What's Changed

• Added $scoreFusion hybrid search stage for combining and normalizing the scores of multiple search pipelines (MongoDB 8.2+) #2024 by @nhachicha
• Added a fluent builder API for the $score aggregation stage, with normalization, weighting, and score details (MongoDB 8.2+) #2023 by @strogiyotec
• Added $vectorSearch support for nested embeddings and arrays of embeddings via parentFilter and nestedOptions #2026 by @rozza
• Removed stale @Beta from SearchOptions and VectorSearchOptions in the Java and Scala drivers #2026 by @rozza
• Encoded Kotlin ByteArray data class fields as BSON Binary, and added an opt-in ByteArray BSON Binary serializer for bson-kotlinx #2019 by @rozza
• Included the fix for CVE-2026-18710 / JAVA-6266, where ProxySettings.toString() rendered the SOCKS5 proxy username and password into application logs. First shipped in 5.9.2 #2035 by @strogiyotec
• ByteArray fields in Kotlin data classes are once again encoded as BSON Binary rather than a BSON array of int32, restoring the behavior from before 5.1.3. Decoding accepts both forms, so documents written by 5.1.3–5.9.x still read back correctly, but newly written documents change BSON type. Review any non-driver consumers of those fields before upgrading. See JAVA-6224

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: r5.9.0...r5.10.0

Java Driver 5.10.0 (August 14, 2026) Latest

Latest

Compare

Choose a tag to compare

What's Changed

See JAVA-6266 / CVE-2026-18710

The username and password are no longer included in toString() starting in this release.

If you cannot upgrade, set the org.mongodb.driver.client logger to WARN or higher to suppress the client-construction message. We do not recommend this as a long-term measure: it silences diagnostic information that is valuable for support, and it does not remove credentials already written to existing logs.

Full Changelog: r5.9.1...r5.9.2

Java Driver 5.9.2 (August 11, 2026)

Compare

Choose a tag to compare

What's Changed

• Backport: Resolve forwarded type arguments across POJO hierarchy edges by @vbabanin in #2020

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: r5.9.0...r5.9.1

Java Driver 5.9.1 (July 23, 2026)

Compare

Choose a tag to compare

What's Changed

• build(deps): bump testing/resources/specifications from b519824 to 25bee54 by @dependabot[bot] in #1984
• Evergreen: fixes - gpg and oidc by @rozza in #1987
• JAVA-6182 Update the Git submodule from 25bee54 to 4484038 by @stIncMale in #1992
• Add Windows CI testing by @vbabanin in #1935
• Update Specs to latest by @rozza in #2001
• Fix reactive streams MongoClient.getTimeout always returning null by @stIncMale in #2009
• JAVA-6237: Explicit Encryption Case 2 uses contention-10 collection by @rozza in #2003
• JAVA-6168 JAVA-6244 JAVA-6196: QE prefix/suffix/substring GA + rename Text API to String by @nhachicha in #2010

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: r5.8.0...r5.9.0

Java Driver 5.9.0 (July 07, 2026)

Compare

Choose a tag to compare

What's Changed

• Fix reactive streams MongoClient.getTimeout always returning null by @stIncMale in #2011

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: r5.8.0...r5.8.1

Java Driver 5.8.1 (July 16, 2026)

Compare

Choose a tag to compare

What's Changed

🔥 Enhancements

• Added typed builder API for vector search index definitions #1960 by @rozza
• Added $rerank aggregation stage support (MongoDB 8.3 / Atlas) #1963 by @rozza
• Added vectorSearch operator support for the $search pipeline stage #1962 by @rozza
• Added storedSource support for vector search indexes and returnStoredSource for $vectorSearch queries #1977 by @rozza
• Added BinaryVector and VectorSearchQuery vectorSearch overloads to the Scala driver #1986 by @rozza
• Optimized RawBsonDocument encode and decode by eliminating intermediate allocations #1988 by @rozza
• Preliminary refactoring for backpressure support #1952 by @stIncMale
• Small improvements related to value-based classes #1964 by @stIncMale

🛠 Fixes

• Fixed OSGi bundle resolution failure when Micrometer is not present #1982 by @rozza
• Added missing Javadoc to MongodbObservation and MongodbObservationContext by @rozza

📦 Dependency Updates

• Upgraded libmongocrypt to 1.18.1 #1983 by @strogiyotec

🧪 Testing & CI

• Added AGENTS.md for AI coding agent support across all modules by @rozza
• Added test cases for new auto-embedding index fields #1936 by @strogiyotec
• Added Scala 3 to publish.sh #1958 by @rozza
• Fixed NamespaceExists test failure #1956 by @nhachicha
• Simplified RetryState creation as preliminary backpressure work #1961 by @stIncMale
• Made RetryState.isLastAttempt private and simplified code #1967 by @stIncMale

New Contributors

• @techbelle made their first contribution in #1972

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: r5.7.0...r5.8.0

Java Driver 5.8.0 (May 28, 2026)

Compare

Choose a tag to compare

What's Changed

• JAVA-6189 - Added Scala 3 to publish.sh by @rozza in #1957
• JAVA-6197 - Fix javadoc warnings in micrometer 5.7 by @rozza in #1966
• JAVA-6215 - Mark micrometer OSGi imports as optional and add bundle resolution test by @rozza in #1985

Full Changelog: r5.7.0...r5.7.1

Java Driver 5.7.1 (May 27, 2026)

Compare

Choose a tag to compare

What's Changed

• Added Scala 3 support by @rozza in #1904
• Do various small timeout-related improvements by @stIncMale in #1908
• Add TODO-JAVA-6126 to inform readers that the problem is known by @stIncMale in #1910
• Fix ServerMonitor thread name JAVA-6135 by @raipc in #1861
• Revert "Temp disable large encryption tests on mongocryptd (#1872)" by @rozza in #1914
• build(deps): bump testing/resources/specifications from bb9dddd to 0535e65 by @dependabot[bot] in #1915
• Remove unused OperationContextBinding test wrappers by @vbabanin in #1903
• Add Javadoc to specify that CSOT does not limit socket writes by @vbabanin in #1791
• Update Junit 5 to latest by @rozza in #1909
• JAVA-6144 increase wait time for thread pool shutdown by @strogiyotec in #1920
• JAVA-6145 fix encryption test case by @strogiyotec in #1923
• JAVA-6148 increase timeout in RetryableWritesProseTest by @strogiyotec in #1927
• Use ZstdInputStreamNoFinalizer for Zstd decompression by @rozza in #1924
• Release connection between empty getMore responses in AsyncCommandCursor by @vbabanin in #1925
• build(deps): bump testing/resources/specifications from 0535e65 to c3c82b6 by @dependabot[bot] in #1930
• Fix com.mongodb.client.FailPoint.enable by @stIncMale in #1931
• Add stack-safe async loop support with trampoline pattern by @vbabanin in #1905
• JsonBsonEncoder: fix parsing of JsonPrimitive numbers by @berlix in #1937
• build(deps): bump testing/resources/specifications from c3c82b6 to 7039e69 by @dependabot[bot] in #1945
• JAVA-6171 upgrade libcrypt to 1.17.3 by @strogiyotec in #1947
• Fix Kotlin bson decoding of optionals by @rozza in #1941
• [JAVA-6159] Micrometer feedback by @nhachicha in #1940
• [JAVA-6186] Micrometer tests expect the network transport to be tcp by @nhachicha in #1955
• Skip QE prefixPreview and suffixPreview tests on server 9.0.0+ by @rozza in #1954

New Contributors

• @raipc made their first contribution in #1861
• @berlix made their first contribution in #1937

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: r5.7.0-beta1...r5.7.0

Java Driver 5.7.0 (April 30, 2026)

Compare

Choose a tag to compare

What's Changed

🔥 Enhancements

• Add Micrometer/OpenTelemetry tracing support to the reactive-streams
  (Micrometer / OpenTelemetry) #1898

• Improved client-side timeout handling to better account for RTT variations #1793

🛠 Fixes

• Fixed RawBsonDocument encoding performance regression by restoring optimized codec path #1888

• Fixed Netty ByteBuf reference counting and reverted read-only change that could cause leaks during logging #1891

📦 Dependency Updates

• Updated Netty to latest version #1867

• Updated Snappy for latest security fixes #1868

🧪 Testing & CI

• Updated BSON/spec tests and improved Extended JSON alignment #1883

• Added SARIF reporting and CI improvements #1869

• Temporarily disabled large encryption tests on mongocryptd for CI stability #1872

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/v5.4/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: r5.7.0-beta0...r5.7.0-beta1

Java Driver 5.7.0-beta1 (February 26, 2026) Pre-release

Pre-release

Compare

Choose a tag to compare

What's Changed

🛠 Fixes

• AsyncCommandCursor.getMoreLoop() held a pool connection across empty getMore responses on tailable cursors, exhausting the connection pool when idle change streams reached maxPoolSize and causing MongoTimeoutException for all other operations. The retry loop has been moved out of getMoreLoop() and into next().

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/v5.4/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Full Changelog: r5.6.4...r5.6.5

Java Driver 5.6.5 (April 09, 2026)

Compare

Choose a tag to compare