Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Upgrade @grpc/grpc-js from 1.10.3 to 1.11.1 #428

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

j-mendez
Copy link
Contributor

@j-mendez j-mendez commented Aug 7, 2024

snyk-top-banner

Snyk has created this PR to upgrade @grpc/grpc-js from 1.10.3 to 1.11.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 10 versions ahead of your current version.

  • The recommended version was released on 22 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Uncontrolled Resource Consumption
SNYK-JS-GRPCGRPCJS-7242922
559 No Known Exploit
Release notes
Package name: @grpc/grpc-js
  • 1.11.1 - 2024-07-16
    • Revert a change that used APIs that were not available in early minor versions of Node 14 (#2799 contributed by @ xqin)
  • 1.11.0 - 2024-07-15
    • Add xDS Servers (#2783)
      • Note: this is primarily a foundation for future features. It doesn't actually do much right now.
    • Add support for dualstack socket support in xDS clients (#2665)
  • 1.10.11 - 2024-07-10
    • Fix a bug that caused clients to reconnect unnecessarily while no requests are pending. (#2784)
    • Fix a bug that caused clients to fail to re-establish existing connections while waiting for DNS results (#2784)
    • Fix a bug that caused servers to sometimes not close idle connections depending on timing (#2790)
    • Fix a bug that caused calls to be pending indefinitely while unable to start after a channel is closed (#2791)
  • 1.10.10 - 2024-06-24
    • Various improvements to handling of keepalive timers (#2760 by @ davidfiala)
    • Fix a bug causing unary response client requests to hang when unexpectedly receiving multiple messages (#2772)
    • Fix a bug causing some requests to fail when making requests through a local proxy (#2746 contributed by @ mjameswh, backported in #2777)
    • Fix handling of URL-encoded user credentials in proxy configuration (#2761 contributed by @ brendan-myers, backported in #2777)
    • Fix missing client-side handling of the grpc.max_send_message_length channel option (#2779)
  • 1.10.9 - 2024-06-10
    • Avoid buffering significantly more than grpc.max_receive_message_size per received message.
  • 1.10.8 - 2024-05-15
    • Fix a bug that caused channels with unix: targets to not reconnect after the channel goes idle (#2750)
  • 1.10.7 - 2024-05-01
  • 1.10.6 - 2024-04-03
  • 1.10.5 - 2024-04-01
  • 1.10.4 - 2024-03-26
  • 1.10.3 - 2024-03-15
from @grpc/grpc-js GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @grpc/grpc-js from 1.10.3 to 1.11.1.

See this package in npm:
@grpc/grpc-js

See this project in Snyk:
https://app.snyk.io/org/j-mendez/project/a856e7ec-3c81-4251-a6c3-1974682eed73?utm_source=github&utm_medium=referral&page=upgrade-pr
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants