@depup/mongodb 7.1.0-depup.0 → 7.5.0-depup.7

package/package.json

@@ -1,14 +1,16 @@
 {
   "name": "@depup/mongodb",
-  "version": "7.1.0-depup.0",
-  "description": "[DepUp] The official MongoDB driver for Node.js",
+  "version": "7.5.0-depup.7",
+  "description": "The official MongoDB driver for Node.js (with updated dependencies)",
   "main": "lib/index.js",
   "files": [
     "lib",
     "src",
     "etc/prepare.js",
     "mongodb.d.ts",
-    "tsconfig.json"
+    "tsconfig.json",
+    "changes.json",
+    "README.md"
   ],
   "types": "mongodb.d.ts",
   "repository": {
@@ -16,10 +18,12 @@
     "url": "git@github.com:mongodb/node-mongodb-native.git"
   },
   "keywords": [
-    "depup",
-    "dependency-bumped",
-    "updated-deps",
     "mongodb",
+    "depup",
+    "updated-dependencies",
+    "security",
+    "latest",
+    "patched",
     "driver",
     "official"
   ],
@@ -28,16 +32,16 @@
     "email": "dbx-node@mongodb.com"
   },
   "dependencies": {
-    "@mongodb-js/saslprep": "^1.4.6",
-    "bson": "^7.2.0",
-    "mongodb-connection-string-url": "^7.0.1"
+    "@mongodb-js/saslprep": "^1.4.12",
+    "bson": "^7.3.1",
+    "mongodb-connection-string-url": "^7.0.2"
   },
   "peerDependencies": {
     "@aws-sdk/credential-providers": "^3.806.0",
     "@mongodb-js/zstd": "^7.0.0",
     "gcp-metadata": "^7.0.1",
     "kerberos": "^7.0.0",
-    "mongodb-client-encryption": ">=7.0.0 <7.1.0",
+    "mongodb-client-encryption": "^7.2.0",
     "snappy": "^7.3.2",
     "socks": "^2.8.6"
   },
@@ -68,44 +72,43 @@
     "@aws-sdk/credential-providers": "^3.876.0",
     "@iarna/toml": "^2.2.5",
     "@istanbuljs/nyc-config-typescript": "^1.0.2",
-    "@microsoft/api-extractor": "^7.54.0",
-    "@microsoft/tsdoc-config": "^0.17.1",
+    "@microsoft/api-extractor": "^7.58.7",
+    "@microsoft/tsdoc-config": "^0.18.1",
     "@mongodb-js/zstd": "^7.0.0",
-    "@types/chai": "^4.3.17",
     "@types/chai-subset": "^1.3.5",
-    "@types/express": "^5.0.5",
+    "@types/express": "^5.0.6",
     "@types/kerberos": "^1.1.5",
     "@types/mocha": "^10.0.9",
     "@types/node": "^22.15.3",
     "@types/saslprep": "^1.0.3",
     "@types/semver": "^7.7.0",
     "@types/sinon": "^17.0.4",
-    "@types/sinon-chai": "^4.0.0",
     "@types/whatwg-url": "^13.0.0",
-    "@typescript-eslint/eslint-plugin": "^8.46.3",
+    "@typescript-eslint/eslint-plugin": "^8.60.1",
     "@typescript-eslint/parser": "^8.31.1",
     "aws4": "^1.13.2",
-    "chai": "^4.4.1",
+    "chai": "^5.3.3",
     "chai-subset": "^1.6.0",
     "chalk": "^4.1.2",
+    "esbuild": "^0.28.0",
     "eslint": "^9.39.1",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-mocha": "^10.4.1",
-    "eslint-plugin-prettier": "^5.5.4",
+    "eslint-plugin-prettier": "^5.5.6",
     "eslint-plugin-simple-import-sort": "^12.1.1",
-    "eslint-plugin-tsdoc": "^0.4.0",
-    "eslint-plugin-unused-imports": "^4.2.0",
-    "express": "^5.1.0",
+    "eslint-plugin-tsdoc": "^0.5.2",
+    "eslint-plugin-unused-imports": "^4.4.1",
+    "express": "^5.2.1",
     "gcp-metadata": "^7.0.1",
-    "js-yaml": "^4.1.0",
-    "mocha": "^11.7.5",
+    "js-yaml": "^4.2.0",
+    "mocha": "^11.7.6",
     "mocha-sinon": "^2.1.2",
-    "mongodb-client-encryption": "^7.0.0",
+    "mongodb-client-encryption": "^7.2.0",
     "nyc": "^17.1.0",
     "prettier": "^3.6.2",
     "semver": "^7.7.2",
     "sinon": "^18.0.1",
-    "sinon-chai": "^3.7.0",
+    "sinon-chai": "^4.0.1",
     "snappy": "^7.3.2",
