updates the pymongo dependency from version 4.7.3 to 4.10.1 and includes minor changes to the Langfuse SDK, particularly in the Langchain integration.

  • Updated langfuse/callback/langchain.py to handle tools in LLM actions, extending prompts with tool information
  • Modified tests/test_langchain.py to add a new test function for OpenAI function calling with structured tools
  • No changes to model field types or LlamaIndex instrumentation were observed in this update
  • The pymongo update includes bug fixes and new features like efficient vector storage support (Binary BSON subtype 9)

2 file(s) reviewed, no comment(s)
Edit PR Review Bot Settings | Greptile

@dependabot dependabot bot force-pushed the dependabot/pip/pymongo-4.10.1 branch from b35aa34 to b286db2 Compare October 21, 2024 05:48
Copy link

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Disclaimer: Experimental PR review

PR Summary

(updates since last review)

This pull request updates the pymongo dependency from 4.7.3 to 4.10.1 and bumps the package version from 2.52.0 to 2.52.1 in the langfuse-python project.

  • Updated langfuse/version.py to reflect the new package version 2.52.1
  • Modified pyproject.toml to update pymongo dependency to 4.10.1
  • Pymongo update includes bug fixes and new features, such as efficient vector storage support (Binary BSON subtype 9)
  • No changes to the project's source files are required for this dependency update
  • CI workflow in .github/workflows/ci.yml will test the compatibility of the updated pymongo version

2 file(s) reviewed, no comment(s)
Edit PR Review Bot Settings | Greptile

@dependabot dependabot bot force-pushed the dependabot/pip/pymongo-4.10.1 branch from b286db2 to c85469b Compare October 24, 2024 05:27
Copy link

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Disclaimer: Experimental PR review

PR Summary

(updates since last review)

This pull request updates the pymongo dependency from version 4.7.3 to 4.10.1 and includes minor changes to improve the Langfuse SDK's functionality and stability.

  • Added 'DeepInfra' model pattern in langfuse/extract_model.py for better model ID extraction
  • Removed '[BETA]' tag from LlamaIndexInstrumentor class in langfuse/llama_index/_instrumentor.py, indicating increased stability
  • Added deprecation notice for LlamaIndexCallbackHandler in langfuse/llama_index/llama_index.py, recommending LlamaIndexInstrumentor instead
  • Improved error handling in langfuse/openai.py for None responses and safer dict access
  • Bumped package version to 2.52.2 in langfuse/version.py and pyproject.toml

6 file(s) reviewed, 1 comment(s)
Edit PR Review Bot Settings | Greptile

Bumps [pymongo](https://github.com/mongodb/mongo-python-driver) from 4.7.3 to 4.10.1.
- [Release notes](https://github.com/mongodb/mongo-python-driver/releases)
- [Changelog](https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst)
- [Commits](mongodb/mongo-python-driver@4.7.3...4.10.1)

---
updated-dependencies:
- dependency-name: pymongo
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/pymongo-4.10.1 branch from c85469b to d1d458f Compare October 31, 2024 05:26
Copy link

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Disclaimer: Experimental PR review

PR Summary

(updates since last review)

This pull request adds a new data masking feature across the Langfuse Python SDK while updating the pymongo dependency. Here's a concise summary of the key changes:

  • Added new mask parameter to Langfuse client for masking sensitive data in event inputs/outputs
  • Implemented MaskFunction protocol type and masking functionality in TaskManager for secure data handling
  • Added masking support to LlamaIndex instrumentor and handlers for consistent data protection
  • Added test coverage for the new masking functionality in test_core_sdk.py
  • Improved error handling for None values and dict access in OpenAI integration

The changes focus on enhancing data security and privacy features while maintaining backward compatibility.

15 file(s) reviewed, 2 comment(s)
Edit PR Review Bot Settings | Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants