chore(deps): bump mongodb from 3.6.0 to 3.8.2

[dependabot]

Bumps mongodb from 3.6.0 to 3.8.2.

Release notes

Sourced from mongodb's releases.

v3.8.2

The MongoDB Rust driver team is pleased to announce the v3.8.2 release of the mongodb crate, now available for download from crates.io.

[!IMPORTANT] This is a security patch release for CVE-2026-81526. Upgrading is recommended for all users.

This release fixes a bug that would allow Client::bulk_write to write to a different database than the one specified in a write model's namespace.

Full Release Notes

Bugfixes

• RUST-2467 / CVE-2026-81526: Validate database and collection name arguments against "." and NUL bytes

v3.8.1

The MongoDB Rust driver team is pleased to announce the v3.8.1 release of the mongodb crate, now available for download from crates.io.

This release fixes two bugs: a potential infinite loop in change streams, and the find_one_and_* methods not reporting errors in some circumstances.

Full Release Notes

Bugfixes

• RUST-2465 Fix an infinite loop in ChangeStream iteration (#1760)
• RUST-2479 Report write concern errors for findAndModify (#1768)

v3.8.0

The MongoDB Rust driver team is pleased to announce the v3.8.0 release of the mongodb crate, now available for download from crates.io.

Highlighted Changes

In-Use Encryption String API GA

The string API for in-use encryption (previously named the text API) is now stable and GA! This brings with it the following changes:

• The text-indexes-unstable feature is no longer required to enable this API. The feature still exists for backwards compatibility but does nothing.
• The TextOptions struct is now StringOptions.
• Algorithm::TextPreview is deprecated in favor of Algorithm::String.
• The query types "prefixPreview", "suffixPreview", and "substringPreview" are deprecated in favor of "prefix", "suffix", and "substring" respectively.

The GA API requires mongodb server version 9.0. The preview API can continue to be used with pre-9.0 server versions.

Server 4.2 EOL

As of this release, connecting to server version 4.2 is deprecated. Support for 4.2 will be removed in the 3.9.0 release.

MONGODB-AWS explicit authentication property deprecation

The use of explicit username, password, or the "AWS_SESSION_TOKEN" property with the MONGODB-AWS auth mechanism is deprecated, and will emit warnings when debug assertions are enabled. Support for these will be removed in version 4.0 of the driver.

Hickory performance on Windows

... (truncated)

Commits

• 78b87a5 release 3.8.2 (#1778)
• a127aa4 release v3.8.1 (#1774)
• 98f8d9c RUST-2476 Additional cherrypicks for 3.8.1 (#1773)
• 85f6928 RUST-2465 Fix an infinite loop in ChangeStream iteration (#1760) (#1767)
• 3630516 release v3.8.0 (#1736)
• 7fc959d RUST-2381 test KMS provider accessToken (#1735)
• 7a3eb9b RUST-2369 Add constructor methods for ReadPreference (#1732)
• 4064403 Bump the rust-dependencies group across 1 directory with 22 updates (#1734)
• 1645c13 RUST-1653 Tidy and consolidate connect_timeout usage (#1731)
• 22ee8fd RUST-2402 QE string API GA (#1727)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)