Improvements

• Vendor Intel DFP library and allow using system DFP.

Fixed

• Fix possible abort on base64 decode error of KMS messages.
• Fix ILP32-target builds.
• Fix LTO build.
• Fix IntelDFP to not require Git.

The MongoDB Node.js team is pleased to announce version 2.4.0-alpha.2 of the mongodb-client-encryption package!

Release Highlights

This release fixes a bug that prevented native node bindings from building on Windows.

New Features

• Add encryptExpression helper
• Support for range index. NOTE: The Range algorithm is experimental only. It is not intended for public use.

New Features

• Support range index for decimal128. NOTE: The Range algorithm is experimental only. It is not intended for public use.

New Features

• Add encryptExpression helper

Fixed

• Fix build on FreeBSD.
• Set context error state during KMS provider validation.

New Features

• Support range index for int32, int64, double, and date. NOTE: The Range algorithm is experimental only. It is not intended for public use.

Fixed

• Fix libbson dependency in pkg-config for PPA.

New Features

• Support accessToken to authenticate with Azure.

Fixed

• Use correct schema when collMod command includes validator.$jsonSchema.

New Features

• Support accessToken to authenticate with GCP.

Improvements

• Use CRLF, not LF, for HTTP request newlines.
• Include full body of HTTP errors in mongocrypt_status_t.

ChangeLog

1.5.2

Fixed

Fix a potential data corruption bug in RewrapManyDataKey when rotating encrypted data encryption keys backed by GCP or Azure key services.

The following conditions will trigger this bug:

• A GCP-backed or Azure-backed data encryption key being rewrapped requires fetching an access token for decryption of the data encryption key.

The result of this bug is that the key material for all data encryption keys being rewrapped is replaced by new randomly generated material, destroying the original key material.

To mitigate potential data corruption, upgrade to this version or higher before using RewrapManyDataKey to rotate Azure-backed or GCP-backed data encryption keys. A backup of the key vault collection should always be taken before key rotation.

Warnings

This release has a severe bug in the contexts returned by mongocrypt_ctx_rewrap_many_datakey_init that may result in data corruption. Please upgrade to 1.5.2 to use mongocrypt_ctx_rewrap_many_datakey_init.

New Features

• Update Java bindings to support remaining 1.5.0 API.

Warnings

This release has a severe bug in the contexts returned by mongocrypt_ctx_rewrap_many_datakey_init that may result in data corruption. Please upgrade to 1.5.2 to use mongocrypt_ctx_rewrap_many_datakey_init.

Fixed

• Update to use new payload for FLE 2.0 find.
• Require contention factor.

Fixed

• Fix handling of create command with $jsonSchema.
• Fix leak on encrypt or decrypt error.

Improved

• Accept string values for QueryType and IndexType.

Fixed

• Add missing MONGOCRYPT_EXPORT to mongocrypt_ctx_provide_kms_providers

The MongoDB Node.js team is pleased to announce version 2.2.0-alpha.2!

Release Highlights

Bug Fixes

• NODE-4251: Fixes MongoServerError: BSON field 'create.encryptedFields.fields.contention' is the wrong type 'int', expected type 'long'

Fixed

• Revert new payload for FLE 2.0 find.
• Do not send "create" and "createIndexes" to mongocryptd when bypassing query analysis.

The MongoDB Node.js team is pleased to announce version v2.2.0-alpha.1 of the mongodb package!

Fixed

• Account for shared library rename.
• Update to use new payload for FLE 2.0 find.

New Features

• Fix explain when using csfle shared library.
• Do not bypass "create" or "createIndexes" commands. Support "collMod".
• Bypass "hello", "buildInfo", "getCmdLineOpts", and "getLog" commands.

Fixed

• Preserve $db in output command.
• Add missing MONGOCRYPT_EXPORT to mongocrypt_ctx_provide_kms_providers