7.1.1 (2026-03-24)
The MongoDB Node.js team is pleased to announce version 7.1.1 of the mongodb package!
Release Notes
Tighten OIDC ALLOWED_HOSTS wildcard matching
The OIDC ALLOWED_HOSTS wildcard handling has been fixed to require full subdomain/path matches for *. and */ entries, preventing partial suffix matches from being incorrectly accepted.
Fixed TCP keep-alive and no-delay settings not being applied on TLS connections
Due to a Node.js bug, tls.connect() silently ignores keepAlive, keepAliveInitialDelay, and noDelay options passed through its constructor. This could cause idle connections - particularly through cloud load balancers like Azure (240s idle timeout) or AWS PrivateLink/NLB - to be dropped unexpectedly due to missing TCP keep-alive probes.
The driver now explicitly calls setKeepAlive() and setNoDelay() on the socket after creation, ensuring these settings are always applied regardless of whether TLS is used.
Bug Fixes
- NODE-7477: OIDC host allowlist fix (#4896) (237c9ab)
- NODE-7482: explicitly call setKeepAlive and setNoDelay on socket (#4900) (b14ba21)
Documentation
We invite you to try the mongodb library immediately, and report any issues to the NODE project.