Update dependency googleapis to v39 [SECURITY] #636
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/npm-googleapis-vulnerability
branch
from
df175c8
to
0bb382b
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
34.0.0->39.1.0GitHub Vulnerability Alerts
GHSA-7543-mr7h-6v86
Versions of
googleapisprior to 39.1.0 are vulnerable to Improper Authorization. Setting credentials to one client may apply to all clients which may cause requests to be sent with the incorrect credentials.Recommendation
Upgrade to version 39.1.0.
Release Notes
googleapis/google-api-nodejs-client (googleapis)
v39.1.0Compare Source
03-28-2019 16:17 PDT
This release has security fixes.. Versions 36.0.0 => 39.0.0 have a potential vulnerability where the scope of auth objects may be shared across different clients. This was addressed in #1660, and is part of this minor release. All clients should be updated to the latest version.
Bug Fixes
New Features
Internal / Testing Changes
v39.0.0Compare Source
03-26-2019 22:05 PDT
This release had breaking changes. There have been a variety of TypeScript type changes. There have also been a variety of changes to the Google Plus API, and the OAuth2 API. Please take care!
There are also some sweet new APIs:
New Features
Documentation
Internal / Testing Changes
v38.0.0Compare Source
03-12-2019 14:00 PDT
Greetings y'all! This release has some new APIs, says goodbye to a few older ones, and fixes a bunch of doc issues. Enjoy!
BREAKING CHANGES: The following APIs have been deleted:
The following APIs have been added:
New Features
Bug Fixes
Documentation
Internal / Testing Changes
v37.2.0Compare Source
02-07-2019 14:55 PST
New Features
This pulls in a few new APIs:
Bug fixes
.in api versions (fix adsense API) (#1573)Documentation
v37.1.0Compare Source
01-29-2019 13:33 PST
This release includes a new API for working with Google Docs. Enjoy!
v37.0.0Compare Source
01-28-2019 10:29 PST
This release has breaking changes. But it's also got a lot of good stuff too. Keep reading!
google-auth-library 3.0
The
google-auth-librarymodule has been upgrade to3.0. This comes with it's own breaking changes, which are covered here.gaxios upgrade
Previous versions of this library used the axios library as an underlying HTTP transport. In an effort to fix a variety of problems, this has been swapped out for an API compatible library: gaxios. While we've tried really hard to ensure compatibility with
axios, it's entirely possible there are subtle differences. If you run into trouble - just let us know!Removed APIs
The
replicapoolupdater_v1beta1API has been removed.New features
Webpack support
This library is now webpack-able! Samples and docs are still coming, but you should be able to bundle for the browser now.
New APIs
The following APIs have been introduced:
Changes
It includes the following changes:
Documentation
Dependencies
Bug fixes
v36.0.0Compare Source
12-06-2018 17:35 PST
New APIs
Removed APIs
Features
Bug fixes
Documentation
Internal / Testing Changes
v35.0.0Compare Source
This release has breaking changes. Please take care with your upgrade!
Breaking changes
The following APIs have been deprecated and removed:
New APIs
The following new APIs have been added since the last release:
Generator runs (adds and removes APIs above)
Bug fixes
Dependencies
Samples
Internal / Testing Changes
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.