chore(deps): bump bson from 6.9.0 to 6.10.4

Bumps [bson](https://github.com/mongodb/js-bson) from 6.9.0 to 6.10.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mongodb/js-bson/releases">bson's releases</a>.</em></p> <blockquote> <h2>v6.10.4</h2> <h2><a href="https://github.com/mongodb/js-bson/compare/v6.10.3...v6.10.4">6.10.4</a> (2025-06-02)</h2> <p>The MongoDB Node.js team is pleased to announce version 6.10.4 of the <code>bson</code> package!</p> <h2>Release Notes</h2> <h3>Top-Level Await removed from the browser BSON bundle</h3> <p>In versions &lt;6.10.4, BSON uses a top-level await to asynchronously import the <code>crypto</code> module. This change unintentionally caused headaches for users of webpack, react native, vite and other tools bundlers and tools.</p> <p>The top-level await has been removed from all BSON bundles. Thanks to <a href="https://github.com/lourd"><code>@​lourd</code></a> for this contribution.</p> <h3>Prevent the creation of incorrectly sized float32 vectors</h3> <p>This adds validation to our <code>BSON.serialize</code> and <code>EJSON.stringify</code> methods that will prevent creating float 32 vectors that are not a multiple of 4. Previously created vectors that do not meet this validation will still be <code>deserialized</code> and <code>parsed</code> so they can be fixed.</p> <p>Additionally, the <code>toFloat32Array()</code>, <code>toInt8Array()</code>, and <code>toPackedBits()</code> methods now perform the same validation that serialize does to prevent use of incorrectly formatted Binary vector values. (For example, a packed bits vector with more than 7 bits of padding)</p> <p>Vectors of an incorrect length could only be made manually (directly constructing the bytes and calling <code>new Binary</code>). We recommend using <code>toFloat32Array</code> and <code>fromFloat32Array</code> when interacting with Vectors in MongoDB as they handle the proper creation and translation of this data type.</p> <h3>Bug Fixes</h3> <ul> <li><strong>NODE-6074:</strong> Removes top-level await in bson with separate node and browser ESM bundles (<a href="https://redirect.github.com/mongodb/js-bson/issues/749">#749</a>) (<a href="https://github.com/mongodb/js-bson/commit/46029739ace8596beb5c397eae7992b23c5872f4">4602973</a>)</li> <li><strong>NODE-6735, NODE-6711:</strong> add BSON vector validation to EJSON stringification, serialization and conversion to native types (<a href="https://redirect.github.com/mongodb/js-bson/issues/748">#748</a>) (<a href="https://github.com/mongodb/js-bson/commit/64ff6a28643c5d7bb2933d2b82ad82483e8cb2e7">64ff6a2</a>)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/mongodb/js-bson#readme">API</a></li> <li><a href="https://github.com/mongodb/js-bson/blob/main/HISTORY.md#change-log">Changelog</a></li> </ul> <p>We invite you to try the <code>bson</code> library immediately, and report any issues to the <a href="https://jira.mongodb.org/projects/NODE">NODE project</a>.</p> <h2>v6.10.3</h2> <h2><a href="https://github.com/mongodb/js-bson/compare/v6.10.2...v6.10.3">6.10.3</a> (2025-02-19)</h2> <p>The MongoDB Node.js team is pleased to announce version 6.10.3 of the <code>bson</code> package!</p> <h2>Release Notes</h2> <h3>⚠️ Fixed potential data corruption bug when <code>useBigInt64</code> is enabled</h3> <p>After refactoring to improve deserialization performance in <a href="https://redirect.github.com/mongodb/js-bson/issues/649">#649</a>, we inadvertently introduced a bug that manifested when deserializing <code>Long</code> values with the <code>useBigInt64</code> flag enabled. The bug would lead to negative <code>Long</code> values being deserialized as unsigned integers. This issue has been resolved here.</p> <p>Thanks to <a href="https://github.com/rkistner"><code>@​rkistner</code></a> for reporting this bug!</p> <h3>Bug Fixes</h3> <ul> <li><strong>NODE-6764:</strong> incorrect negative bigint handling (<a href="https://redirect.github.com/mongodb/js-bson/issues/752">#752</a>) (<a href="https://github.com/mongodb/js-bson/commit/b3212b42672c887ff31d3fab917b54238aa4de7d">b3212b4</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/mongodb/js-bson/blob/main/HISTORY.md">bson's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/mongodb/js-bson/compare/v6.10.3...v6.10.4">6.10.4</a> (2025-06-02)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>NODE-6074:</strong> Removes top-level await in bson with separate node and browser ESM bundles (<a href="https://redirect.github.com/mongodb/js-bson/issues/749">#749</a>) (<a href="https://github.com/mongodb/js-bson/commit/46029739ace8596beb5c397eae7992b23c5872f4">4602973</a>)</li> <li><strong>NODE-6735, NODE-6711:</strong> add BSON vector validation to EJSON stringification, serialization and conversion to native types (<a href="https://redirect.github.com/mongodb/js-bson/issues/748">#748</a>) (<a