     "socks": "^2.8.7",
     "source-map-support": "^0.5.21",
@@ -134,32 +137,42 @@
     "check:bench": "npm --prefix test/benchmarks/driver_bench start",
     "check:coverage": "nyc npm run test:all",
     "check:integration-coverage": "nyc npm run check:test",
-    "check:lambda": "nyc mocha --config test/mocha_lambda.js test/integration/node-specific/examples/handler.test.js",
-    "check:lambda:aws": "nyc mocha --config test/mocha_lambda.js test/integration/node-specific/examples/aws_handler.test.js",
+    "check:lambda": "npm run build:bundle && nyc mocha --config test/mocha_lambda.js test/integration/node-specific/examples/handler.test.js",
+    "check:lambda:aws": "npm run build:bundle && nyc mocha --config test/mocha_lambda.js test/integration/node-specific/examples/aws_handler.test.js",
     "check:lint": "npm run build:dts && npm run check:dts && npm run check:eslint && npm run check:tsd",
     "check:eslint": "npm run build:dts && ESLINT_USE_FLAT_CONFIG=false eslint -v && ESLINT_USE_FLAT_CONFIG=false eslint --max-warnings=0 --ext '.js,.ts' src test",
     "check:tsd": "tsd --version && tsd",
-    "check:dependencies": "mocha test/action/dependency.test.ts",
-    "check:dts": "node ./node_modules/typescript/bin/tsc --target es2023 --module commonjs --noEmit mongodb.d.ts && tsd",
-    "check:search-indexes": "nyc mocha --config test/mocha_mongodb.js test/manual/search-index-management.prose.test.ts",
-    "check:test": "mocha --config test/mocha_mongodb.js test/integration",
-    "check:unit": "nyc mocha test/unit",
+    "check:dependencies": "npm run build:bundle && mocha test/action/dependency.test.ts",
+    "check:dts": "npm run build:bundle && node ./node_modules/typescript/bin/tsc --target es2023 --module commonjs --noEmit mongodb.d.ts && tsd",
+    "check:search-indexes": "npm run build:bundle && nyc mocha --config test/mocha_mongodb.js test/manual/search-index-management.prose.test.ts",
+    "check:test": "npm run build:bundle && nyc mocha --config test/mocha_mongodb.js test/integration",
+    "check:test:debug": "npm run mocha:debug -- --config test/mocha_mongodb.js test/integration",
+    "check:test-bundled": "MONGODB_BUNDLED=true npm run check:test",
+    "check:unit": "npm run build:bundle && nyc mocha test/unit",
+    "check:unit:debug": "npm run mocha:debug -- test/unit",
+    "check:unit-bundled": "MONGODB_BUNDLED=true npm run check:unit",
     "check:ts": "node ./node_modules/typescript/bin/tsc -v && node ./node_modules/typescript/bin/tsc --noEmit",
-    "check:atlas": "nyc mocha --config test/manual/mocharc.js test/manual/atlas_connectivity.test.ts",
-    "check:drivers-atlas-testing": "nyc mocha --config test/mocha_mongodb.js test/atlas/drivers_atlas_testing.test.ts",
-    "check:aws": "nyc mocha --config test/mocha_mongodb.js test/integration/auth/mongodb_aws.test.ts test/integration/auth/mongodb_aws.prose.test.ts",
-    "check:oidc-auth": "nyc mocha --config test/mocha_mongodb.js test/integration/auth/auth.spec.test.ts",
-    "check:oidc-test": "nyc mocha --config test/mocha_mongodb.js test/integration/auth/mongodb_oidc.prose.test.ts",
-    "check:kerberos": "nyc mocha --config test/manual/mocharc.js test/manual/kerberos.test.ts",
-    "check:tls": "nyc mocha --config test/manual/mocharc.js test/manual/tls_support.test.ts",
-    "check:ldap": "nyc mocha --config test/manual/mocharc.js test/manual/ldap.test.ts",
-    "check:socks5": "nyc mocha --config test/manual/mocharc.js test/manual/socks5.test.ts",
