opensearch-project / opentelemetry-demo

This repository contains the OpenSearch adaptation for the OpenTelemetry Astronomy Shop, a microservice-based distributed system intended to illustrate the implementation of OpenTelemetry in a near real-world environment.
https://opentelemetry.io/docs/demo/
Apache License 2.0
15 stars 16 forks source link

chore(deps): update dependency @grpc/grpc-js to v1.9.15 #143

Closed mend-for-github-com[bot] closed 2 months ago

mend-for-github-com[bot] commented 2 months ago

This PR contains the following updates:

Package Type Update Change
@grpc/grpc-js (source) dependencies patch 1.9.9 -> 1.9.15

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Medium Medium 5.3 CVE-2024-37168

Release Notes

grpc/grpc-node (@​grpc/grpc-js) ### [`v1.9.15`](https://togithub.com/grpc/grpc-node/releases/tag/%40grpc/grpc-js%401.9.15): @​grpc/grpc-js 1.9.15 [Compare Source](https://togithub.com/grpc/grpc-node/compare/@grpc/grpc-js@1.9.14...@grpc/grpc-js@1.9.15) - Avoid buffering significantly more than `grpc.max_receive_message_size` per received message. ### [`v1.9.14`](https://togithub.com/grpc/grpc-node/releases/tag/%40grpc/grpc-js%401.9.14): @​grpc/grpc-js 1.9.14 [Compare Source](https://togithub.com/grpc/grpc-node/compare/@grpc/grpc-js@1.9.13...@grpc/grpc-js@1.9.14) - Fix a bug that could rarely cause connection leaks ([#​2644](https://togithub.com/grpc/grpc-node/issues/2644)) - Fix a bug that could cause clients to go IDLE incorrectly some time after calling `waitForReady` ([#​2643](https://togithub.com/grpc/grpc-node/issues/2643)) ### [`v1.9.13`](https://togithub.com/grpc/grpc-node/releases/tag/%40grpc/grpc-js%401.9.13): @​grpc/grpc-js 1.9.13 [Compare Source](https://togithub.com/grpc/grpc-node/compare/@grpc/grpc-js@1.9.12...@grpc/grpc-js@1.9.13) - Fix a bug that could cause the Node process to close early when establishing a connection while a request is pending ([#​2626](https://togithub.com/grpc/grpc-node/issues/2626)) ### [`v1.9.12`](https://togithub.com/grpc/grpc-node/releases/tag/%40grpc/grpc-js%401.9.12): @​grpc/grpc-js 1.9.12 [Compare Source](https://togithub.com/grpc/grpc-node/compare/@grpc/grpc-js@1.9.11...@grpc/grpc-js@1.9.12) - Fix a bug that could cause connectivity state information to become stale in some circumstances ([#​2623](https://togithub.com/grpc/grpc-node/issues/2623)) ### [`v1.9.11`](https://togithub.com/grpc/grpc-node/releases/tag/%40grpc/grpc-js%401.9.11): @​grpc/grpc-js 1.9.11 [Compare Source](https://togithub.com/grpc/grpc-node/compare/@grpc/grpc-js@1.9.10...@grpc/grpc-js@1.9.11) - Fix a busy loop when recovering from a failure to establish a connection to a unix domain socket address target ([#​2618](https://togithub.com/grpc/grpc-node/issues/2618)) - Fix a bug that caused clients to stop trying to connect to a fixed IP address target after a working connection drops ([#​2619](https://togithub.com/grpc/grpc-node/issues/2619)) ### [`v1.9.10`](https://togithub.com/grpc/grpc-node/releases/tag/%40grpc/grpc-js%401.9.10): @​grpc/grpc-js 1.9.10 [Compare Source](https://togithub.com/grpc/grpc-node/compare/@grpc/grpc-js@1.9.9...@grpc/grpc-js@1.9.10) - Provide the correct port to the proxy when connecting to a target without an explicitly specified port ([#​2608](https://togithub.com/grpc/grpc-node/issues/2608) contributed by [@​segevfiner](https://togithub.com/segevfiner)) - Properly handle goaway events with no additional data attached ([#​2611](https://togithub.com/grpc/grpc-node/issues/2611))

github-actions[bot] commented 2 months ago

This PR was marked stale due to lack of activity. It will be closed in 7 days.

github-actions[bot] commented 2 months ago

Closed as inactive. Feel free to reopen if this PR is still being worked on.