Upgrading MongoDB.Bson 2 to 3

Respects the BsonElement attribute in NamedIdMemberConvention, so members named Id, id or _id with a BsonElement naming something other than _id are no longer mapped as the document id.

Atlas Search operators now use registered serializers by default; use SearchDefinition.UseConfiguredSerializers(false) for the old behavior.

Removes the LINQ2 provider.

Removes the IMongoQueryable interface.

Removes the MongoDB.Driver.Legacy package.

Removes the MongoDB.Driver.Core package and various non-user-facing APIs.

Moves client side field level encryption to an optional MongoDB.Driver.Encryption package and drops MongoDB.Libmongocrypt.

Removes MONGODB-CR authentication support.

Changes the default GUID serialization mode and removes GuidRepresentationMode.

Moves AWS authentication to an optional MongoDB.Driver.Authentication.AWS package.

Writing a raw BSON document or array now throws ArgumentException when its declared length is inconsistent with the buffer.

Stops interning BsonSymbol values and marks BsonSymbolTable obsolete to prevent memory-exhaustion denial of service.

BsonBinaryData, the JSON reader and the binary writer now reject binary subtypes outside 0 to 255.

PushEach and AddToSetEach with a single value now always render $each, and PullAll with a single value always renders $pullAll.

Fixes cross-document data leak via malformed BSON array parsing in a reused thread buffer.

Obsoletes the field-expression PatternProperty overload and matches PatternProperty field names as literals and regexes.

GeoJSON serialization now throws BsonSerializationException when an extra member has the same name as a declared member.

Automatic encryption now passes the database name to libmongocrypt as UTF-8 instead of the Windows ANSI code page.

LINQ translation now throws NotSupportedException for dictionary keys, BsonDocument keys and Mql.Field names the server would reinterpret.

Client certificate comparison in SslSettings now compares the full certificate SHA-256 hash and private key presence.

FindOneAndReplace now throws ArgumentException when the replacement document's first element name starts with $, matching ReplaceOne.

Fixes query filter regex injection via unescaped backslash and bracket in LINQ character-set translation.

Uses exact match for file ID in GridFS delete methods.

Fixes KMS master key exposure via unredacted credential serialization in driver settings string.

Fixes connection-option injection via unescaped settings in the canonical MongoDB URL builder.

Fixes NoSQL injection via array replacement bypassing update shape validation in driver write path.

Fixes NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation.

Fixes NoSQL injection via equality-filter simplification of dollar-keyed documents in the LINQ provider.

Fixes NoSQL injection via unescaped dollar-prefixed values in LINQ constant arrays and documents.

Updates SharpCompress to remedy a vulnerability.

Updates Snappier to fix a security issue.

Disables TLS renegotiation when possible.

Removes support for TLS 1.0 and 1.1.

Deprecates the Hedged Reads options.