Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update MongoDB drivers to 2.19.0 #2245

Merged
merged 3 commits into from
Jan 8, 2024
Merged

Conversation

Mpdreamz
Copy link
Member

Since previous versions to this have a known CVE lodged against them.

See: https://security.snyk.io/vuln/SNYK-DOTNET-MONGODBDRIVER-3329316

Since previous versions to this have a known CVE lodged against them.

See: https://security.snyk.io/vuln/SNYK-DOTNET-MONGODBDRIVER-3329316
@gregkalapos
Copy link
Contributor

Will Elastic.Apm.MongoDb still work with versions older than 2.19.0?

@Mpdreamz
Copy link
Member Author

Yes/No, We'd implicitly upgrade them to 2.19.0 from 2.4.4 which given the severity of the CVE would be a good thing.

See https://www.mongodb.com/docs/drivers/csharp/current/upgrade/ for breaking changes which I think are manageable.

Relates: #2227

gregkalapos
gregkalapos previously approved these changes Jan 3, 2024
Copy link
Contributor

@gregkalapos gregkalapos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Discussed in our weekly, conclusion: it's better to drop support for versions with security warnings.

Docs needs to be also updated: https://www.elastic.co/guide/en/apm/agent/dotnet/current/supported-technologies.html

@Mpdreamz Mpdreamz merged commit 5adc168 into main Jan 8, 2024
7 checks passed
@Mpdreamz Mpdreamz deleted the fix/bump-mongodb-dependency branch January 8, 2024 13:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

2 participants