chore(deps): update dependency mongodb.driver to 3.9.0

[Workleap IT (Infra-Workleap)]

This PR contains the following updates:

Package	Change	Age	Confidence
MongoDB.Driver (source)	3.7.1 → 3.9.0

---

Release Notes

mongodb/mongo-csharp-driver (MongoDB.Driver)

v3.9.0: .NET Driver Version 3.9.0 Release Notes

This is the general availability release for the 3.9.0 version of the driver.

[!IMPORTANT]
Next minor release will raise the minimum supported MongoDB Server version from 4.2 to 4.4. This is in accordance with MongoDB Software Lifecycle Schedules. Support for MongoDB Server 4.2 will be dropped in a future release!

The main new features in 3.9.0 include:

• CSHARP-5567: Add a LINQ equivalent for $toHashedIndexKey
• CSHARP-4901: Add support for SearchMeta facet without operator
• CSHARP-5930: Allow registering the same encryption provider multiple times
• CSHARP-5899: Add support for "flat" indexing method in vector search index builders
• CSHARP-5931: Add builder support for $scoreFusion stage

Improvements:

• CSHARP-3556: Use EndPointServerSelector in SingleServerBinding instead of busy wait
• CSHARP-5611: Support ReadOnlySpan in ObjectId and eliminate the temporary byte array allocations

Fixes:

• CSHARP-5967: Ensure SerializerFinder proper support of Parse method
• CSHARP-5966: Add support of string.TrimStart and TrimEnd methods to SerializerFinder
• CSHARP-5942: Fix serializer resolution for dictionary paths with numeric string keys
• CSHARP-2868: Allow maxIdleTimeMS=0 and treat it as no idle time limit
• CSHARP-5762: Avoid changing "filter" to "parentFilter" in previously supported case
• CSHARP-5629: Respect BsonElement attribute in NamedIdMemberConvention
• CSHARP-6029: Execute endSessions on ServerSessionPool close
• CSHARP-6043: NullReferenceException in IEnumerableSerializerBase.Serialize when projecting nullable array with conditional Select
• CSHARP-6040: Fix StackOverflowException in convention CouldApply on self-referencing IEnumerable<T> types

Maintenance:

• CSHARP-6055: Update SharpCompress to remedy vulnerability
• CSHARP-6023: Update libmongocrypt URLs for 1.18.0+
• CSHARP-5943: Initial small AGENTS.md file for the C# driver
• CSHARP-5671: Replace Artifactory with ECR for container image pulls

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

v3.8.1: .NET Driver Version 3.8.1 Release Notes

This is a patch release that addresses a security issue:

• CSHARP-6034: Update Snappier to fix a security issue (GHSA-pggp-6c3x-2xmx)

Known warning when restoring: SharpCompress NU1902

When restoring a project that references this driver with the .NET 8 SDK or newer, NuGet may emit the NU1902 audit warning for the transitive SharpCompress 0.30.1 dependency (GHSA-6c8g-7p36-r338 — directory traversal via IArchive.WriteToDirectory()). The driver does not use that API; SharpCompress is only used for in-memory ZLib stream compression of MongoDB wire-protocol messages, so the driver's usage does not expose consumers to this advisory. This issue will be addressed in an upcoming release (CSHARP-6037).

Documentation on the .NET driver can be found here.

v3.8.0: .NET Driver Version 3.8.0 Release Notes

This is the general availability release for the 3.8.0 version of the driver.

The main new features in 3.8.0 include:

[!IMPORTANT]
Added support for MongoDB ’s Intelligent Workload Management (IWM) and ingress connection rate limiting features. The driver now gracefully handles write-blocking scenarios and optimizes connection establishment during high-load conditions to maintain application availability. These features will be functional with MongoDB Server Version 9.0 and above. More details in CSHARP-5802: Client Backpressure Support

• CSHARP-5882: Support storedSource in vector search indexes and returnStoredSource in $vectorSearch queries
• CSHARP-5769: Implement hasAncestor, hasRoot, and returnScope for Atlas Search
• CSHARP-5646: Implement vector similarity match expressions
• CSHARP-5762: MongoDB Vector Search now supports vector search against nested embeddings and arrays of embeddings.
• CSHARP-5884: Add new fields for Auto embedding in Atlas Vector search indexes

MongoDB v8.3 Compatible Features:

• CSHARP-5852: Expression to determine the subtype of BinData field
• CSHARP-5713: Allow native conversion from string to BSON object
• CSHARP-5949: $convert should allow any type to be converted to string
• CSHARP-5818: Allow users to generate a hash from a UTF-8 string or binary data
• CSHARP-5950: Support base conversion in $convert
• CSHARP-5847: Support Select/SelectMany/Where index overloads in LINQ provider
• CSHARP-5828: Add Rerank stage builder
• CSHARP-5656: Support Aggregation Operator to generate random object ids
• CSHARP-5973: Support SkipWhile/TakeWhile index overloads in LINQ provider
• CSHARP-5825: Support (de)serialization between BSON and EJSON
• CSHARP-5655: Support regular expressions in $replaceAll search string and $split delimiter

Improvements:

• CSHARP-5887: Simplify retryable read and writes
• CSHARP-2593: Add numeric error code to default error message in NativeMethods.CreateException
• CSHARP-2150: Add check that the serializer's ValueType matches the type when registering the serializer

Fixes:

• CSHARP-5947: Increase SingleServerReadBinding timeout
• CSHARP-2862: Check that max pool size is never less than min pool size in connection string
• CSHARP-5935: Command activities may be skipped when using pooled connection
• CSHARP-5952: SerializerFinder resolve wrong serializer for BsonDocument members

Maintenance:

• CSHARP-5957: Bump maxWireVersion to 9.0

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[Workleap IT (Infra-Workleap)]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks

[Copilot]

Pull request overview

This PR updates the centrally-managed NuGet dependency version for MongoDB.Driver to 3.8.1 in order to pick up the latest upstream fixes (including the referenced security-related dependency update).

Changes:

• Bump MongoDB.Driver from 3.7.1 to 3.8.1 via central package management (Directory.Packages.props).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.