Skip to content

chore(deps): bump go.mongodb.org/mongo-driver/v2 from 2.8.1 to 2.8.2 in /agent - #13659

Open
dependabot[bot] wants to merge 1 commit into
dev-v2from
dependabot/go_modules/agent/go.mongodb.org/mongo-driver/v2-2.8.1
Open

chore(deps): bump go.mongodb.org/mongo-driver/v2 from 2.8.1 to 2.8.2 in /agent#13659
dependabot[bot] wants to merge 1 commit into
dev-v2from
dependabot/go_modules/agent/go.mongodb.org/mongo-driver/v2-2.8.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor

Bumps go.mongodb.org/mongo-driver/v2 from 2.8.1 to 2.8.2.

Release notes

Sourced from go.mongodb.org/mongo-driver/v2's releases.

MongoDB Go Driver 2.8.2

The MongoDB Go Driver Team is pleased to release version 2.8.2 of the official MongoDB Go Driver.

Release Highlights

[!WARNING] Driver versions v2.1.0 through v2.8.1 are affected by a security issue CVE-2026-81521 in Client.BulkWrite that is fixed in this release (v2.8.2). Users are encouraged to upgrade to this version as soon as possible.

This release addresses CVE-2026-81521, a security issue in calling Client.BulkWrite. A caller-controlled database name containing a period ('.') may be interpreted as a different namespace when forwarded to MongoDB. This could redirect operations to a database or collection other than the one intended by the application.

It also fixes a bug in Collection.BulkWrite where, for unordered bulk writes split across multiple batches, a write-concern error from an earlier batch could be non-deterministically silently dropped or replaced by subsequent batches. Now the operation will return the last non-nil writeConcern error, if one occured.

What's Changed

馃悰 Fixed

Full Changelog: mongodb/mongo-go-driver@v2.8.1...v2.8.2

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

Commits
  • 1af6d00 BUMP v2.8.2
  • 2ccb9c0 Merge commit from fork
  • 0c032cb GODRIVER-4075 Return an error if there are invalid characters in the database...
  • faeba4a GODRIVER-4025 cherry-pick: Preserve the last non-nil WriteConcernError across...
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 28, 2026
Bumps [go.mongodb.org/mongo-driver/v2](https://github.com/mongodb/mongo-go-driver) from 2.8.1 to 2.8.2.
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v2.8.1...v2.8.2)

---
updated-dependencies:
- dependency-name: go.mongodb.org/mongo-driver/v2
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump go.mongodb.org/mongo-driver/v2 from 2.8.0 to 2.8.1 in /agent chore(deps): bump go.mongodb.org/mongo-driver/v2 from 2.8.1 to 2.8.2 in /agent Sep 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/agent/go.mongodb.org/mongo-driver/v2-2.8.1 branch from 2595f31 to 79aec04 Compare September 3, 2026 03:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants