[v14] chore: Bump github.com/sigstore/cosign/v2 to 2.2.4

lib/client/identityfile/identity.go

@@ -525,7 +525,7 @@ func writeOracleFormat(cfg WriteConfig, writer ConfigWriter) ([]string, error) {
 	// issuer for an oracle wallet user_cert, and the server cert we create
 	// is not signed by the DB Client CA, so don't pass trusted certs
 	// (DB Client CA) here.
-	pf, err := pkcs12.Encode(rand.Reader, keyK, certBlock, nil, cfg.Password)
+	pf, err := pkcs12.LegacyRC2.WithRand(rand.Reader).Encode(keyK, certBlock, nil, cfg.Password)
 	if err != nil {
 		return nil, trace.Wrap(err)
 	}

lib/observability/tracing/tracing.go

@@ -197,7 +197,6 @@ func NewTraceProvider(ctx context.Context, cfg Config) (*Provider, error) {
 	attrs = append(attrs, cfg.Attributes...)
 
 	res, err := resource.New(ctx,
-		resource.WithSchemaURL(semconv.SchemaURL),
 		resource.WithFromEnv(),
 		resource.WithProcessExecutableName(),
 		resource.WithProcessRuntimeName(),

lib/srv/db/access_test.go

@@ -1001,12 +1001,12 @@ func TestMongoDBMaxMessageSize(t *testing.T) {
 		expectedQueryError bool
 	}{
 		"default message size": {
-			messageSize: 300,
+			messageSize: 400,
 		},
 		"message size exceeded": {
 			// Set a value that will enable handshake message to complete
 			// successfully.
-			maxMessageSize:     300,
+			maxMessageSize:     400,
 			messageSize:        500,
 			expectedQueryError: true,
 		},

lib/srv/db/mongodb/test.go

@@ -215,6 +215,8 @@ func (s *TestServer) handleMessage(message protocol.Message) (protocol.Message,
 	switch command {
 	case commandIsMaster:
 		return s.handleIsMaster(message)
+	case commandHello:
+		return s.handleHello(message)
 	case commandAuth:
 		return s.handleAuth(message)
 	case commandPing:
@@ -272,7 +274,7 @@ func (s *TestServer) handleAuth(message protocol.Message) (protocol.Message, err
 // handleIsMaster makes response to the client's "isMaster" command.
 //
 // isMaster command is used as a handshake by the client to determine the
-// cluster topology.
+// cluster topology. Replaced by hello command in newer versions.
 func (s *TestServer) handleIsMaster(message protocol.Message) (protocol.Message, error) {
 	isMasterReply, err := makeIsMasterReply(s.getWireVersion(), s.getMaxMessageSize())
 	if err != nil {
@@ -287,6 +289,28 @@ func (s *TestServer) handleIsMaster(message protocol.Message) (protocol.Message,
 	return nil, trace.NotImplemented("unsupported message: %v", message)
 }
 
+// handleHello makes response to the client's "hello" command.
+//
+// hello command is used as a handshake by the client to determine the
+// cluster topology.
+func (s *TestServer) handleHello(message protocol.Message) (protocol.Message, error) {
+	reply, err := bson.Marshal(bson.M{
+		"ok":                  1,
+		"isWritablePrimary":   true,
+		"maxMessageSizeBytes": s.getMaxMessageSize(),
+		"maxWireVersion":      s.getWireVersion(),
+		"readOnly":            false,
+		"compression":         []string{"zlib"},
+		// `serviceId` is required for LoadBalanced mode. Reference:
+		// https://github.com/mongodb/specifications/blob/master/source/load-balancers/load-balancers.rst
+		"serviceId": primitive.NewObjectID(),
+	})
+	if err != nil {
+		return nil, trace.Wrap(err)
+	}
+	return protocol.MakeOpMsg(reply), nil
+}
+
 // handlePing makes response to the client's "ping" command.
 //
 // ping command is usually used by client to test connectivity to the server.
@@ -716,6 +740,7 @@ const (
 
 	commandAuth         = "authenticate"
 	commandIsMaster     = "isMaster"
+	commandHello        = "hello"
 	commandPing         = "ping"
 	commandFind         = "find"
 	commandSaslStart    = "saslStart"
@@ -745,7 +770,9 @@ func makeIsMasterReply(wireVersion int, maxMessageSize uint32) ([]byte, error) {
 		"maxWireVersion":  wireVersion,
 		"maxMessageBytes": maxMessageSize,
 		"compression":     []string{"zlib"},
-		"serviceId":       primitive.NewObjectID(),
+		// `serviceId` is required for LoadBalanced mode. Reference:
+		// https://github.com/mongodb/specifications/blob/master/source/load-balancers/load-balancers.rst
+		"serviceId": primitive.NewObjectID(),
 	})
 }