Skip to content

fix: upgrade @grpc/grpc-js to 1.13.5 - #1622

Merged
anitarua merged 1 commit into
mainfrom
fix/grpc-js-1-13-5
Aug 24, 2026
Merged

fix: upgrade @grpc/grpc-js to 1.13.5#1622
anitarua merged 1 commit into
mainfrom
fix/grpc-js-1-13-5

Conversation

@anitarua

@anitarua anitarua commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

moved this PR to a branch on this repo: #1621 (comment)

This upgrades the @grpc/grpc-js pin in @gomomento/sdk from 1.13.1 to 1.13.5, which patches two high-severity denial-of-service advisories, GHSA-5375-pq7m-f5r2 and GHSA-99f4-grh7-6pcq. Since @gomomento/generated-types declares a strict peer dependency on @grpc/grpc-js, it is bumped alongside to 0.133.3, which carries the matching 1.13.5 peer requirement, keeping the install free of peer conflicts. This is the follow-up to momentohq/client-protos#343.

@anitarua
anitarua merged commit 6b99cda into main Aug 24, 2026
17 of 21 checks passed
@anitarua
anitarua deleted the fix/grpc-js-1-13-5 branch August 24, 2026 20:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants