[npm]: Bump bson from 5.5.1 to 6.10.2

[dependabot]

Bumps bson from 5.5.1 to 6.10.2.

Release notes

Sourced from bson's releases.

v6.10.2

6.10.2 (2025-01-29)

The MongoDB Node.js team is pleased to announce version 6.10.2 of the bson package!

Release Notes

Fix calculateObjectSize not accounting for BigInt value size

BSON.calculateObjectSize was missing a condition for BigInt values, meaning it did not account for them in the same way that it would for Long values. This has been corrected.

We also added a new default condition that will catch any new values that may be returned by typeof in the future and will throw an error rather than returning an inaccurate size.

Bug Fixes

• NODE-6608: calculateObjectSize returns the wrong value for bigint (#742) (1fed073)

Documentation

• API
• Changelog

We invite you to try the bson library immediately, and report any issues to the NODE project.

v6.10.1

6.10.1 (2024-11-27)

The MongoDB Node.js team is pleased to announce version 6.10.1 of the bson package!

Release Notes

Fix issue with the internal unbounded type cache

As an optimization, a previous performance improvement stored the type information of seen objects to avoid recalculating type information. This caused an issue in the driver under extreme load and high memory usage as the cache grew. The assumption was that garbage collection would clear it enough to sustain normal operation. The cache is now removed and other optimal type checking is used in its place.

Cache the hex string of an ObjectId lazily

When ObjectId.cacheHexString is set to true we no longer convert the buffer to a hex string in the constructor, since the cache is already being filled in any call to objectid.toHexString().

Additionally, if a string is passed into the constructor we can cache this immediately as there is no performance impact and no extra memory that needs to be allocated.

This improves the performance for situations where you are parsing ObjectIds from a string (ex. JSON) and want to avoid recalculating the hex. It also improves situations where you have ObjectIds coming from BSON and only convert some of them strings perhaps after applying some filter to eliminate some.

With cacheHexString enabled deserializing ObjectIds from BSON shows ~80% performance improvement and toString-ing ObjectIds that were constructed from a string convert ~40% faster!

Thanks to @​SeanReece for contributing this improvement!

Bug Fixes

... (truncated)

Changelog

Sourced from bson's changelog.

6.10.2 (2025-01-29)

Bug Fixes

• NODE-6608: calculateObjectSize returns the wrong value for bigint (#742) (1fed073)

6.10.1 (2024-11-27)

Bug Fixes

• NODE-6552: remove cache and use toStringTag in type helpers (#740) (3ede13e)

Performance Improvements

• NODE-6450: Lazy objectId hex string cache (#722) (7c37580)

6.10.0 (2024-11-18)

Features

• NODE-6537: add support for binary vectors (#730) (d7bdcec)

Bug Fixes

• NODE-6536: Binary.read never returns number[] and reads beyond content (#727) (f99fdfd)

6.9.0 (2024-10-15)

Features

• NODE-6031: add t and i to Timestamp (#704) (b766d0f)

Performance Improvements

• NODE-6344: improve ObjectId.isValid(string) performance (#708) (064ba91)
• NODE-6356: Improve serialization performance (#709) (61537f5)

6.8.0 (2024-06-27)

Features

• NODE-6156: add signature to github releases (#692) (f0fbe91)

... (truncated)

Commits

• 306b607 chore(main): release 6.10.2 [skip-ci] (#743)
• bf5b66e test(NODE-6679): restore node latest testing (#746)
• eca63c9 chore(NODE-6634): pin NPM to 10 when Node version is 18 (#745)
• 1fed073 fix(NODE-6608): calculateObjectSize returns the wrong value for bigint (#742)
• 26549d9 chore(main): release 6.10.1 [skip-ci] (#734)
• 3ede13e fix(NODE-6552): remove cache and use toStringTag in type helpers (#740)
• dbeda2f chore(NODE-6564): add dependabot for github actions (#733)
• 7c37580 perf(NODE-6450): Lazy objectId hex string cache (#722)
• 6e84925 chore(NODE-6555): remove warnings when locally installing bson (#732)
• 2e86183 chore(main): release 6.10.0 [skip-ci] (#731)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)