Skip to content

Update pymongocrypt requirement from <2.0.0,>=1.13.0 to >=1.18.0,<2.0.0 - #2828

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/pymongocrypt-gte-1.18.0-and-lt-2.0.0
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/pymongocrypt-gte-1.18.0-and-lt-2.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 29, 2026

Copy link
Copy Markdown
Contributor

Warning

Dependabot will stop supporting python v3.9!

Please upgrade to one of the following versions: v3.9, v3.10, v3.11, v3.12, v3.13, or v3.14.

Updates the requirements on pymongocrypt to permit the latest version.

Changelog

Sourced from pymongocrypt's changelog.

1.18.0

Added

  • Signed binaries for macOS and Linux are now available on the GitHub release.
    • Linux binaries including nocrypto in the name have no dependency on OpenSSL. Drivers using the nocrypto variant are expected to set crypto callbacks (e.g. call mongocrypt_setopt_crypto_hooks) to do operations requiring crypto to avoid an error.
    • Drivers that package libmongocrypt binaries are encouraged to migrate release scripts to use these binaries.
      • No reduction in platform support is expected. glibc dependencies were checked against existing builds on RHEL 6.2 and Ubuntu 16.04.
  • Support referencing keys by keyAltName in encryptedFieldsMap.

Changed

  • Final release packages in the PPA are now available by specifying release in the repository configuration in place of the major/minor version (e.g., 1.17). Details in README.md.
  • Bump downloaded libbson version from 2.1.0 to 2.3.0.

Deprecated

  • RHEL 6.2 builds are deprecated and may be removed in the future. The linux-x86_64-glibc_2_7-nocrypto release build may be used instead and has equivalent glibc requirements.

Removed

  • The configure-time CMake parameter ENABLE_WINDOWS_STATIC_RUNTIME has been removed. Users that need the static MSVCRT library should instead set the CMAKE_MSVC_RUNTIME_LIBRARY built-in CMake parameter when configuring libmongocrypt.
  • Packages for Debian 9 and Debian 10.

1.17.3

Fixed

  • Fix check in KMIP parser.

1.17.2

Fixed

  • Fix build warning with GCC 16

1.17.1

Add package for Debian Trixie.

1.17.0

New features

  • Support mixing QE and unencrypted JSON schemas.

Fixed

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [pymongocrypt](https://github.com/mongodb/libmongocrypt) to permit the latest version.
- [Release notes](https://github.com/mongodb/libmongocrypt/releases)
- [Changelog](https://github.com/mongodb/libmongocrypt/blob/master/CHANGELOG.md)
- [Commits](mongodb/libmongocrypt@pymongocrypt-1.13.0...pymongocrypt-1.18.0)

---
updated-dependencies:
- dependency-name: pymongocrypt
  dependency-version: 1.18.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 29, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner May 29, 2026 09:17
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 29, 2026
@dependabot
dependabot Bot requested a review from NoahStapp May 29, 2026 09:17
@dependabot dependabot Bot added the python Pull requests that update Python code label May 29, 2026
@codecov-commenter

codecov-commenter commented May 29, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@blink1073 blink1073 closed this Jun 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 1, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/pip/pymongocrypt-gte-1.18.0-and-lt-2.0.0 branch June 1, 2026 14:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants