googleapis / gax-nodejs

Google API Extensions for Node.js
Apache License 2.0
113 stars 83 forks source link

chore(deps): proto-loader to 0.7.13 #1611

Closed AlvesJorge closed 1 month ago

AlvesJorge commented 1 month ago

While protobufjs itself was updated to avoid the issue in >7.2.6 , proto-loader was not, which itself requires a version of protobufjs with the vulnerability still present.

This PR aims to fix that by upgrading proto-loader to latest where the requirement for the vulnerable version of protobufjs has been updated. Ideally renovate-bot would have done this by itself, but I couldn't find a PR for it.

Fixes #1586 🦕

google-cla[bot] commented 1 month ago

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

conventional-commit-lint-gcf[bot] commented 1 month ago

🤖 I detect that the PR title and the commit message differ and there's only one commit. To use the PR title for the commit history, you can use Github's automerge feature with squashing, or use automerge label. Good luck human!

-- conventional-commit-lint bot https://conventionalcommits.org/