href="https://github.com/mongodb/js-bson/commit/64ff6a28643c5d7bb2933d2b82ad82483e8cb2e7">64ff6a2</a>)</li> </ul> <h2><a href="https://github.com/mongodb/js-bson/compare/v6.10.2...v6.10.3">6.10.3</a> (2025-02-19)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>NODE-6764:</strong> incorrect negative bigint handling (<a href="https://redirect.github.com/mongodb/js-bson/issues/752">#752</a>) (<a href="https://github.com/mongodb/js-bson/commit/b3212b42672c887ff31d3fab917b54238aa4de7d">b3212b4</a>)</li> </ul> <h2><a href="https://github.com/mongodb/js-bson/compare/v6.10.1...v6.10.2">6.10.2</a> (2025-01-29)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>NODE-6608:</strong> calculateObjectSize returns the wrong value for bigint (<a href="https://redirect.github.com/mongodb/js-bson/issues/742">#742</a>) (<a href="https://github.com/mongodb/js-bson/commit/1fed073464f89b33fc82b0f36c3f3674af106dce">1fed073</a>)</li> </ul> <h2><a href="https://github.com/mongodb/js-bson/compare/v6.10.0...v6.10.1">6.10.1</a> (2024-11-27)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>NODE-6552:</strong> remove cache and use toStringTag in type helpers (<a href="https://redirect.github.com/mongodb/js-bson/issues/740">#740</a>) (<a href="https://github.com/mongodb/js-bson/commit/3ede13e4ff551785af3d459d62c854605fe8b154">3ede13e</a>)</li> </ul> <h3>Performance Improvements</h3> <ul> <li><strong>NODE-6450:</strong> Lazy objectId hex string cache (<a href="https://redirect.github.com/mongodb/js-bson/issues/722">#722</a>) (<a href="https://github.com/mongodb/js-bson/commit/7c37580c139608d7926d464efa2bb318877104ba">7c37580</a>)</li> </ul> <h2><a href="https://github.com/mongodb/js-bson/compare/v6.9.0...v6.10.0">6.10.0</a> (2024-11-18)</h2> <h3>Features</h3> <ul> <li><strong>NODE-6537:</strong> add support for binary vectors (<a href="https://redirect.github.com/mongodb/js-bson/issues/730">#730</a>) (<a href="https://github.com/mongodb/js-bson/commit/d7bdcec04349af697ead5655d14c4494f307b6a1">d7bdcec</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>NODE-6536:</strong> Binary.read never returns number[] and reads beyond content (<a href="https://redirect.github.com/mongodb/js-bson/issues/727">#727</a>) (<a href="https://github.com/mongodb/js-bson/commit/f99fdfdb088ebfef115a9740ac4aed65fabf8a2a">f99fdfd</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mongodb/js-bson/commit/302f96e9591c6d4571480d69bb319266c281f67c"><code>302f96e</code></a> chore(main): release 6.10.4 (<a href="https://redirect.github.com/mongodb/js-bson/issues/803">#803</a>)</li> <li><a href="https://github.com/mongodb/js-bson/commit/da8a4bfcf0d8b4c8f0374fc79d69b190cbe71742"><code>da8a4bf</code></a> chore: revert release 6.10.4 (<a href="https://redirect.github.com/mongodb/js-bson/issues/802">#802</a>)</li> <li><a href="https://github.com/mongodb/js-bson/commit/8d712beaf46a458a99823f3f1ac12687f02c81ee"><code>8d712be</code></a> chore(main): release 6.10.4 (<a href="https://redirect.github.com/mongodb/js-bson/issues/800">#800</a>)</li> <li><a href="https://github.com/mongodb/js-bson/commit/0203bebb8251b5d12938545929be133a7b7236e3"><code>0203beb</code></a> chore: revert 6.10 release to try again (<a href="https://redirect.github.com/mongodb/js-bson/issues/799">#799</a>)</li> <li><a href="https://github.com/mongodb/js-bson/commit/b021bd8f7f9a7531c656cfba4e15eb6b78a0e204"><code>b021bd8</code></a> chore(main): release 6.10.4 (<a href="https://redirect.github.com/mongodb/js-bson/issues/789">#789</a>)</li> <li><a href="https://github.com/mongodb/js-bson/commit/86f9dc4c4b5665408c07aa8dcfe1a82be81aa3f0"><code>86f9dc4</code></a> chore(NODE-6938): update typescript to 5.8.3 (<a href="https://redirect.github.com/mongodb/js-bson/issues/793">#793</a>)</li> <li><a href="https://github.com/mongodb/js-bson/commit/3e5f1f8b3f0a78dd876553cbd2362e7d7ec5d8c5"><code>3e5f1f8</code></a> deps(NODE-6898): FY26Q2 dependency updates (<a href="https://redirect.github.com/mongodb/js-bson/issues/795">#795</a>)</li> <li><a href="https://github.com/mongodb/js-bson/commit/17650e13fed11bc734d955aba26298dc853c5a32"><code>17650e1</code></a> chore(NODE-6921): perf tests default to cwd and errexit (<a href="https://redirect.github.com/mongodb/js-bson/issues/791">#791</a>)</li> <li><a href="https://github.com/mongodb/js-bson/commit/7f2a6d3c1a21de23555c887928f253bf75c36ce8"><code>7f2a6d3</code></a> test(NODE-6920): esm bundles do not have top-level await (<a href="https://redirect.github.com/mongodb/js-bson/issues/790">#790</a>)</li> <li><a href="https://github.com/mongodb/js-bson/commit/46029739ace8596beb5c397eae7992b23c5872f4"><code>4602973</code></a> fix(NODE-6074): Removes top-level await in bson with separate node and browse...</li> <li>Additional commits viewable in <a href="https://github.com/mongodb/js-bson/compare/v6.9.0...v6.10.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>