Skip to content

Update pymongocrypt requirement from <2.0.0,>=1.13.0 to >=1.18.1,<2.0.0 - #2958

Merged
sleepyStick merged 1 commit into
mainfrom
dependabot/uv/pymongocrypt-gte-1.18.1-and-lt-2.0.0
Jul 24, 2026
Merged

Update pymongocrypt requirement from <2.0.0,>=1.13.0 to >=1.18.1,<2.0.0#2958
sleepyStick merged 1 commit into
mainfrom
dependabot/uv/pymongocrypt-gte-1.18.1-and-lt-2.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on pymongocrypt to permit the latest version.

Release notes

Sourced from pymongocrypt's releases.

PyMongoCrypt 1.18.1

Bundle libmongocrypt 1.18.2: reject large KMS replies.

Changelog

Sourced from pymongocrypt's changelog.

1.18.1

Fixed

  • Fix QE text explicit encryption handling of caseSensitive and diacriticSensitive options.
    • This is a backwards breaking bug fix, but only applies to the experimental QE text algorithm "TextPreview".
  • Fix handling of malformed KMS replies.

1.18.0

Added

  • Signed binaries for macOS and Linux are now available on the GitHub release.
    • Linux binaries including nocrypto in the name have no dependency on OpenSSL. Drivers using the nocrypto variant are expected to set crypto callbacks (e.g. call mongocrypt_setopt_crypto_hooks) to do operations requiring crypto to avoid an error.
    • Drivers that package libmongocrypt binaries are encouraged to migrate release scripts to use these binaries.
      • No reduction in platform support is expected. glibc dependencies were checked against existing builds on RHEL 6.2 and Ubuntu 16.04.
  • Support referencing keys by keyAltName in encryptedFieldsMap.

Changed

  • Final release packages in the PPA are now available by specifying release in the repository configuration in place of the major/minor version (e.g., 1.17). Details in README.md.
  • Bump downloaded libbson version from 2.1.0 to 2.3.0.

Deprecated

  • RHEL 6.2 builds are deprecated and may be removed in the future. The linux-x86_64-glibc_2_7-nocrypto release build may be used instead and has equivalent glibc requirements.

Removed

  • The configure-time CMake parameter ENABLE_WINDOWS_STATIC_RUNTIME has been removed. Users that need the static MSVCRT library should instead set the CMAKE_MSVC_RUNTIME_LIBRARY built-in CMake parameter when configuring libmongocrypt.
  • Packages for Debian 9 and Debian 10.

1.17.3

Fixed

  • Fix check in KMIP parser.

1.17.2

Fixed

  • Fix build warning with GCC 16

1.17.1

Add package for Debian Trixie.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [pymongocrypt](https://github.com/mongodb/libmongocrypt) to permit the latest version.
- [Release notes](https://github.com/mongodb/libmongocrypt/releases)
- [Changelog](https://github.com/mongodb/libmongocrypt/blob/master/CHANGELOG.md)
- [Commits](mongodb/libmongocrypt@pymongocrypt-1.13.0...pymongocrypt-1.18.1)

---
updated-dependencies:
- dependency-name: pymongocrypt
  dependency-version: 1.18.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 24, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 24, 2026 08:54
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 24, 2026
@dependabot
dependabot Bot requested a review from aclark4life July 24, 2026 08:54
@dependabot dependabot Bot added the python:uv Pull requests that update python:uv code label Jul 24, 2026
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@sleepyStick
sleepyStick merged commit 0edd27b into main Jul 24, 2026
79 of 89 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/pymongocrypt-gte-1.18.1-and-lt-2.0.0 branch July 24, 2026 19:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants