[Snyk] Upgrade google-auth-library from 1.4.0 to 1.6.1 #3
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade google-auth-library from 1.4.0 to 1.6.1. See this package in npm: https://www.npmjs.com/package/google-auth-library See this project in Snyk: https://app.snyk.io/org/thewindsweptdev/project/c7544f26-f146-4229-bd27-cb67d4786aaa?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade google-auth-library from 1.4.0 to 1.6.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
npm:base64url:20180511
Why? Mature exploit, CVSS 7.1
SNYK-JS-NODEFORGE-598677
Why? Mature exploit, CVSS 7.1
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: google-auth-library
-
1.6.1 - 2018-06-07
-
1.6.0 - 2018-06-07
-
1.5.0 - 2018-05-16
- The redirect_uri and client_id used in the subsequent call to getToken() (and passed to the code exchange endpoint) can now be overridden.
- The order in which
-
1.4.0 - 2018-04-06
from google-auth-library GitHub release notesThis release includes a fix for the issue where
--esModuleInteropwas required for the TypeScript compiler to pass.5a0a9b3 fix: do not use synthetic imports for nodejs core (#382)
Greetings folks! This minor release has a few new features! Most of these have been added to help support the migration away from
google-auto-auth. Enjoy 🎉Features
8294685 feat: enable custom service account with compute client (#378)
2472be0 feat: add sign method to JWT (#375)
c085f14 feat: add a getProjectId method for google-auto-auth compat (#374)
Fixes
23fe447 fix: limit situations where we retry (#373)
1477db8 chore: fix lint task in circle config (#377)
3f54935 docs: consistent header sizing, small grammar changes (#366)
Keepin the lights on
6e88edd chore: upgrade all the dependencies (#372)
8cdd31a chore(package): update nyc to version 12.0.2 (#376)
b4d62a0 chore(package): update @ types/sinon to version 5.0.0 (#367)
In this release:
credentialsandkeyFilenamefields inGoogleAuthOptionsare read is now swapped if both are present (it will be in the order [credentials, keyFilename]).Commits
1f92e9c fix: read credentials field before keyFilename (#361)
35ed34b chore: update dependencies (#358)
4e2c298 chore(package): update @ types/node to version 10.0.3 (#357)
dd63531 chore(package): update sinon to version 5.0.1 (#356)
9328fa6 chore: add nodejs 10 to test matrix (#353)
8a2b53b fix: add generic type to request (#354)
e40a5ef test: fix possible EXDEV in fs.rename (#350)
d3e1b15 feat: Allow overrides to getToken that are used with corresponding generateAuthUrl (#349)
Read more
Commit messages
Package name: google-auth-library
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs