# What changed in mongodb-connection-string-url

> 6 changes in mongodb-connection-string-url 7 from its official release notes, upgrade guides and advisories: 2 breaking, 1 security. Each one cited. Sources checked 2026-10-18. HTML: https://unstale.sh/npm/mongodb-connection-string-url/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## mongodb-connection-string-url 7

### Breaking changes

- An unescaped @ in credentials now throws instead of silently misparsing the connection string. (7.0.2) — [release notes](https://github.com/mongodb-js/mongodb-connection-string-url/releases/tag/v7.0.2)
- The minimum supported Node.js version is now v20.19.0; Node.js v16 and v18 are no longer supported. (7.0.0) — [release notes](https://github.com/mongodb-js/mongodb-connection-string-url/releases/tag/v7.0.0)

### Security

- Invalid connection strings are no longer revealed in error messages, reducing sensitive information disclosure. (7.0.2) — [release notes](https://github.com/mongodb-js/mongodb-connection-string-url/releases/tag/v7.0.2)

### Tooling

- The TypeScript target has been updated to ES2023. (7.0.0) — [release notes](https://github.com/mongodb-js/mongodb-connection-string-url/releases/tag/v7.0.0)

### Fixes and other changes

- The generic type restriction now uses extends {}, permitting string-keyed types as arguments and improving compatibility with AuthMechanismProperties. (7.0.2) — [release notes](https://github.com/mongodb-js/mongodb-connection-string-url/releases/tag/v7.0.2)
- The generic type restriction now uses extends {}, permitting string-keyed types as arguments and improving compatibility with AuthMechanismProperties. (7.0.2) — [release notes](https://github.com/mongodb-js/mongodb-connection-string-url/releases/tag/v7.0.2)