Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: cloudquery/plugin-sdk-javascript
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.1.12
Choose a base ref
...
head repository: cloudquery/plugin-sdk-javascript
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.1.13
Choose a head ref
  • 3 commits
  • 4 files changed
  • 1 contributor

Commits on Jun 10, 2024

  1. fix(deps): Update dependency @grpc/grpc-js to v1.10.9 [SECURITY] (#178)

    This PR contains the following updates:
    
    | Package | Type | Update | Change |
    |---|---|---|---|
    | [@grpc/grpc-js](https://grpc.io/) ([source](https://togithub.com/grpc/grpc-node)) | dependencies | patch | [`1.10.8` -> `1.10.9`](https://renovatebot.com/diffs/npm/@grpc%2fgrpc-js/1.10.8/1.10.9) |
    
    ### GitHub Vulnerability Alerts
    
    #### [CVE-2024-37168](https://togithub.com/grpc/grpc-node/security/advisories/GHSA-7v5v-9h63-cj86)
    
    ### Impact
    There are two separate code paths in which memory can be allocated per message in excess of the `grpc.max_receive_message_length` channel option:
    
     1. If an incoming message has a size on the wire greater than the configured limit, the entire message is buffered before it is discarded.
     2. If an incoming message has a size within the limit on the wire but decompresses to a size greater than the limit, the entire message is decompressed into memory, and on the server is not discarded.
    
    ### Patches
    
    This has been patched in versions 1.10.9, 1.9.15, and 1.8.22
    
    ---
    
    ### Release Notes
    
    <details>
    <summary>grpc/grpc-node (@&#8203;grpc/grpc-js)</summary>
    
    ### [`v1.10.9`](https://togithub.com/grpc/grpc-node/releases/tag/%40grpc/grpc-js%401.10.9): @&#8203;grpc/grpc-js 1.10.9
    
    [Compare Source](https://togithub.com/grpc/grpc-node/compare/@grpc/grpc-js@1.10.8...@grpc/grpc-js@1.10.9)
    
    -   Avoid buffering significantly more than `grpc.max_receive_message_size` per received message.
    
    </details>
    
    ---
    
    ### Configuration
    
    📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
    
    🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
    
    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
    
    🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
    
    ---
    
     - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
    
    ---
    
    This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate).
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MDEuMiIsInVwZGF0ZWRJblZlciI6IjM3LjQwMS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJzZWN1cml0eSJdfQ==-->
    cq-bot authored Jun 10, 2024
    Configuration menu
    Copy the full SHA
    9aabab2 View commit details
    Browse the repository at this point in the history

Commits on Jun 11, 2024

  1. Configuration menu
    Copy the full SHA
    e80c25f View commit details
    Browse the repository at this point in the history
  2. chore(main): Release v0.1.13 (#179)

    🤖 I have created a release *beep* *boop*
    ---
    
    
    ## [0.1.13](v0.1.12...v0.1.13) (2024-06-11)
    
    
    ### Bug Fixes
    
    * **deps:** Update dependency @cloudquery/plugin-pb-javascript to ^0.0.20 ([#180](#180)) ([e80c25f](e80c25f))
    * **deps:** Update dependency @grpc/grpc-js to v1.10.9 [SECURITY] ([#178](#178)) ([9aabab2](9aabab2))
    
    ---
    This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
    cq-bot authored Jun 11, 2024
    Configuration menu
    Copy the full SHA
    33ca750 View commit details
    Browse the repository at this point in the history
Loading