Skip to content
This repository has been archived by the owner on Oct 3, 2023. It is now read-only.

chore(stackdriver): upgrade google-auth-library, drop node8 #887

Merged
merged 1 commit into from
Feb 16, 2021

Conversation

aabmass
Copy link
Member

@aabmass aabmass commented Feb 14, 2021

BREAKING CHANGE: major version upgrade google-auth-library
BREAKING CHANGE: dropping support node8 for security fix


Partial fix for #864

  • To fix a high vulnerability security problem in google-auth-library, had to upgrade to v6 which only supports node10+.
  • Clean/refactor the CircleCI config so that I can pass extra arguments to skip this package on the node8 build
  • Also had to upgrade typescript to support this, and make some ts annotation changes for this
  • Upgraded package-lock (doesn't effect users) with npm audit fix, no longer any security issues.
  • npm run fix to re-format code with upgrade gts

@google-cla google-cla bot added the cla: yes label Feb 14, 2021
@aabmass aabmass changed the title upgrade auth library chore: update broken package-lock resolves Feb 14, 2021
@aabmass aabmass force-pushed the upgrade-auth-library branch from 4c9bf3a to 236712c Compare February 14, 2021 04:57
@aabmass aabmass changed the title chore: update broken package-lock resolves chore(stackdriver): upgrade google-auth-library Feb 14, 2021
@aabmass aabmass force-pushed the upgrade-auth-library branch from 236712c to c8791de Compare February 14, 2021 18:06
@aabmass aabmass changed the title chore(stackdriver): upgrade google-auth-library chore(stackdriver): upgrade google-auth-library, drop node8 Feb 14, 2021
@aabmass aabmass force-pushed the upgrade-auth-library branch 5 times, most recently from 5623d5d to 4a89df4 Compare February 14, 2021 20:35
@aabmass aabmass marked this pull request as ready for review February 14, 2021 22:26
@aabmass aabmass requested review from jsuereth and punya February 14, 2021 22:26
filters: *release_tags
matrix:
parameters:
node_version: [10, 11, 12]
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not related to this PR, but in future we should consider not adding support for new unstable (odd-numbered) versions of NodeJS.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

agreed

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we just leave these versions and not add any?

@aabmass aabmass force-pushed the upgrade-auth-library branch from 4a89df4 to 582d93b Compare February 16, 2021 15:57
BREAKING CHANGE: major version upgrade google-auth-library
BREAKING CHANGE: dropping support node8 for security fix
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Please update the google-auth-library >=6.1.0 and googleapis >=60.0.1
3 participants