chore(deps): bump mongodb from 7.2.0 to 7.5.0

[dependabot]

Bumps mongodb from 7.2.0 to 7.5.0.

Release notes

Sourced from mongodb's releases.

v7.5.0

7.5.0 (2026-07-07)

The MongoDB Node.js team is pleased to announce version 7.5.0 of the mongodb package!

Release Notes

Support for Queryable Encryption String Query GA in MongoDB 9.0

Queryable Encryption string queries are now available for MongoDB 9.0. Building on the technical preview introduced in earlier releases, this feature lets you run exact and range-style string matching against encrypted fields. As part of the promotion to GA, the API has been renamed:

• The TextOpts API is replaced with StringOpts.
• The TextPreview algorithm is replaced with String.
• The prefix, suffix, and substring query types are now generally available.
• The prefixPreview, suffixPreview, and substringPreview query types are deprecated and will be removed in a future release.

MongoClient.close() now closes in-use connections on all servers

Since v6.17.0, MongoClient.close() has eagerly closed checked-out (in-use) connections so that in-flight operations are interrupted promptly with a MongoClientClosedError instead of holding the client open. However, due to a bug, on replica sets and sharded clusters operations in flight on other servers were not interrupted, and their connections stayed open until the operations completed on their own. Calls to closeCheckedOutConnections() will now ensure all checked out connections are closed across all servers.

Features

• NODE-7537: promote QE string queries (prefix/suffix/substring) (#4996) (dc4900c)

Bug Fixes

• NODE-7411: iterate all servers on close (#4967) (72c0296)

Documentation

• Reference
• API
• Changelog

We invite you to try the mongodb library immediately, and report any issues to the NODE project.

v7.4.0

7.4.0 (2026-06-25)

The MongoDB Node.js team is pleased to announce version 7.4.0 of the mongodb package!

Release Notes

Explicit resource management is now stable

... (truncated)

Changelog

Sourced from mongodb's changelog.

7.5.0 (2026-07-07)

Features

• NODE-7537: promote QE string queries (prefix/suffix/substring) (#4996) (dc4900c)

Bug Fixes

• NODE-7411: iterate all servers on close (#4967) (72c0296)

7.4.0 (2026-06-25)

Features

• NODE-7634: remove experimental tag from async dispose methods (#4976) (43ce3eb)
• NODE-7549: send afterClusterTime on writes in causally-consistent sessions (#4963) (3abfd26)

7.3.0 (2026-06-04)

Features

• NODE-7518: bump maxWireVersion (#4950) (4447050)

Bug Fixes

• NODE-7548: SCRAM authentication fails on non-Node runtimes (#4932) (a10d2c9)

Commits

• c436831 chore(main): release 7.5.0 (#4978)
• 910f9da docs(NODE-7635): clarify IWM options documentation (#4997)
• 95572f3 chore(deps): bump drivers-evergreen-tools from 4b02eb0 to ea6e66a (#4995)
• dc4900c feat(NODE-7537): promote QE string queries (prefix/suffix/substring) (#4996)
• 72c0296 fix(NODE-7411): iterate all servers on close (#4967)
• b6c60da chore(NODE-7520): update dependencies (#4962)
• 88990e6 test(NODE-7028): fix flaky AbortSignal timing assertions (#4981)
• 371579d fix(NODE-7171): capture resume token before resumeTokenChanged fires (#4973)
• de45b94 test(NODE-7590): use connectionReady in waitUntilPoolsFilled (#4975)
• 53e73a9 docs: add 7.4 docs (#4977)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mongodb since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)