libmongocrypt

This release makes backwards breaking changes to Queryable Encryption (QE) behavior added in the 1.8.0-alpha0 release:

• Do not apply default to min/max values for int/long/date.
• Enable the QEv2 protocol by default. Remove function to enable QEv2.

Fixed

• Fix build on macOS Ventura.

The MongoDB Node.js team is pleased to announce version 2.8.0-alpha.0 of the mongodb-client-encryption package!

Release Highlights

• Updates to 1.8.0-alpha.0 of libmongocrypt
• NODE-5074: Enables Queryable Encryption v2 in the bindings.

Documentation

We invite you to try the mongodb-client-encryption library immediately, and report any issues to the NODE project.

Fixed

• Fix KMIP Register request for versions 1.12-1.13.0 of Hashicorp Vault.
• Fix possible memory leak when encrypting malformed BSON with Queryable Encryption.

Improvements

• Support Queryable Encryption v2 protocol.

The MongoDB Node.js team is pleased to announce version 2.7.1 of the mongodb-client-encryption package!

Release Highlights

Automatic KMS Credential Fetching with Azure Managed Identity

mongodb-client-encryption now supports automatic credential kms provider refresh when using Azure VM-assigned Managed Identities. To enable this feature, when choosing kms providers, provide the value of {} for azure:

{
  azure: {}
}

When kms credentials are needed, mongodb-client-encryption will attempt to fetch credentials automatically from the IDMS endpoint on the VM, using the process outlined here.

Documentation

We invite you to try the mongodb-client-encryption library immediately, and report any issues to the NODE project.

The MongoDB Node.js team is pleased to announce version 2.6.0 of the mongodb-client-encryption package!

Release Highlights

Automatic KMS Credential Fetching with GCP

mongodb-client-encryption now supports automatic credential kms provider refresh when using GCP attached service accounts. To enable this feature, install the gcp-metadata package version ^5.2.0. Then, when choosing kms providers, provide the value of {} for gcp:

{
  gcp: {}
}

When kms credentials are needed, mongodb-client-encryption will use the gcp-metadata package to fetch credentials automatically.

Documentation

We invite you to try the mongodb-client-encryption library immediately, and report any issues to the NODE project.

🚧 Testing Build Only

This alpha build is intended for internal testing only. Adopt at your own risk.

node-v2.5.0 diff node-v2.6.0-alpha.0 (2023-02-16)

Improvements

• Add toggle for Decimal128 Range Support.

Fixed

• Fix i686 (32-bit) build.
• Fix 32-bit ARM build.

The MongoDB Node.js team is pleased to announce version 2.5.0 of the mongodb-client-encryption package!

Release Highlights

This version adds support for a createEncryptedCollection() helper to assist with setting up a collection for queryable encryption.
The helper will invoke createDataKey() for any fields missing keyIds in the encryptedFields settings before calling createCollection(). See the method's documentation for more details.

Note: Queryable Encryption is in Public Preview and available for evaluation purposes. Public Preview is not recommended for production deployments as breaking changes may be introduced. To learn more about the Preview please see the Queryable Encryption Preview blog post.

Documentation

• Reference: https://www.mongodb.com/docs/drivers/node/current/fundamentals/encrypt-fields/

We invite you to try the mongodb-client-encryption library immediately, and report any issues to the NODE project.

Improvements

• Vendor Intel DFP library and allow using system DFP.

Fixed

• Fix possible abort on base64 decode error of KMS messages.
• Fix ILP32-target builds.
• Fix LTO build.
• Fix IntelDFP to not require Git.

The MongoDB Node.js team is pleased to announce version 2.4.0 of the mongodb-client-encryption package!

Release Highlights

Fetch AWS KMS credentials using aws/credential-providers

Note This feature is opt-in. No aws code will be installed, loaded or run if aws/credential-providers package is not installed.

mongodb-client-encryption can now fetch AWS kms credentials using the native aws sdk. To enable this feature, install a compatible version from npm. When kms provider credentials are needed and AWS providers have not been provided, we will use the aws sdk to load the credentials.

We support versions >=3.186.0 of the aws credentials package.

Experimental Features

Any features marked experimental are subject to change at any time and are not intended for production use.

The MongoDB Node.js team is pleased to announce version 2.4.0-alpha.2 of the mongodb-client-encryption package!

Release Highlights

This release fixes a bug that prevented native node bindings from building on Windows.

The MongoDB Node.js team is pleased to announce version 2.4.0-alpha.1 of the mongodb-client-encryption package!

Release Highlights

This release includes experimental support for range index explicit encryption.

New Features

• Add encryptExpression helper
• Support for range index. NOTE: The Range algorithm is experimental only. It is not intended for public use.

New Features

• Support range index for decimal128. NOTE: The Range algorithm is experimental only. It is not intended for public use.

New Features

• Add encryptExpression helper