Bump pymongo from 4.6.1 to 4.8.0 in /requirements

[dependabot]

Bumps pymongo from 4.6.1 to 4.8.0.

Release notes

Sourced from pymongo's releases.

PyMongo 4.8.0

Changes in Version 4.8.0

PyMongo 4.8 brings a number of improvements including:

• The handshake metadata for "os.name" on Windows has been simplified to "Windows" to improve import time.
• The repr of bson.binary.Binary is now redacted when the subtype is SENSITIVE_SUBTYPE(8).
• Secure Software Development Life Cycle automation for release process. GitHub Releases now include a Software Bill of Materials, and signature files corresponding to the distribution files released on PyPI.
• Fixed a bug in change streams where both startAtOperationTime and resumeToken could be added to a retry attempt, which caused the retry to fail.
• Fallback to stdlib ssl module when pyopenssl import fails with AttributeError.
• Improved performance of MongoClient operations, especially when many operations are being run concurrently.

Unavoidable breaking changes

• Since we are now using hatch as our build backend, we no longer have a usable setup.py file and require installation using pip. Attempts to invoke the setup.py file will raise an exception. Additionally, pip >= 21.3 is now required for editable installs.

Issues Resolved

See the PyMongo 4.8 release notes in JIRA for the list of resolved issues in this release.

---

Full Changelog: mongodb/mongo-python-driver@4.7.1...4.8.0

PyMongo 4.7.3

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-3-released/283508

PyMongo 4.7.2

Community Notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-2-released/279584

PyMongo 4.7.1

Community release note: https://www.mongodb.com/community/forums/t/pymongo-4-7-1-released/278459

PyMongo 4.7.0

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-7-0-released/277656

PyMongo 4.6.3

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-3-release-for-cve-2024-5629/284348

PyMongo 4.6.2

Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-2-released/267404

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.8.0

.. warning:: PyMongo 4.8 drops support for Python 3.7 and PyPy 3.8: Python 3.8+ or PyPy 3.9+ is now required.

PyMongo 4.8 brings a number of improvements including:

• The handshake metadata for "os.name" on Windows has been simplified to "Windows" to improve import time.
• The repr of bson.binary.Binary is now redacted when the subtype is SENSITIVE_SUBTYPE(8).
• Secure Software Development Life Cycle automation for release process. GitHub Releases now include a Software Bill of Materials, and signature files corresponding to the distribution files released on PyPI.
• Fixed a bug in change streams where both startAtOperationTime and resumeToken could be added to a retry attempt, which caused the retry to fail.
• Fallback to stdlib ssl module when pyopenssl import fails with AttributeError.
• Improved performance of MongoClient operations, especially when many operations are being run concurrently.

Unavoidable breaking changes ............................

• Since we are now using hatch as our build backend, we no longer have a usable setup.py file and require installation using pip. Attempts to invoke the setup.py file will raise an exception. Additionally, pip >= 21.3 is now required for editable installs.

Issues Resolved ...............

See the PyMongo 4.8 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.8 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=37057

Changes in Version 4.7.3

Version 4.7.3 has further fixes for lazily loading modules.

• Use deferred imports instead of importlib lazy module loading.
• Improve import time on Windows.
• Reduce verbosity of "Waiting for suitable server to become available" log message from info to debug.

Issues Resolved ...............

See the PyMongo 4.7.3 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.7.3 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=39865

Changes in Version 4.7.2

... (truncated)

Commits

• d504d14 BUMP 4.8.0
• ab9e748 PYTHON-4515 Improve 4.8 changelog (#1713)
• 2fdf707 PYTHON-4507 [v4.8] pip>=21.3 is required for editable installs (#1711)
• 5139adb PYTHON-4515 [v4.8] Update changelog for 4.8 (#1710)
• b3c55ff BUMP 4.8.0.dev1
• 113b9da BUMP 4.8.0b0
• 585411a PYTHON-4388 [v4.8] Fix security events handling in release workflow again (#1...
• f1f4938 PYTHON-4388 [v4.8] Fix permissions in release workflow (#1708)
• a0d232b PYTHON-4499 [v4.8] Log pymongo.connection at DEBUG without EventListeners (#1...
• 14ed482 PYTHON-4388 [v4.8] Fix dist handling in SSDLC workflow (#1706)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)