feat(NODE-7670): update dependencies, including next BSON minor

.github/dependabot.yml

@@ -13,28 +13,27 @@ updates:
     directory: "/" # Location of package manifests
     schedule:
       interval: "monthly"
+    ignore:
+      # Interim rule: suppress patch-level pin PRs (e.g. v4 -> 4.37.3) for as long as
+      # we reference the floating v4 tag, which GitHub recommends so that CodeQL CLI
+      # updates and server-side flag changes are picked up automatically.
+      # REMOVE THIS RULE when NODE-7721 pins our actions to commit SHAs: dependabot
+      # must then be free to advance the pinned SHA within the v4 line.
+      - dependency-name: "github/codeql-action"
+        versions: ["4.x"]
   - package-ecosystem: "npm" # See documentation for possible values
     directory: "/" # Location of package manifests
     schedule:
       interval: "monthly"
     ignore:
-      # chai is esmodule only.
-      - dependency-name: "chai"
-        versions: [">=5.0.0"]
-      # sinon-chai 4.x+ supports chai 5.x+.
-      - dependency-name: "sinon-chai"
-        versions: [">=4.0.0"]
-      # chai-subset requires @types/chai 4.x.
-      - dependency-name: "@types/chai"
-        versions: [">=4.0.0"]
-      # mocha-plugin-eslint breaks our lint configuration
-      - dependency-name: "mocha-plugin-eslint"
-        versions: [">=10.0.0"]
+      # NODE-7616: eslint-plugin-mocha 11+ requires eslint 10 (NODE-7615).
+      - dependency-name: "eslint-plugin-mocha"
+        versions: [">=11.0.0"]
       # we ignore TS as a part of quarterly dependency updates.
       - dependency-name: "typescript"
       # NODE-3773: sinon 19+ breaks the srv polling unit tests
       - dependency-name: "sinon"
-        versions: ["18.x"]
+        versions: [">=19.0.0"]
 
       # ignore all peer dependencies
       - dependency-name: "@aws-sdk/credential-providers"

.github/workflows/build_and_commit_docs.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: 'ubuntu-latest'
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: "Build documentation"
         uses: ./.github/actions/build_documentation

.github/workflows/build_docs.yml

@@ -14,5 +14,5 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ./.github/actions/build_documentation

.github/workflows/codeql.yml

@@ -30,7 +30,7 @@ jobs:
           build-mode: none
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/dependencies.yml

@@ -13,7 +13,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install Node and dependencies
         uses: mongodb-labs/drivers-github-tools/node/setup@v3
       - run: npm run check:dependencies

.github/workflows/npm-publish.yml

@@ -31,7 +31,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.ref }}
       - name: Install Node and dependencies

.github/workflows/release-5.x.yml

@@ -36,7 +36,7 @@ jobs:
     environment: release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: '5.x'
 
@@ -96,7 +96,7 @@ jobs:
     environment: release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: '5.x'
 

.github/workflows/release-alpha.yml

@@ -28,7 +28,7 @@ jobs:
             echo "Invalid alphaVersion string"
             exit 1
           fi
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Dispatch npm-publish workflow
         env:
           GH_TOKEN: ${{ github.token }}

.github/workflows/release-nightly.yml

@@ -20,7 +20,7 @@ jobs:
   release-nightly:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install Node and dependencies
         uses: mongodb-labs/drivers-github-tools/node/setup@v3
       - id: build_nightly

.github/workflows/release.yml

@@ -35,7 +35,7 @@ jobs:
     environment: release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Install Node and dependencies
         uses: mongodb-labs/drivers-github-tools/node/setup@v3
@@ -96,7 +96,7 @@ jobs:
     environment: release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Dispatch npm-publish workflow
         if: ${{ needs.release_please.outputs.release_created }}

.github/workflows/release_notes.yml

@@ -39,7 +39,7 @@ jobs:
           fi
 
       # checkout the HEAD ref from prNumber
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: refs/pull/${{ github.event_name == 'issue_comment' && github.event.issue.number || inputs.releasePr }}/head
 

.github/workflows/sbom.yml

@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.ref }}
           token: ${{ secrets.GITHUB_TOKEN }}