[Snyk] Security upgrade mongodb from 5.5.0 to 5.8.0

[afgallo]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	496/1000 Why? Recently disclosed, Has a fix available, CVSS 4.2	Information Exposure SNYK-JS-MONGODB-5871303	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mongodb

The new version differs by 83 commits.

• 43673fa chore(5.x): release 5.8.0 [skip-ci] (#3825)
• 4b2fc79 docs: fix cutoff sentence on CommandStartedEvent (#3828)
• 39ff81d feat(NODE-5465,NODE-5538): lower `@ aws-sdk/credential-providers` version to 3.188.0 and `zstd` to `^1.0.0` (#3821)
• e1af343 chore: update release automation scripts 5.x (#3823)
• c0d3927 feat(NODE-5399): use mongodb-js/saslprep instead of saslprep (#3818)
• 4cf1e96 fix(NODE-5537): remove credentials from ConnectionPoolCreatedEvent options (#3813)
• e81d4a2 fix(NODE-5495): do not emit deprecation warning when tlsCertificateKeyFile is specified and tlsCertificateFile is not (#3810)
• c3b35b3 fix(NODE-5489): set kerberos compatibility to ^1.0.0 || ^2.0.0 (#3803)
• cc3069d Revert "feat(NODE-5489): update kerberos dependency"
• 8c25d6d feat(NODE-5489): update kerberos dependency
• 9bb0d95 feat(NODE-5429): deprecate the `AutoEncrypter` interface (#3764)
• cd923c8 chore(NODE-5426): move FLE code into driver (#3761)
• 77a2709 refactor(NODE-5360): refactor CommandOperation to use async (#3749)
• eb99291 ci(NODE-4615): bump flaky operation count tests threshold (#3753)
• 8649221 docs(5.7.0) (#3758)
• e16246d chore(main): release 5.7.0 [skip-ci] (#3735)
• 6a574cf feat(NODE-5407): update bson to 5.4.0 (#3754)
• 1f880ea feat(NODE-5274): deprecate write concern options (#3752)
• 0668cd8 fix(NODE-5374): do not apply cursor transform in Cursor.hasNext (#3746)
• ccc5e30 chore: update release 4x workflow name (#3751)
• 865e658 fix(NODE-4977): load snappy lazily (#3726)
• dda4ec0 chore(NODE-5382): add 4.x release workflow (#3748)
• b97132e fix(NODE-5102): listDatabases nameOnly setting is sent as NaN (#3742)
• a329748 refactor(NODE-5352): refactor AbstractOperation to use async (#3729)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.