-    "check:csfle": "nyc mocha --config test/mocha_mongodb.js test/integration/client-side-encryption",
-    "check:snappy": "nyc mocha test/unit/assorted/snappy.test.js",
-    "check:x509": "nyc mocha test/manual/x509_auth.test.ts",
+    "check:atlas": "npm run build:bundle && nyc mocha --config test/manual/mocharc.js test/manual/atlas_connectivity.test.ts",
+    "check:drivers-atlas-testing": "npm run build:bundle && nyc mocha --config test/mocha_mongodb.js test/atlas/drivers_atlas_testing.test.ts",
+    "check:aws": "npm run build:bundle && nyc mocha --config test/mocha_mongodb.js test/integration/auth/mongodb_aws.test.ts test/integration/auth/mongodb_aws.prose.test.ts",
+    "check:oidc-auth": "npm run build:bundle && nyc mocha --config test/mocha_mongodb.js test/integration/auth/auth.spec.test.ts",
+    "check:oidc-test": "npm run build:bundle && nyc mocha --config test/mocha_mongodb.js test/integration/auth/mongodb_oidc.prose.test.ts",
+    "check:kerberos": "npm run build:bundle && nyc mocha --config test/manual/mocharc.js test/manual/kerberos.test.ts",
+    "check:tls": "npm run build:bundle && nyc mocha --config test/manual/mocharc.js test/manual/tls_support.test.ts",
+    "check:ldap": "npm run build:bundle && nyc mocha --config test/manual/mocharc.js test/manual/ldap.test.ts",
+    "check:socks5": "npm run build:bundle && nyc mocha --config test/manual/mocharc.js test/manual/socks5.test.ts",
+    "check:csfle": "npm run build:bundle && nyc mocha --config test/mocha_mongodb.js test/integration/client-side-encryption",
+    "check:snappy": "npm run build:bundle && nyc mocha test/unit/assorted/snappy.test.js",
+    "check:x509": "npm run build:bundle && nyc mocha test/manual/x509_auth.test.ts",
+    "mocha:debug": "npm run build:bundle && node --inspect --enable-source-maps --no-experimental-strip-types ./node_modules/mocha/bin/mocha.js",
+    "build:bundle": "npm run bundle:driver && npm run bundle:types && npm run build:runtime-barrel",
+    "build:runtime-barrel": "node etc/build-runtime-barrel.mjs",
+    "bundle:driver": "node etc/bundle-driver.mjs",
+    "bundle:types": "npx tsc --project ./tsconfig.json --declaration --emitDeclarationOnly --declarationDir test/tools/runner/bundle/types",
     "fix:eslint": "npm run check:eslint -- --fix",
-    "prepare": "node etc/prepare.js",
     "preview:docs": "ts-node etc/docs/preview.ts",
+    "switch:to-bundled": "MONGODB_BUNDLED=true npm run build:runtime-barrel",
+    "switch:to-unbundled": "MONGODB_BUNDLED=false npm run build:runtime-barrel",
     "test": "npm run check:lint && npm run test:all",
     "test:all": "npm run check:unit && npm run check:test",
     "update:docs": "npm run build:docs -- --yes"
@@ -176,22 +189,22 @@
   "depup": {
     "changes": {
       "@mongodb-js/saslprep": {
-        "from": "^1.3.0",
-        "to": "^1.4.6"
+        "from": "^1.4.11",
+        "to": "^1.4.12"
       },
       "bson": {
-        "from": "^7.1.1",
-        "to": "^7.2.0"
+        "from": "^7.2.0",
+        "to": "^7.3.1"
       },
       "mongodb-connection-string-url": {
-        "from": "^7.0.0",
-        "to": "^7.0.1"
+        "from": "^7.0.1",
+        "to": "^7.0.2"
       }
     },
     "depsUpdated": 3,
     "originalPackage": "mongodb",
-    "originalVersion": "7.1.0",
-    "processedAt": "2026-03-09T04:58:47.350Z",
+    "originalVersion": "7.5.0",
+    "processedAt": "2026-07-21T16:17:48.439Z",
     "smokeTest": "passed"
   }
 }

