chore(deps): update dependency mongodb to v7.2.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
mongodb	7.0.0 → 7.2.0

---

Release Notes

mongodb/node-mongodb-native (mongodb)

v7.2.0

Compare Source

Features

• NODE-7142: Exponential backoff and jitter in retry loops (#​4871) (22c6031)
• NODE-7315: Use BSON ByteUtils instead of Nodejs Buffer (#​4840) (1add538)
• NODE-7335: Create dedicated mocha runner with isolated vm context (#​4876) (a4cba4c)
• NODE-7379: Refactor Crypto to Web Crypto API (#​4862) (ac98f4a)
• NODE-7385: add experimental os runtime adapter (#​4851) (d2ad07f)
• NODE-7441: add ChangeStream.bufferedCount (#​4870) (f7ea421)
• NODE-7452: restrict server deprioritization on replica sets to overload errors (#​4875) (87a3465)
• NODE-7467: make token bucket optional in client backpressure (#​4878) (4fb0a0a)
• NODE-7491: finalize client backpressure implementation for phase 1 rollout (#​4920) (2cc7983)

Bug Fixes

• NODE-7430: throw timeout error when withTransaction retries exceed deadline (#​4897) (16a899d)
• NODE-7459: explicitly call setKeepAlive and setNoDelay on socket (#​4879) (778a2a1)
• NODE-7469: overload retry when retryReads/Writes=false (#​4888) (4157b26)
• NODE-7478: OIDC host allowlist fix (#​4905) (f36b754)

v7.1.1

Compare Source

The MongoDB Node.js team is pleased to announce version 7.1.1 of the mongodb package!

Release Notes

Tighten OIDC ALLOWED_HOSTS wildcard matching

The OIDC ALLOWED_HOSTS wildcard handling has been fixed to require full subdomain/path matches for *. and */ entries, preventing partial suffix matches from being incorrectly accepted.

Fixed TCP keep-alive and no-delay settings not being applied on TLS connections

Due to a Node.js bug, tls.connect() silently ignores keepAlive, keepAliveInitialDelay, and noDelay options passed through its constructor. This could cause idle connections - particularly through cloud load balancers like Azure (240s idle timeout) or AWS PrivateLink/NLB - to be dropped unexpectedly due to missing TCP keep-alive probes.

The driver now explicitly calls setKeepAlive() and setNoDelay() on the socket after creation, ensuring these settings are always applied regardless of whether TLS is used.

Bug Fixes

• NODE-7477: OIDC host allowlist fix (#​4896) (237c9ab)
• NODE-7482: explicitly call setKeepAlive and setNoDelay on socket (#​4900) (b14ba21)

Documentation

• Reference
• API
• Changelog

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

v7.1.0

Compare Source

Features

• NODE-5393: aws4 no longer required for AWS authentication (#​4824) (0f46db8)
• NODE-7121: prevent connection churn on backpressure errors when establishing connections (#​4800) (4cb2b87)
• NODE-7122: exponential backoff between retries in convenient transaction API (#​4765) (e70fdc9)
• NODE-7304: remove usages in src of promisify (#​4799) (761b9bf)
• NODE-7306: Replace global process with import node:process (#​4820) (cc503cb)
• NODE-7310: Replace process.arch with os.arch() (#​4823) (f0af829)
• NODE-7311: Replace process.platform with os.platform() (#​4822) (c58ca1f)
• NODE-7317: use BSON.NumberUtils to determine endianness (#​4808) (4e9467e)
• NODE-7319: update allowed hosts list with *.mongo.com (#​4802) (bfb7160)
• NODE-7330: deprecate RenameCollectionOptions.new_collection (#​4815) (a96fa26)
• NODE-7333: add support for deprioritized servers to all topologies (#​4821) (a4211e7)

Bug Fixes

• NODE-7290: use valueof for error code check (#​4791) (1cc3d1c)
• NODE-7298: ensure commonWireVersion is computed from server maxWireVersion (#​4805) (2b2366d)
• NODE-7307: Replace node:process.hrtime() with performance.now() (#​4816) (ae2e037)
• NODE-7308: replace process.nextTick with queueMicrotask (#​4817) (b1b6e81)

---

Configuration

📅 Schedule: (in timezone Europe/Kiev)

• Branch creation
  • At 06:00 PM through 11:59 PM and 12:00 AM through 09:59 AM (* 18-23,0-9 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.