chore(deps): bump org.mongodb:mongodb-driver-core from 5.13.0 to 5.14.0

Sourced from org.mongodb:mongodb-driver-core's releases.

Java Driver 5.14.0 (October 28, 2026)

What's Changed

• JAVA-6236 add builder API for facet without operator and clean up search api from beta Reason.SERVER by @​strogiyotec in mongodb/mongo-java-driver#2006
• JAVA-6164 Bump maxWireVersion to 29 for MongoDB 9.0 by @​nhachicha in mongodb/mongo-java-driver#2067
• Java-6108 replace deprecated orchestration with run-mongodb script by @​strogiyotec in mongodb/mongo-java-driver#2070
• Improve handling of Errors by @​stIncMale in mongodb/mongo-java-driver#2038
• JAVA-6310 Update Evergreen config to download latest builds from private S3 bucket by @​stIncMale in mongodb/mongo-java-driver#2077
• JAVA-6071 use trampoline pattern to avoid stackoverflow in reactive driver by @​strogiyotec in mongodb/mongo-java-driver#1973
• Fix OCSP Evergreen build variants by @​stIncMale in mongodb/mongo-java-driver#2079
• Harden BsonBinaryReader.skipValue() size validation and array allocations. by @​rozza in mongodb/mongo-java-driver#1990
• JAVA-6179: Send afterClusterTime on writes in causally-consistent ses… by @​apmasell in mongodb/mongo-java-driver#2047
• Close SocketChannel on pre-registration failure in TlsChannelStream by @​rozza in mongodb/mongo-java-driver#1981
• JAVA-5392: Make Evergreen green again by @​apmasell in mongodb/mongo-java-driver#2078
• [JAVA-6060] Reduce global state by grouping internal settings by @​nhachicha in mongodb/mongo-java-driver#1864
• JAVA-6158: Add Atlas Secure Frontend Processor (SFP) prose tests by @​nhachicha in mongodb/mongo-java-driver#2072
• project-reactor-bom 2025.0.7, reactor-core 3.8.7 by @​julianladisch in mongodb/mongo-java-driver#2050
• build(deps): bump testing/resources/specifications from 549238e to 3cfdaf4 by @​dependabot[bot] in mongodb/mongo-java-driver#2089
• Fixed BsonBinaryWriter.pipe(byte[], int, int) to validate that a document's declared size matches its actual length, preventing malformed RawBsonDocument instances from desynchronizing the BSON structure of outbound commands Full Changelog: https://github.com/mongodb/mongo-java-driver/compare/r5.13.0...r5.14.0

New Contributors

• @​julianladisch made their first contribution in mongodb/mongo-java-driver#2050

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/languages/java/mongodb-hibernate/upcoming/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

• bbfae4a Version: bump 5.14.0
• afc6877 Merge commit from fork
• 6984910 build(deps): bump testing/resources/specifications (#2089)
• 068fcf2 project-reactor-bom 2025.0.7
• 2720d58 JAVA-6158: Add Atlas Secure Frontend Processor (SFP) prose tests (#2072)
• 8f49ae3 [JAVA-6060] Reduce global state by grouping internal settings (#1864)
• ba4fd42 JAVA-5392: Make Evergreen green again (#2078)
• 4e15523 Close SocketChannel on pre-registration failure in TlsChannelStream (#1981)
• 94459e5 JAVA-6179: Send afterClusterTime on writes in causally-consistent ses… (#2047)
• c52057e Harden BsonBinaryReader.skipValue() size validation and array allocations. (#...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)