package/src/bson.ts

@@ -1,5 +1,5 @@
 /* eslint-disable no-restricted-imports */
-import { BSON, type DeserializeOptions, type SerializeOptions } from 'bson';
+import { BSON, type DeserializeOptions, NumberUtils, type SerializeOptions } from 'bson';
 
 export {
   Binary,
@@ -8,6 +8,7 @@ export {
   BSONRegExp,
   BSONSymbol,
   BSONType,
+  ByteUtils,
   calculateObjectSize,
   Code,
   DBRef,
@@ -38,10 +39,38 @@ export function parseToElementsToArray(bytes: Uint8Array, offset?: number): BSON
   return Array.isArray(res) ? res : [...res];
 }
 
-export const getInt32LE = BSON.onDemand.NumberUtils.getInt32LE;
-export const getFloat64LE = BSON.onDemand.NumberUtils.getFloat64LE;
-export const getBigInt64LE = BSON.onDemand.NumberUtils.getBigInt64LE;
-export const toUTF8 = BSON.onDemand.ByteUtils.toUTF8;
+// validates buffer inputs, used for read operations
+const validateBufferInputs = (buffer: Uint8Array, offset: number, length: number) => {
+  if (offset < 0 || offset + length > buffer.length) {
+    throw new RangeError(
+      `Attempt to access memory outside buffer bounds: buffer length: ${buffer.length}, offset: ${offset}, length: ${length}`
+    );
+  }
+};
+
+// readInt32LE, reads a 32-bit integer from buffer at given offset
+// throws if offset is out of bounds
+export const readInt32LE = (buffer: Uint8Array, offset: number): number => {
+  validateBufferInputs(buffer, offset, 4);
+  return NumberUtils.getInt32LE(buffer, offset);
+};
+
+// readUint8, reads a single unsigned byte from buffer at given offset
+export const readUint8 = (buffer: Uint8Array, offset: number): number => {
+  validateBufferInputs(buffer, offset, 1);
+  return buffer[offset];
+};
+
+export const setUint32LE = (destination: Uint8Array, offset: number, value: number): 4 => {
+  destination[offset] = value;
+  value >>>= 8;
+  destination[offset + 1] = value;
+  value >>>= 8;
+  destination[offset + 2] = value;
+  value >>>= 8;
+  destination[offset + 3] = value;
+  return 4;
+};
 
 /**
  * BSON Serialization options.

package/src/change_stream.ts

@@ -573,7 +573,6 @@ export class ChangeStream<
   implements AsyncDisposable
 {
   /**
-   * @experimental
    * An alias for {@link ChangeStream.close|ChangeStream.close()}.
    */
   async [Symbol.asyncDispose]() {
@@ -705,6 +704,11 @@ export class ChangeStream<
     return this.cursor?.resumeToken;
   }
 
