PYTHON-5896 - [pymongocrypt] Bundle libmongocrypt 1.20.0 (#1197)

* PYTHON-5896 - [pymongocrypt] Bundle libmongocrypt 1.19.2

* Update binding + sbom

* Formatting

* Bundle 1.20.0

* SS review

Author: NoahStapp

bindings/python/pymongocrypt/binding.py

@@ -431,6 +431,10 @@ def _parse_version(version):
  * the path string is literal "$SYSTEM", then libmongocrypt will defer to the
  * system's library resolution mechanism to find the crypt_shared library.
  *
+ * @warning Use of "$SYSTEM" will search system directories for the
+ * mongo_crypt_v1.(dll,so,dylib) following the search behavior of LoadLibrary
+ * on Windows and dlopen on Unix. Ensure secure deployment of the library.
+ *
  * @note If no crypt_shared dynamic library is found in any of the directories
  * specified by the search paths loaded here, @ref mongocrypt_init() will still
  * succeed and continue to operate without crypt_shared.
@@ -687,7 +691,8 @@ def _parse_version(version):
 /// String constant for setopt_algorithm "Indexed" explicit encryption
 /// String constant for setopt_algorithm "Unindexed" explicit encryption
 // DEPRECATED: support "RangePreview" has been removed in favor of "range".
-/// NOTE: "textPreview" is experimental only and may be removed in a future non-major release.
+/// DEPRECATED: "textPreview" has been removed. Use "string".
+// String constant for setopt_algorithm "string" explicit encryption.
 
 /**
  * Identify the AWS KMS master key to use for creating a data key.
@@ -1485,9 +1490,8 @@ def _parse_version(version):
 bool mongocrypt_ctx_setopt_algorithm_range(mongocrypt_ctx_t *ctx, mongocrypt_binary_t *opts);
 
 /**
- * Set options for explicit encryption with the "textPreview" algorithm.
+ * Set options for explicit encryption with the "string" algorithm.
  *
- * NOTE: "textPreview" is experimental only and may be removed in a future non-major release.
  * @p opts is a BSON document of the form:
  * {
  *   "caseSensitive": bool,
@@ -1508,6 +1512,8 @@ def _parse_version(version):
  * }
  *
  * "prefix" and "suffix" can both be set.
+ *
+ * NOTE: Driver public APIs should use the name "string" rather than "text" to refer to options.
  */
 bool mongocrypt_ctx_setopt_algorithm_text(mongocrypt_ctx_t *ctx, mongocrypt_binary_t *opts);
 
@@ -1522,9 +1528,9 @@ def _parse_version(version):
 
 /// String constants for setopt_query_type
 // DEPRECATED: Support "rangePreview" has been removed in favor of "range".
-/// NOTE: "substringPreview" is experimental and may be removed in a future non-major release.
-/// NOTE: "suffixPreview" is experimental and may be removed in a future non-major release.
-/// NOTE: "prefixPreview" is experimental and may be removed in a future non-major release.
+/// DEPRECATED: Support for "substringPreview" has been removed in favor of "substring"
+/// DEPRECATED: Support for "suffixPreview" has been removed in favor of "suffix"
+/// DEPRECATED: Support for "prefixPreview" has been removed in favor of "prefix"
 
 """
 )

bindings/python/sbom.json

@@ -1,31 +1,31 @@
 {
   "components": [
     {
-      "bom-ref": "pkg:github/mongodb/libmongocrypt@1.18.2",
+      "bom-ref": "pkg:github/mongodb/libmongocrypt@1.20.0",
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://github.com/mongodb/libmongocrypt/archive/1.18.2.tar.gz"
+          "url": "https://github.com/mongodb/libmongocrypt/archive/1.20.0.tar.gz"
         },
         {
           "type": "website",
-          "url": "https://github.com/mongodb/libmongocrypt/tree/1.18.2"
+          "url": "https://github.com/mongodb/libmongocrypt/tree/1.20.0"
         }
       ],
       "group": "mongodb",
       "name": "libmongocrypt",
-      "purl": "pkg:github/mongodb/libmongocrypt@1.18.2",
+      "purl": "pkg:github/mongodb/libmongocrypt@1.20.0",
       "type": "library",
-      "version": "1.18.2"
+      "version": "1.20.0"
     }
   ],
   "dependencies": [
     {
-      "ref": "pkg:github/mongodb/libmongocrypt@1.18.2"
+      "ref": "pkg:github/mongodb/libmongocrypt@1.20.0"
     }
   ],
   "metadata": {
-    "timestamp": "2026-06-03T00:00:00.000000+00:00",
+    "timestamp": "2026-06-30T18:17:42.887189+00:00",
     "tools": [
       {
         "externalReferences": [
@@ -68,7 +68,7 @@
       }
     ]
   },
-  "serialNumber": "urn:uuid:fb7d4662-fe2d-495c-944f-034982ccc517",
+  "serialNumber": "urn:uuid:fecaed8a-4f6b-41bf-87b1-977d29e6f44b",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",

bindings/python/scripts/libmongocrypt-version.txt

@@ -1 +1 @@
-1.18.2
+1.20.0

src/mongocrypt.h

@@ -1606,7 +1606,7 @@ bool mongocrypt_setopt_key_expiration(mongocrypt_t *crypt, uint64_t cache_expira
 /// DEPRECATED: Support for "suffixPreview" has been removed in favor of "suffix"
 #define MONGOCRYPT_QUERY_TYPE_SUFFIXPREVIEW_DEPRECATED_STR "suffixPreview"
 #define MONGOCRYPT_QUERY_TYPE_SUFFIX_STR "suffix"
-/// DEPRECATED: Support for "prefixPreview" has been removed in favor of "suffix"
+/// DEPRECATED: Support for "prefixPreview" has been removed in favor of "prefix"
 #define MONGOCRYPT_QUERY_TYPE_PREFIXPREVIEW_DEPRECATED_STR "prefixPreview"
 #define MONGOCRYPT_QUERY_TYPE_PREFIX_STR "prefix"