build(deps): bump pymongo from 4.6.1 to 4.9.1

[dependabot]

Bumps pymongo from 4.6.1 to 4.9.1.

Release notes

Sourced from pymongo's releases.

PyMongo 4.9.1

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-9-released/297833

PyMongo 4.8.0

Changes in Version 4.8.0

PyMongo 4.8 brings a number of improvements including:

• The handshake metadata for "os.name" on Windows has been simplified to "Windows" to improve import time.
• The repr of bson.binary.Binary is now redacted when the subtype is SENSITIVE_SUBTYPE(8).
• Secure Software Development Life Cycle automation for release process. GitHub Releases now include a Software Bill of Materials, and signature files corresponding to the distribution files released on PyPI.
• Fixed a bug in change streams where both startAtOperationTime and resumeToken could be added to a retry attempt, which caused the retry to fail.
• Fallback to stdlib ssl module when pyopenssl import fails with AttributeError.
• Improved performance of MongoClient operations, especially when many operations are being run concurrently.

Unavoidable breaking changes

• Since we are now using hatch as our build backend, we no longer have a usable setup.py file and require installation using pip. Attempts to invoke the setup.py file will raise an exception. Additionally, pip >= 21.3 is now required for editable installs.

Issues Resolved

See the PyMongo 4.8 release notes in JIRA for the list of resolved issues in this release.

---

Full Changelog: mongodb/mongo-python-driver@4.7.1...4.8.0

PyMongo 4.7.3

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-3-released/283508

PyMongo 4.7.2

Community Notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-2-released/279584

PyMongo 4.7.1

Community release note: https://www.mongodb.com/community/forums/t/pymongo-4-7-1-released/278459

PyMongo 4.7.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-0-released/277656

PyMongo 4.6.3

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-3-release-for-cve-2024-5629/284348

PyMongo 4.6.2

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-2-released/267404

Changelog

Sourced from pymongo's changelog.

Changelog

Changes in Version 4.9.0

.. warning:: Driver support for MongoDB 3.6 reached end of life in April 2024. PyMongo 4.9 will be the last release to support MongoDB 3.6.

.. warning:: PyMongo 4.9 refactors a large portion of internal APIs to support the new asynchronous API beta. As a result, versions of Motor older than 3.6 are not compatible with PyMongo 4.9. Existing users of these versions must either upgrade to Motor 3.6 and PyMongo 4.9, or cap their PyMongo version to < 4.9. Any applications that use private APIs may also break as a result of these internal changes.

PyMongo 4.9 brings a number of improvements including:

• Added support for MongoDB 8.0.
• Added support for Python 3.13.
• A new beta asynchronous API with full asyncio support. This new asynchronous API is a work-in-progress that may change during the beta period before the full release.
• Added support for In-Use Encryption range queries with MongoDB 8.0. Added :attr:~pymongo.encryption.Algorithm.RANGE. sparsity and trim_factor are now optional in :class:~pymongo.encryption_options.RangeOpts.
• Added support for the "delegated" option for the KMIP master_key in :meth:~pymongo.encryption.ClientEncryption.create_data_key.
• pymongocrypt>=1.10 is now required for :ref:In-Use Encryption support.
• Added :meth:~pymongo.cursor.Cursor.to_list to :class:~pymongo.cursor.Cursor, :class:~pymongo.command_cursor.CommandCursor, :class:~pymongo.asynchronous.cursor.AsyncCursor, and :class:~pymongo.asynchronous.command_cursor.AsyncCommandCursor as an asynchronous-friendly alternative to list(cursor).
• Added :meth:~pymongo.mongo_client.MongoClient.bulk_write to :class:~pymongo.mongo_client.MongoClient and :class:~pymongo.asynchronous.mongo_client.AsyncMongoClient, enabling users to perform insert, update, and delete operations against mixed namespaces in a minimized number of round trips. Please see :doc:examples/client_bulk for more information.
• Added support for the namespace parameter to the :class:~pymongo.operations.InsertOne, :class:~pymongo.operations.ReplaceOne, :class:~pymongo.operations.UpdateOne, :class:~pymongo.operations.UpdateMany, :class:~pymongo.operations.DeleteOne, and :class:~pymongo.operations.DeleteMany operations, so they can be used in the new :meth:~pymongo.mongo_client.MongoClient.bulk_write.
• Added :func:repr support to :class:bson.tz_util.FixedOffset.
• Fixed a bug where PyMongo would raise InvalidBSON: unhashable type: 'tzfile' when using :attr:~bson.codec_options.DatetimeConversion.DATETIME_CLAMP or :attr:~bson.codec_options.DatetimeConversion.DATETIME_AUTO with a timezone from dateutil.
• Fixed a bug where PyMongo would raise InvalidBSON: date value out of range

... (truncated)

Commits

• 8b26d4b BUMP 4.9.1
• d0772f2 PYTHON-4773 - Async PyMongo Beta docs update (#1868)
• 2ddd16d BUMP 4.10.0.dev0
• 699d962 BUMP 4.9
• 2c432b5 PYTHON-4768 - Fix atlas connection tests and cleanup uses of raw MongoClients...
• 6d472a1 PYTHON-4738 Skip encryption test_fork on PyPy (#1865)
• 9a71be1 PYTHON-4740 Convert asyncio.TimeoutError to socket.timeout for compat (#1864)
• c136684 PYTHON-4585 Cursor.to_list does not apply client's timeoutMS setting (#1860)
• 40ebc16 PYTHON-4764 Update to use current supported EVG hosts (#1858)
• 163e3d4 PYTHON-4738 - Make test_encryption.TestClientSimple.test_fork sync-only (#1862)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #348.