+  /** Returns the currently buffered documents length of the underlying cursor. */
+  bufferedCount(): number {
+    return this.cursor?.bufferedCount() ?? 0;
+  }
+
   /** Check if there is any document still available in the Change Stream */
   async hasNext(): Promise<boolean> {
     this._setIsIterator();

package/src/client-side-encryption/auto_encrypter.ts

@@ -1,7 +1,7 @@
 import { type MongoCrypt, type MongoCryptOptions } from 'mongodb-client-encryption';
 import * as net from 'net';
 
-import { deserialize, type Document, serialize } from '../bson';
+import { ByteUtils, deserialize, type Document, serialize } from '../bson';
 import { type CommandOptions, type ProxyOptions } from '../cmap/connection';
 import { kDecorateResult } from '../constants';
 import { getMongoDBClientEncryption } from '../deps';
@@ -256,20 +256,26 @@ export class AutoEncrypter {
       errorWrapper: defaultErrorWrapper
     };
     if (options.schemaMap) {
-      mongoCryptOptions.schemaMap = Buffer.isBuffer(options.schemaMap)
-        ? options.schemaMap
-        : (serialize(options.schemaMap) as Buffer);
+      if (ByteUtils.isUint8Array(options.schemaMap)) {
+        mongoCryptOptions.schemaMap = options.schemaMap;
+      } else {
+        mongoCryptOptions.schemaMap = serialize(options.schemaMap);
+      }
     }
 
     if (options.encryptedFieldsMap) {
-      mongoCryptOptions.encryptedFieldsMap = Buffer.isBuffer(options.encryptedFieldsMap)
-        ? options.encryptedFieldsMap
-        : (serialize(options.encryptedFieldsMap) as Buffer);
+      if (ByteUtils.isUint8Array(options.encryptedFieldsMap)) {
+        mongoCryptOptions.encryptedFieldsMap = options.encryptedFieldsMap;
+      } else {
+        mongoCryptOptions.encryptedFieldsMap = serialize(options.encryptedFieldsMap);
+      }
     }
 
-    mongoCryptOptions.kmsProviders = !Buffer.isBuffer(this._kmsProviders)
-      ? (serialize(this._kmsProviders) as Buffer)
-      : this._kmsProviders;
+    if (ByteUtils.isUint8Array(this._kmsProviders)) {
+      mongoCryptOptions.kmsProviders = this._kmsProviders;
+    } else {
+      mongoCryptOptions.kmsProviders = serialize(this._kmsProviders);
+    }
 
     if (options.options?.logger) {
       mongoCryptOptions.logger = options.options.logger;
@@ -396,7 +402,7 @@ export class AutoEncrypter {
       return cmd;
     }
 
-    const commandBuffer = Buffer.isBuffer(cmd) ? cmd : serialize(cmd, options);
+    const commandBuffer: Uint8Array = serialize(cmd, options);
     const context = this._mongocrypt.makeEncryptionContext(
       MongoDBCollectionNamespace.fromString(ns).db,
       commandBuffer

package/src/client-side-encryption/client_encryption.ts

@@ -143,9 +143,7 @@ export class ClientEncryption {
 
     const mongoCryptOptions: MongoCryptOptions = {
       ...options,
-      kmsProviders: !Buffer.isBuffer(this._kmsProviders)
-        ? (serialize(this._kmsProviders) as Buffer)
-        : this._kmsProviders,
+      kmsProviders: serialize(this._kmsProviders),
       errorWrapper: defaultErrorWrapper
     };
 
@@ -748,8 +746,16 @@ export class ClientEncryption {
     expressionMode: boolean,
     options: ClientEncryptionEncryptOptions
   ): Promise<Binary> {
-    const { algorithm, keyId, keyAltName, contentionFactor, queryType, rangeOptions, textOptions } =
-      options;
+    const {
+      algorithm,
+      keyId,
+      keyAltName,
+      contentionFactor,
+      queryType,
+      rangeOptions,
+      stringOptions,
+      textOptions
+    } = options;
     const contextOptions: ExplicitEncryptionContextOptions = {
       expressionMode,
       algorithm
@@ -782,8 +788,9 @@ export class ClientEncryption {
       contextOptions.rangeOptions = serialize(rangeOptions);
     }
 
-    if (typeof textOptions === 'object') {
-      contextOptions.textOptions = serialize(textOptions);
+    const resolvedStringOptions = stringOptions ?? textOptions;
+    if (typeof resolvedStringOptions === 'object') {
+      contextOptions.textOptions = serialize(resolvedStringOptions);
     }
 
     const valueBuffer = serialize({ v: value });
@@ -817,6 +824,8 @@ export interface ClientEncryptionEncryptOptions {
     | 'Indexed'
     | 'Unindexed'
     | 'Range'
+    | 'String'
+    /** @deprecated Use `'String'` instead. */
     | 'TextPreview';
 
   /**
@@ -835,26 +844,39 @@ export interface ClientEncryptionEncryptOptions {
   /**
    * The query type.
    */
-  queryType?: 'equality' | 'range' | 'prefixPreview' | 'suffixPreview' | 'substringPreview';
+  queryType?:
+    | 'equality'
+    | 'range'
+    | 'prefix'
+    | 'suffix'
+    | 'substring'
+    /** @deprecated Use `'prefix'` instead. */
+    | 'prefixPreview'
+    /** @deprecated Use `'suffix'` instead. */
+    | 'suffixPreview'
+    /** @deprecated Use `'substring'` instead. */
+    | 'substringPreview';
 
   /** The index options for a Queryable Encryption field supporting "range" queries.*/
   rangeOptions?: RangeOptions;
 
+  /** Options for a Queryable Encryption field supporting string queries. Only valid when `algorithm` is `'String'` or the deprecated `'TextPreview'`. */
+  stringOptions?: StringQueryOptions;
+
   /**
-   * Options for a Queryable Encryption field supporting text queries.  Only valid when `algorithm` is `TextPreview`.
+   * Options for a Queryable Encryption field supporting text queries. Only valid when `algorithm` is `'String'` or the deprecated `'TextPreview'`.
    *
-   * @experimental Public Technical Preview: `textPreview` is an experimental feature and may break at any time.
+   * @deprecated Use `stringOptions` instead.
    */
-  textOptions?: TextQueryOptions;
+  textOptions?: StringQueryOptions;
 }
 
 /**
- * Options for a Queryable Encryption field supporting text queries.
+ * Options for a Queryable Encryption field supporting string queries.
  *
  * @public
- * @experimental Public Technical Preview: `textPreview` is an experimental feature and may break at any time.
  */
-export interface TextQueryOptions {
+export interface StringQueryOptions {
   /** Indicates that text indexes for this field are case sensitive */
   caseSensitive: boolean;
   /** Indicates that text indexes for this field are diacritic sensitive. */
@@ -884,6 +906,12 @@ export interface TextQueryOptions {
   };
 }
 
+/**
+ * @public
+ * @deprecated Use {@link StringQueryOptions} instead.
+ */
+export type TextQueryOptions = StringQueryOptions;
+
 /**
  * @public
  * @experimental

package/src/cmap/auth/auth_provider.ts

@@ -21,7 +21,7 @@ export class AuthContext {
   /** A response from an initial auth attempt, only some mechanisms use this (e.g, SCRAM) */
   response?: Document;
   /** A random nonce generated for use in an authentication conversation */
-  nonce?: Buffer;
+  nonce?: Uint8Array;
 
   constructor(
     connection: Connection,

package/src/cmap/auth/aws4.ts

@@ -1,4 +1,4 @@
-import { BSON } from '../../bson';
+import { ByteUtils } from '../../bson';
 import { type AWSCredentials } from '../../deps';
 
 export type AwsSigv4Options = {
@@ -31,7 +31,7 @@ export type SignedHeaders = {
 const getHexSha256 = async (str: string): Promise<string> => {
   const data = stringToBuffer(str);
   const hashBuffer = await crypto.subtle.digest('SHA-256', data);
-  const hashHex = BSON.onDemand.ByteUtils.toHex(new Uint8Array(hashBuffer));
+  const hashHex = ByteUtils.toHex(new Uint8Array(hashBuffer));
   return hashHex;
 };
 
