Skip to content

Update @grpc/grpc-js to 1.14.5 - #3662

Open
katsugtgz wants to merge 1 commit into
teableio:developfrom
katsugtgz:fix/grpc-js-advisories
Open

katsugtgz wants to merge 1 commit into
teableio:developfrom
katsugtgz:fix/grpc-js-advisories

Conversation

@katsugtgz

Copy link
Copy Markdown

Updates @grpc/grpc-js to 1.14.5 in pnpm-lock.yaml.

Evidence:

Validation:

  • OSV query returns no advisories for @grpc/grpc-js@1.14.5
  • pnpm install --frozen-lockfile passes; the only resolved grpc-js version is 1.14.5
  • pnpm run build (nest build) in apps/nestjs-backend compiles successfully

Scope: lockfile update only, no manifest or source changes.

Clears GHSA-m9gg-hp2v-232j and GHSA-f596-whhp-79r4 for the 1.12.4/1.14.4 resolutions; 1.14.5 has no known advisories.
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

1 similar comment
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants