build(deps): bump @grpc/grpc-js and newrelic

[dependabot]

Bumps @grpc/grpc-js to 1.8.17 and updates ancestor dependency newrelic. These dependencies need to be updated together.

Updates @grpc/grpc-js from 1.2.2 to 1.8.17

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.8.17

• Disallow pick_first LB policy as the direct child of an outlier_detection LB policy (#2476)

@​grpc/grpc-js 1.8.16

• Fix missing transport trace logs (#2470)

@​grpc/grpc-js 1.8.15

• Fix a memory leak that could result from a specific pattern of recursive function calls (#2456)
• Ensure status and error events are consistently emitted asynchronously (#2456)

@​grpc/grpc-js 1.8.14

• Fix sequencing of some events related to connectivity state changes (#2421)

@​grpc/grpc-js 1.8.13

• Fix memory leak in channelz socket tracking (#2394)

@​grpc/grpc-js@​1.8.12

• Fix an occasional type error when receiving DNS updates (#2380)
• Fix ordering of events when handing requests on the server (#2376 contributed by @​phoenix741)

@​grpc/grpc-js 1.8.11

• Avoid accumulating placeholder objects when sending many messages on a long-running stream (#2372)

@​grpc/grpc-js 1.8.10

• Fix bugs in "pick first" load balancing policy that caused incorrect reconnection behavior (#2369)

@​grpc/grpc-js 1.8.9

• Fix a bug where clients would continue to send pings at the original configured rate after receiving a backoff request from the server (#2363)

@​grpc/grpc-js 1.8.8

• Remove progress field in returned status object (#2350)
• Export InterceptingListener and NextCall types (#2351)
• Fix a bug that could cause a crash when sending messages that exceed the outgoing message buffer size while a retry is in progress (#2349)

@​grpc/grpc-js 1.8.7

• Make handling of HTTP2 session references work independent of keepalive settings (#2337)

@​grpc/grpc-js 1.8.6

• Hold a reference to transport from call to avoid premature garbage collection (#2336)

@​grpc/grpc-js 1.8.5

• Cancel deadline timer when the call ends (#2335)

@​grpc/grpc-js@​1.8.4

• Fix a bug that would sometimes allow the Node process to exit even though a gRPC request is active (#2322)

@​grpc/grpc-js 1.8.3

• Fix bug that caused streams to fail early when receiving a GOAWAY (#2319)

@​grpc/grpc-js@​1.8.2

... (truncated)

Commits

• See full diff in compare view

Updates newrelic from 7.1.0 to 7.5.2

Release notes

Sourced from newrelic's releases.

v7.5.2

• Fixed bug where promise-based cursor methods would not properly measure the duration of execution.

v7.5.1

• Fixed loading config from the main module's directory. Thank you @​alexpls for the contribution.

• Moved all integration tests that required secrets to the smoke folder.

• Fixed LASP/CSP tests so they don't skip on runs where secrets are available.

• Modified self-signed SSL cert to use 'localhost' instead of 'ssl.lvh.me' for SSL testing.

• Removed unnecessary trace observer configuration validation for host and port.

v7.5.0

• Added default support for config files with a 'cjs' extension (newrelic.cjs) in addition to newrelic.js.

  Thank you to @​Maddemacher for the contribution!

• Added ability to specify a custom config file name with the NEW_RELIC_CONFIG_FILENAME environment variable.

  Thank you to @​Maddemacher for the contribution!

• Fixed issue when using the 'new_promise_tracking' feature flag where segment mapping may not get cleaned up for promises which never resolve but have all references removed (and thus get cleaned up by GC).

  Adds segment cleanup on 'destroy' when using 'new_promise_tracking' feature flag in addition to the existing 'promiseResolve' hook. Unfortunately, preventing leaks for this edge-case does come with additional overhead due to adding another hook. Memory gains from feature flag usage should still be worth the trade-off and reduced garbage collection may offset perf/CPU impacts or event still result in net gain, depending on the application.

• Bumped @newrelic/test-utilities to ^5.1.0.

• Replaced deprecated util.isArray with Array.isArray.

• Removed unused listenerCount method on Shim.

• Properly bootstraped husky as a prepare script.

• Removed commented-out console log from fastify instrumentation.

v7.4.0

• Updated third party notices and manifest for husky and lint-staged.

• Updated redis versioned tests to use unique DB indexes per file to avoid collisions and flushing of in-progress tests.

• Pinned hapi 17 versioned tests to only minor/patch versions within 17.x.

• Bumped timeout for redis versioned tests.

• Wired up husky + lint staged to execute linting on all changed files in pre-commit hook.

• Handled a proxy misconfiguration of collector and log an actionable warning message.

... (truncated)

Changelog

Sourced from newrelic's changelog.

{ "repository": "newrelic/node-newrelic", "entries": [ { "version": "10.4.0", "changes": { "security": [], "bugfixes": [], "features": [] } }, { "version": "10.3.2", "changes": { "security": [ "Updated security agent to v0.1.3", "bump fast-xml-parser and @​aws-sdk/client-lambda" ], "bugfixes": [ "check for query args in string property" ], "features": [] } }, { "version": "10.3.1", "changes": { "security": [ "Updated semver dependency to 7.5.2, also updating @​newrelic/native-metrics, and @​newrelic/test-utilities" ], "bugfixes": [], "features": [] } }, { "version": "10.3.0", "changes": { "security": [], "bugfixes": [], "features": [ "Added IAST security agent capabilities when security.agent.enabled is true" ] } }, { "version": "10.2.0", "changes": { "security": [], "bugfixes": [], "features": [

... (truncated)

Commits

• 4fe3fae Merge pull request #795 from newrelic/release/v7.5.2
• a7a60ab tweaked release item
• f078488 Adds auto-generated release notes.
• ebaa566 Setting version to v7.5.2.
• 06ab2bb Merge pull request #792 from bizob2828/bind-mongo-cursor-promise-methods
• c6bf1fc changed test to be % based
• a9385f8 added option to bind promises for cursor methods in mongodb
• 583502a Merge pull request #787 from newrelic/release/v7.5.1
• 1df780e update release notes
• ac18523 Adds auto-generated release notes.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.