From 08f99f93f04faa2cbf2b28b9ef8447d107e0e921 Mon Sep 17 00:00:00 2001 From: DeepSource Bot Date: Fri, 25 Apr 2025 18:34:15 +0000 Subject: [PATCH] =?UTF-8?q?fix(deps):=20update=20npm/@grpc/grpc-js=20from?= =?UTF-8?q?=201.8.14=20=E2=86=92=201.8.22=20fix(deps):=20update=20npm/@grp?= =?UTF-8?q?c/grpc-js=20from=201.8.14=20=E2=86=92=201.8.22?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This pull request addresses security vulnerabilities in this repository by updating dependencies to a safe version. We recommend manually auditing the package manifest files to verify the fixes. ### Upgrade Summary **@grpc/grpc-js**: 1.8.14 → 1.8.22 - Fixes [CVE-2024-37168](https://nvd.nist.gov/vuln/detail/CVE-2024-37168) (Medium severity) - References: - [https://github.com/grpc/grpc-node/security/advisories/GHSA-7v5v-9h63-cj86](https://github.com/grpc/grpc-node/security/advisories/GHSA-7v5v-9h63-cj86) - [https://nvd.nist.gov/vuln/detail/CVE-2024-37168](https://nvd.nist.gov/vuln/detail/CVE-2024-37168) - [https://github.com/grpc/grpc-node/commit/08b0422dae56467ecae1007e899efe66a8c4a650](https://github.com/grpc/grpc-node/commit/08b0422dae56467ecae1007e899efe66a8c4a650) - [https://github.com/grpc/grpc-node/commit/674f4e351a619fd4532f84ae6dff96b8ee4e1ed3](https://github.com/grpc/grpc-node/commit/674f4e351a619fd4532f84ae6dff96b8ee4e1ed3) - [https://github.com/grpc/grpc-node/commit/a8a020339c7eab1347a343a512ad17a4aea4bfdb](https://github.com/grpc/grpc-node/commit/a8a020339c7eab1347a343a512ad17a4aea4bfdb) - [https://github.com/grpc/grpc-node](https://github.com/grpc/grpc-node) --- 🤖 This pull request was automatically generated by DeepSource SCA. To view all vulnerabilities in this repository, please visit the [dashboard](https://app.deepsource.com/gh/QuackatronHQ/posthog/dependencies/). --- pnpm-lock.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index ec77db9f8312..de1ef1d714c9 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -3352,8 +3352,8 @@ packages: resolution: {integrity: sha512-jjcWBokl9eb1gVJ85QmoaQ73CQ52xAaOCF29ukRbYNl6lY+ts0ErTaDYOBlejcbUs2OpaiqYLO5uDhyLFzWw4w==} '@grpc/grpc-js@1.8.14': - resolution: {integrity: sha512-w84maJ6CKl5aApCMzFll0hxtFNT6or9WwMslobKaqWUEf1K+zhlL43bSQhFreyYWIWR+Z0xnVFC1KtLm4ZpM/A==} - engines: {node: ^8.13.0 || >=10.10.0} + resolution: {integrity: sha512-oAjDdN7fzbUi+4hZjKG96MR6KTEubAeMpQEb+77qy+3r0Ua5xTFuie6JOLr4ZZgl5g+W5/uRTS2M1V8mVAFPuA==} + engines: {node: '^8.13.0 || >=10.10.0'} '@grpc/proto-loader@0.7.6': resolution: {integrity: sha512-QyAXR8Hyh7uMDmveWxDSUcJr9NAWaZ2I6IXgAYvQmfflwouTM+rArE2eEaCtLlRqO81j7pRLCt81IefUei6Zbw==}