@@ -81,8 +81,8 @@ const convertHeaderValue = (value: string | number) => {
  * @returns Uint8Array containing the UTF-8 encoded string.
  */
 function stringToBuffer(str: string): Uint8Array {
-  const data = new Uint8Array(BSON.onDemand.ByteUtils.utf8ByteLength(str));
-  BSON.onDemand.ByteUtils.encodeUTF8Into(data, str, 0);
+  const data = new Uint8Array(ByteUtils.utf8ByteLength(str));
+  ByteUtils.encodeUTF8Into(data, str, 0);
   return data;
 }
 
@@ -189,7 +189,7 @@ export async function aws4Sign(
 
   // 5. Calculate the signature
   const signatureBuffer = await getHmacSha256(signingKey, stringToSign);
-  const signature = BSON.onDemand.ByteUtils.toHex(signatureBuffer);
+  const signature = ByteUtils.toHex(signatureBuffer);
 
   // 6. Add the signature to the request
   // Calculate the Authorization header

package/src/cmap/auth/gssapi.ts

@@ -1,5 +1,4 @@
 import * as dns from 'dns';
-import * as os from 'os';
 
 import { getKerberos, type Kerberos, type KerberosClient } from '../../deps';
 import { MongoInvalidArgumentError, MongoMissingCredentialsError } from '../../error';
@@ -69,9 +68,13 @@ export class GSSAPI extends AuthProvider {
   }
 }
 
-async function makeKerberosClient(authContext: AuthContext): Promise<KerberosClient> {
-  const { hostAddress } = authContext.options;
-  const { credentials } = authContext;
+async function makeKerberosClient({
+  options: {
+    hostAddress,
+    runtime: { os }
+  },
+  credentials
+}: AuthContext): Promise<KerberosClient> {
   if (!hostAddress || typeof hostAddress.host !== 'string' || !credentials) {
     throw new MongoInvalidArgumentError(
       'Connection must have host and port and credentials defined.'
@@ -166,7 +169,7 @@ export async function performGSSAPICanonicalizeHostName(
 
     try {
       // Perform a reverse ptr lookup on the ip address.
-      const results = await dns.promises.resolvePtr(address);
+      const results = await dns.promises.resolve(address, 'PTR');
       // If the ptr did not error but had no results, return the host.
       return results.length > 0 ? results[0] : host;
     } catch {
@@ -185,7 +188,7 @@ export async function performGSSAPICanonicalizeHostName(
 export async function resolveCname(host: string): Promise<string> {
   // Attempt to resolve the host name
   try {
-    const results = await dns.promises.resolveCname(host);
+    const results = await dns.promises.resolve(host, 'CNAME');
     // Get the first resolved host id
     return results.length > 0 ? results[0] : host;
   } catch {

package/src/cmap/auth/mongodb_aws.ts

@@ -1,11 +1,11 @@
-import type { Binary, BSONSerializeOptions } from '../../bson';
+import { type Binary, type BSONSerializeOptions, ByteUtils } from '../../bson';
 import * as BSON from '../../bson';
 import {
   MongoCompatibilityError,
   MongoMissingCredentialsError,
   MongoRuntimeError
 } from '../../error';
-import { ByteUtils, maxWireVersion, ns, randomBytes } from '../../utils';
+import { maxWireVersion, ns, randomBytes } from '../../utils';
 import { type AuthContext, AuthProvider } from './auth_provider';
 import {
   type AWSCredentialProvider,

package/src/cmap/auth/mongodb_oidc/azure_machine_workflow.ts

@@ -19,7 +19,7 @@ const TOKEN_RESOURCE_MISSING_ERROR =
  * @param params - The OIDC callback parameters.
  * @returns The OIDC response.
  */
-export const callback: OIDCCallbackFunction = async (
+export const azureCallback: OIDCCallbackFunction = async (
   params: OIDCCallbackParams
 ): Promise<OIDCResponse> => {
   const tokenAudience = params.tokenAudience;

package/src/cmap/auth/mongodb_oidc/gcp_machine_workflow.ts

@@ -18,7 +18,7 @@ const TOKEN_RESOURCE_MISSING_ERROR =
  * @param params - The OIDC callback parameters.
  * @returns The OIDC response.
  */
-export const callback: OIDCCallbackFunction = async (
+export const gcpCallback: OIDCCallbackFunction = async (
   params: OIDCCallbackParams
 ): Promise<OIDCResponse> => {
   const tokenAudience = params.tokenAudience;

package/src/cmap/auth/mongodb_oidc/k8s_machine_workflow.ts

@@ -17,7 +17,7 @@ const AWS_FILENAME = 'AWS_WEB_IDENTITY_TOKEN_FILE';
  * @param params - The OIDC callback parameters.
  * @returns The OIDC response.
  */
-export const callback: OIDCCallbackFunction = async (): Promise<OIDCResponse> => {
+export const k8sCallback: OIDCCallbackFunction = async (): Promise<OIDCResponse> => {
   let filename: string;
   if (process.env[AZURE_FILENAME]) {
     filename = process.env[AZURE_FILENAME];

package/src/cmap/auth/mongodb_oidc/token_machine_workflow.ts

@@ -12,7 +12,7 @@ const TOKEN_MISSING_ERROR = 'OIDC_TOKEN_FILE must be set in the environment.';
  * @param params - The OIDC callback parameters.
  * @returns The OIDC response.
  */
-export const callback: OIDCCallbackFunction = async (): Promise<OIDCResponse> => {
+export const tokenMachineCallback: OIDCCallbackFunction = async (): Promise<OIDCResponse> => {
   const tokenFile = process.env.OIDC_TOKEN_FILE;
   if (!tokenFile) {
     throw new MongoAWSError(TOKEN_MISSING_ERROR);

package/src/cmap/auth/mongodb_oidc.ts

@@ -5,11 +5,11 @@ import type { Connection } from '../connection';
 import { type AuthContext, AuthProvider } from './auth_provider';
 import type { MongoCredentials } from './mongo_credentials';
 import { AutomatedCallbackWorkflow } from './mongodb_oidc/automated_callback_workflow';
-import { callback as azureCallback } from './mongodb_oidc/azure_machine_workflow';
-import { callback as gcpCallback } from './mongodb_oidc/gcp_machine_workflow';
-import { callback as k8sCallback } from './mongodb_oidc/k8s_machine_workflow';
+import { azureCallback } from './mongodb_oidc/azure_machine_workflow';
+import { gcpCallback } from './mongodb_oidc/gcp_machine_workflow';
+import { k8sCallback } from './mongodb_oidc/k8s_machine_workflow';
 import { TokenCache } from './mongodb_oidc/token_cache';
-import { callback as testCallback } from './mongodb_oidc/token_machine_workflow';
+import { tokenMachineCallback as testCallback } from './mongodb_oidc/token_machine_workflow';
 
 /** Error when credentials are missing. */
 const MISSING_CREDENTIALS_ERROR = 'AuthContext must provide credentials.';

package/src/cmap/auth/plain.ts

@@ -1,4 +1,4 @@
-import { Binary } from '../../bson';
+import { Binary, ByteUtils } from '../../bson';
 import { MongoMissingCredentialsError } from '../../error';
 import { ns } from '../../utils';
 import { type AuthContext, AuthProvider } from './auth_provider';
@@ -12,7 +12,7 @@ export class Plain extends AuthProvider {
 
     const { username, password } = credentials;
 
-    const payload = new Binary(Buffer.from(`\x00${username}\x00${password}`));
+    const payload = new Binary(ByteUtils.fromUTF8(`\x00${username}\x00${password}`));
     const command = {
       saslStart: 1,
       mechanism: 'PLAIN',