Skip to content

Bump mongo from 2.25.0 to 2.26.0 - #1697

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/bundler/mongo-2.26.0
Sep 14, 2026
Merged

github-actions[bot] merged 1 commit into
masterfrom
dependabot/bundler/mongo-2.26.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown

Bumps mongo from 2.25.0 to 2.26.0.

Release notes

Sourced from mongo's releases.

2.26.0

The MongoDB Ruby team is pleased to announce version 2.26.0 of the mongo gem - a pure-Ruby driver for connecting to, querying, and manipulating MongoDB databases. This is a new minor release in the 2.x series of MongoDB Ruby Driver.

Install this release using RubyGems via the command line as follows:

gem install -v 2.26.0 mongo

Or simply add it to your Gemfile:

gem 'mongo', '2.26.0'

Have any feedback? Click on through to MongoDB's JIRA and open a new ticket to let us know what's on your mind 🧠.

New Features

Add option to configure DEK cache lifetime (RUBY-3524 | PR)

Adds a new option to the Mongo::Client constructor: :key_expiration_ms. This is used to specify the lifetime of the data encryption key cache, in milliseconds. Must be a non-negative integer. A value of 0 means the cache never expires. Defaults to 60000.

Client backpressure with baseBackoffMS (RUBY-3901 | PR)

Improved performance for MongoDB 9.0's Intelligent Workload Management (IWM) by only retrying overload errors when doing so is expected to not worsen server conditions.

Other New Features

  • Add QE text queries (prefix/suffix/substring) (RUBY-3903 | PR)

Bug Fixes

  • Disallow comma in authMechanismProperties connection string value (RUBY-3482 | PR)
  • Fix libmongocrypt version floor, ClientEncryption timeout_ms and missing range_opts (RUBY-3903 | PR)
  • Consult server-side encryptedFields when dropping QE collections (PR)
  • Use exact match for file ID in GridFS methods (CVE-2026-88030)
Commits
  • 8405041 Release candidate for 2.26.0 (#3105)
  • ed62bb5 Merge commit from fork
  • 8222a3d RUBY-3901 Client backpressure with baseBackoffMS (#3103)
  • 6cdade7 Document Range and String algorithms in ClientEncryption#encrypt (#3100)
  • de53333 RUBY-3942 test against 9.0 builds (#3102)
  • 8d38901 Consult server-side encryptedFields when dropping QE collections (#3099)
  • edab445 RUBY-3524 Add option to configure DEK cache lifetime (#3098)
  • 61095e7 RUBY-3625 Support auto encryption in unified tests (#3085)
  • e1104f1 Run fle2v2 spec tests on modern servers; add CSFLE prose tests 1 and 11.5/11....
  • 2499e17 RUBY-3392 Add QE range auto-encryption unified spec tests (#3095)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [mongo](https://github.com/mongodb/mongo-ruby-driver) from 2.25.0 to 2.26.0.
- [Release notes](https://github.com/mongodb/mongo-ruby-driver/releases)
- [Commits](mongodb/mongo-ruby-driver@v2.25.0...v2.26.0)

---
updated-dependencies:
- dependency-name: mongo
  dependency-version: 2.26.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions
github-actions Bot enabled auto-merge (squash) September 14, 2026 23:48
@github-actions
github-actions Bot merged commit 93a3033 into master Sep 14, 2026
26 checks passed
@dependabot
dependabot Bot deleted the dependabot/bundler/mongo-2.26.0 branch September 14, 2026 23:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants