Skip to content

Update dependency org.springframework.data:spring-data-mongodb to v4 - #140

Open
mend-for-github-com[bot] wants to merge 1 commit into
devfrom
whitesource-remediate/org.springframework.data-spring-data-mongodb-4.x
Open

Update dependency org.springframework.data:spring-data-mongodb to v4#140
mend-for-github-com[bot] wants to merge 1 commit into
devfrom
whitesource-remediate/org.springframework.data-spring-data-mongodb-4.x

Conversation

@mend-for-github-com

@mend-for-github-com mend-for-github-com Bot commented Aug 14, 2026

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
org.springframework.data:spring-data-mongodb (source) 2.1.1.RELEASE → 4.0.0 age adoption passing confidence

By merging this PR, the issue #58 will be automatically resolved and closed:

Severity CVSS Score Vulnerability
High High 8.1 CVE-2026-41717
Medium Medium 5.9 CVE-2026-41696

Release Notes

spring-projects/spring-data-mongodb (org.springframework.data:spring-data-mongodb)

v4.0.0

Compare Source

📗 Links

⭐ New Features

  • Equals, hashcode and toString methods for CollectionOptions #​4210

📔 Documentation

  • Replace news and noteworthy with links to the release notes. #​4228

v3.4.18

Compare Source

📗 Links

v3.4.17

Compare Source

📗 Links

🐞 Bug Fixes

  • Repository query projection not working as expected since 3.4.x #​4524

🔨 Dependency Upgrades

  • Upgrade to Maven Wrapper 3.9.5 #​4523

v3.4.16

Compare Source

📗 Links

v3.4.15

Compare Source

📗 Links

🐞 Bug Fixes

  • Fix schema generation for encrypted fields that are considered domain entities. #​4455
  • Schema creator may miss encryption on entity field. #​4454
  • @Field annotation not honoured after $unwind stage in aggregation #​4443

🔨 Dependency Upgrades

  • Upgrade to Maven Wrapper 3.9.4 #​4467

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.4.14

Compare Source

📗 Links

🐞 Bug Fixes

  • Update path not correctly mapped when last segment is multi digit number #​4426

🔨 Dependency Upgrades

  • Upgrade to Maven Wrapper 3.9.3 #​4433

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.4.13

Compare Source

📗 Links

🐞 Bug Fixes

  • InIgnoreCase queries match on substrings #​4404
  • Filter doesn't support expression as input #​4394
  • Date saved incorrectly with java.time codecs enabled #​4390

🔨 Dependency Upgrades

  • Upgrade to Maven Wrapper 3.9.2 #​4407

v3.4.12

Compare Source

📗 Links

🐞 Bug Fixes

  • count() $maxTimeMS not work #​4374
  • Getting exception in MappingMongoConverter while trying to map array of string into string #​4371

v3.4.11

Compare Source

📗 Links

🐞 Bug Fixes

  • Package private visibility of ConversionContext prevents subclassing of MappingMongoConverter #​4345

🔨 Dependency Upgrades

  • Upgrade to Maven Wrapper 3.9.1 #​4358

v3.4.10

Compare Source

📗 Links

🐞 Bug Fixes

  • Duplicate log in query execution #​4253
  • Building criteria with in clause against field annotated with @ValueConverter causes a ClassCastException #​4080

v3.4.9

Compare Source

📗 Links

🔨 Dependency Upgrades

  • Upgrade to Maven Wrapper 3.9.0 #​4299

v3.4.8

Compare Source

📗 Links

v3.4.7

Compare Source

📗 Links

🐞 Bug Fixes

  • MongoTransactionManager.debugString() always contains error #​4241
  • @MongoId not working for aggregate queries #​4043

v3.4.6

Compare Source

📗 Links

⭐ New Features

  • Equals, hashcode and toString methods for CollectionOptions #​4210

🐞 Bug Fixes

  • Use correct boolean type for JSON Schema creation #​4220

v3.4.5

Compare Source

📗 Links

v3.4.4

Compare Source

📗 Links

🐞 Bug Fixes

  • Failed usage of provided ID value on document insert #​4184
  • Point must only contain numeric elements when using near count query with GeoJson points #​4004

📔 Documentation

  • Update documentation example to configure Reactive Transactional Support #​4190
  • Documentation typo in BasicQuery class #​4169

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.4.3

Compare Source

📗 Links

⭐ New Features

  • Support querying@DocumentReference with QueryDsl #​4037
  • MongoTemplate#executeFindMultiInternal allocations could be optimized #​3941

🐞 Bug Fixes

  • Change stream option startAfter not applied via reactive template. #​4167
  • MongoTemplate.aggregateStream does not support local variables #​4132
  • $looup does NOT work with @DBRef. #​4123
  • Constructor creation of DTO projection fails #​4120
  • GeoConverters does not convert inner rings of GeoJsonPolygon #​4104
  • MappingMongoConverter replaces non-@DocumentReference nested objects with same _id #​4098
  • Update fails on DocumentReference annotated list #​4041
  • Repository lookups by DocumentReference returning empty results #​4033
  • @MongoId does not affect Driver-assigned _id identifier #​4026

📔 Documentation

  • Fix AKNOWLEDGED typo in reference documentation #​4135
  • Document BulkOperations limitations #​4082
  • MongoTemplate.findAndReplace throws Couldn't find PersistentEntity for type class org.bson.Document! #​4061

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.4.2

Compare Source

📗 Links

🐞 Bug Fixes

  • MappingMongoConverterParser registers duplicate bean definitions #​4087

v3.4.1

Compare Source

📗 Links

🐞 Bug Fixes

  • Retain parameter type in queries #​4089

📔 Documentation

  • Improve documentation formatting #​4085
  • Update driver compatibility matrix #​4052

🔨 Dependency Upgrades

  • Upgrade to Maven Wrapper 3.8.5 #​4074

v3.4.0

Compare Source

📗 Links

📔 Documentation

  • Add limit 0 behavior description #​3999

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.3.10

Compare Source

📗 Links

🐞 Bug Fixes

  • Use correct boolean type for JSON Schema creation #​4220

v3.3.9

Compare Source

📗 Links

v3.3.8

Compare Source

📗 Links

📔 Documentation

  • Update documentation example to configure Reactive Transactional Support #​4190
  • Documentation typo in BasicQuery class #​4169

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.3.7

Compare Source

📗 Links

⭐ New Features

  • MongoTemplate#executeFindMultiInternal allocations could be optimized #​3941

🐞 Bug Fixes

  • Change stream option startAfter not applied via reactive template. #​4167
  • $looup does NOT work with @DBRef. #​4123
  • GeoConverters does not convert inner rings of GeoJsonPolygon #​4104
  • Update fails on DocumentReference annotated list #​4041

📔 Documentation

  • Fix AKNOWLEDGED typo in reference documentation #​4135
  • MongoTemplate.findAndReplace throws Couldn't find PersistentEntity for type class org.bson.Document! #​4061

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.3.6

Compare Source

📗 Links

🐞 Bug Fixes

  • MappingMongoConverterParser registers duplicate bean definitions #​4087

v3.3.5

Compare Source

📗 Links

📔 Documentation

  • Improve documentation formatting #​4085
  • Update driver compatibility matrix #​4052
  • Add limit 0 behavior description #​3999

🔨 Dependency Upgrades

  • Upgrade to Maven Wrapper 3.8.5 #​4075

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.3.4

Compare Source

📗 Links

v3.3.3

Compare Source

📗 Links

🐞 Bug Fixes

  • Typo, should be public. #​3989
  • MongoTemplate.createCollection(String, CollectionOptions) does not consider timeseries options #​3984

🔨 Dependency Upgrades

  • Upgrade to Maven Wrapper 3.8.4 #​3978

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.3.2

Compare Source

📗 Links

⭐ New Features

  • Externalize build properties. #​3949

🐞 Bug Fixes

  • Can't find a codec for class java.time.Instant #​3968

📔 Documentation

  • Update list of supported query method keywords. #​3916

🔨 Dependency Upgrades

  • Upgrade to MongoDB driver 4.5.0. #​3962

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.3.1

Compare Source

📗 Links

⭐ New Features

  • MongoPersistentEntityIndexResolver should not traverse Map-like properties #​3914
  • Propagate Bean ClassLoader to MongoTypeMapper #​3905

🐞 Bug Fixes

  • Client Side Encryption schema error with MongoDB driver 4.3+ #​3929
  • Set value of Map with numeric key breaks data structure #​3921
  • TypedAggregation.project incorrect conversion #​3898
  • Fix pagination using the reactive fluent Querydsl API #​3892

🔨 Dependency Upgrades

  • Upgrade to MongoDB driver 4.4.1 #​3926

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.3.0

Compare Source

📗 Links

v3.2.12

Compare Source

📗 Links

v3.2.11

Compare Source

📗 Links

v3.2.10

Compare Source

📗 Links

🐞 Bug Fixes

🔨 Dependency Upgrades

  • Upgrade to Maven Wrapper 3.8.4 #​3977

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.2.9

Compare Source

📗 Links

⭐ New Features

  • Externalize build properties. #​3949

🐞 Bug Fixes

  • Can't find a codec for class java.time.Instant #​3968

📔 Documentation

  • Update list of supported query method keywords. #​3916

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.2.8

Compare Source

📗 Links

🐞 Bug Fixes

  • Set value of Map with numeric key breaks data structure #​3921
  • TypedAggregation.project incorrect conversion #​3898

v3.2.7

Compare Source

📗 Links

v3.2.6

Compare Source

📗 Links

v3.2.5

Compare Source

📗 Links

⭐ New Features

  • Relax requirement for GeoJsonMultiPoint construction allowing creation using a single point #​3776
  • Add Criteria infix functions for maxDistance and minDistance #​3761

🐞 Bug Fixes

  • Using Query.fields().slice(String, int, int) fails with CodecConfigurationException #​3811
  • @MongoId(targetType = STRING) forces _id : {…} query documents to String #​3783
  • Using $set with nested integer keys breaks the structure #​3775

📔 Documentation

  • Extract Aggregation Framework docs in own source file #​3786
  • Fix a typo in MongoConverter javadoc #​3758

🔨 Dependency Upgrades

  • Upgrade to Maven Wrapper 3.8.2 #​3819

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.2.4

Compare Source

📗 Links

🪲 Bug Fixes

  • QuerydslMongoPredicateExecutor findAll() tries to get offset for a Pageable.unpaged() #​3751

v3.2.3

Compare Source

📗 Links

🪲 Bug Fixes

  • MappingMongoConverter incorrectly processes an object property of type org.bson.Document #​3702
  • Multiple maps with numeric keys in a single update produces the wrong query (Regression) #​3688
  • reading a document with a list with a null element fails with Spring Data Mongo 3.2.2, works with 3.2.1 #​3686
  • Binary not deserialized to byte[] for property of type Object #​3670

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.2.2

Compare Source

📗 Links

🪲 Bug Fixes

  • Projection on the _id field returns wrong result when using @MongoId (MongoDB 4.4) #​3668
  • MappingMongoConverter problem: ConversionContext#convert does not try to use custom converters first #​3660
  • [3.2.1] Indexing Class with Custom Converter -> Couldn't find PersistentEntity for property private [...] #​3659
  • $floor isOrOrNor() return true #​3635
  • NPE in QueryMapper when use Query with null as value #​3633

📔 Documentation

  • Add missing double quote to GeoJson.java JSDoc header #​3677
  • Documentation references outdated Mongo client #​3666

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.2.1

Compare Source

📗 Links

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.2.0

Compare Source

📗 Links

⭐ New Features

  • Support aggregation expression on fields projection. #​3583

🪲 Bug Fixes

  • @Aggregation repository query method causes NullPointerException when the result is empty #​3623
  • Criteria object not allowing to use field names with underscore in them #​3601
  • Criteria or toEquals fail if contains regex [DATAMONGO-2559] #​3414

v3.1.15

Compare Source

📗 Links

v3.1.14

Compare Source

📗 Links

v3.1.13

Compare Source

📗 Links

🐞 Bug Fixes

  • Using Query.fields().slice(String, int, int) fails with CodecConfigurationException #​3811
  • @MongoId(targetType = STRING) forces _id : {…} query documents to String #​3783

📔 Documentation

  • Extract Aggregation Framework docs in own source file #​3786
  • Fix a typo in MongoConverter javadoc #​3758

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.1.12

Compare Source

📗 Links

🪲 Bug Fixes

  • QuerydslMongoPredicateExecutor findAll() tries to get offset for a Pageable.unpaged() #​3751

v3.1.11

Compare Source

📗 Links

🪲 Bug Fixes

  • Multiple maps with numeric keys in a single update produces the wrong query (Regression) #​3688

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.1.10

Compare Source

📗 Links

🪲 Bug Fixes

  • [3.2.1] Indexing Class with Custom Converter -> Couldn't find PersistentEntity for property private [...] #​3659
  • $floor isOrOrNor() return true #​3635
  • NPE in QueryMapper when use Query with null as value #​3633

📔 Documentation

  • Add missing double quote to GeoJson.java JSDoc header #​3677
  • Documentation references outdated Mongo client #​3666

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

v3.1.9

Compare Source

📗 Links

v3.1.8

Compare Source

📗 Links

🪲 Bug Fixes

  • @Aggregation repository query method causes NullPointerException when the result is empty #​3623
  • Criteria object not allowing to use field names with underscore in them #​3601
  • Criteria or toEquals fail if contains regex [DATAMONGO-2559] #​3414

v3.1.7

Compare Source

📗 Links

⭐ New Features

  • Use StringUtils.replace(…) instead of String.replaceAll(…) for mapKeyDotReplacement #​3613

🪲 Bug Fixes

  • SimpleReactiveMongoRepository#saveAll does not populate @Id property if it is immutable #​3609

v3.1.6

Compare Source

📗 Links

⭐ New Features

  • Remove @Persistent from entity-scan include filters #​3592
  • MongoSocketWriteException may be translated into DataAccessResourceFailureException #​3568

🪲 Bug Fixes

  • Embedded sharding keys are not correctly picked up from the shardKeySource Document #​3590
  • Couldn't find PersistentEntity for type java.lang.Object when updating a field with suffix "class" #​3566
  • UpdateMapper drops numeric keys in Maps #​3552
  • Derived findBy…IgnoreCaseIn query doesn't return expected results [DATAMONGO-2540] #​3395

📔 Documentation

  • Json Schema section appears twice in reference documentation. #​3573

🔨 Dependency Upgrades

  • Upgrade to MongoDB Driver 4.1.2 #​3589

v3.1.5

Compare Source

📗 Links

v3.1.4

Compare Source

📗 Links

⭐ New Features

  • Allow access to mongoDatabaseFactory used in ReactiveMongoTemplate #​3540
  • Add ReactiveMongoOperations.aggregate(…) Kotlin extension [DATAMONGO-2655] #​3508
  • Improve count() and countDocuments() mapping documentation and/or method availability [DATAMONGO-2192] #​3055

🪲 Bug Fixes

  • org.bson.codecs.configuration.CodecConfigurationException: The uuidRepresentation has not been specified, so the UUID cannot be encoded. #​3546
  • alike Criteria can't add andOperator #​3544
  • Bug in full text query documentation [DATAMONGO-2673] #​3525
  • GeoJson: Improper Deserialization of Document with a GeoJsonPolygon [DATAMONGO-2664] #​3517

📔 Documentation

  • Search by alike() criteria is broken when type alias information is not available [DATAMONGO-2620] #​3474

v3.1.3

Compare Source

v3.1.2

Compare Source

v3.1.1

Compare Source

v3.1.0

Compare Source

📗 Links

v3.0.9.RELEASE

Compare Source

📗 Links

🪲 Bug Fixes

  • @Aggregation repository query method causes NullPointerException when the result is empty #​3623
  • SimpleReactiveM

✂ Note

PR body was truncated to here.

@mend-for-github-com mend-for-github-com Bot added the security fix Security fix generated by WhiteSource label Aug 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

security fix Security fix generated by WhiteSource

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants