Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency @google-cloud/storage to v5 #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Jul 5, 2022

This PR contains the following updates:

Package Type Update Change
@google-cloud/storage dependencies major ^2.3.1 -> ^5.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2018-16492
Critical Critical 9.8 CVE-2020-7720
High High 7.8 CVE-2021-43138
High High 7.5 CVE-2019-10742
High High 7.5 CVE-2021-3749
High High 7.5 CVE-2022-24771
High High 7.5 CVE-2022-24772
High High 7.5 WS-2019-0310
High High 7.5 WS-2023-0439
High High 7.3 CVE-2020-8116
High High 7.3 CVE-2023-26159
Medium Medium 6.6 WS-2022-0008
Medium Medium 6.5 CVE-2022-0155
Medium Medium 6.5 CVE-2023-45857
Medium Medium 6.1 CVE-2022-0122
Medium Medium 6.1 CVE-2022-0235
Medium Medium 5.9 CVE-2020-28168
Medium Medium 5.3 CVE-2022-24773
Medium Medium 5.3 CVE-2022-25883
Low Low 3.7 CVE-2017-16137
Low Low 2.6 CVE-2020-15168
Low Low 2.6 CVE-2022-0536

Release Notes

googleapis/nodejs-storage (@​google-cloud/storage)

v5.0.0

Compare Source

⚠ BREAKING CHANGES
  • automatically detect contentType if not provided (#​1190)
  • drop keepAcl parameter in file copy (#​1166)
  • drop support for node.js 8.x
Features
Bug Fixes
Miscellaneous Chores
Build System
  • drop support for node.js 8.x (b80c025)

v4.7.2

Compare Source

Bug Fixes

v4.7.0

Compare Source

Features
Bug Fixes

v4.6.0

Compare Source

Features
  • storage: Add versioning as optional metadata param of createBucket (#​1090) (39869e3)

v4.5.0

Compare Source

Features

v4.4.0

Compare Source

Features
4.3.2 (2020-03-02)
Bug Fixes
4.3.1 (2020-02-06)
Bug Fixes

v4.3.2

Compare Source

v4.3.1

Compare Source

v4.3.0

Compare Source

Features
Bug Fixes

v4.2.0

Compare Source

Features
Bug Fixes
4.1.3 (2019-11-18)
Bug Fixes
4.1.2 (2019-11-12)
Bug Fixes
4.1.1 (2019-11-07)
Bug Fixes

v4.1.3

Compare Source

v4.1.2

Compare Source

v4.1.1

Compare Source

v4.1.0

Compare Source

Features
4.0.1 (2019-10-31)
Bug Fixes
  • docs: missing quote in signed url jsdoc (#​896) (f2d567f)
  • use storage.googleapis.com for api endpoint (862fb16)
  • signed-url: replace encodeURIComponent with custom encoding function (#​905) (ba41517)

v4.0.1

Compare Source

v4.0.0

Compare Source

⚠ BREAKING CHANGES
  • allow leading slashes in file name (#​820)
Bug Fixes

v3.5.0

Compare Source

Features

v3.4.0

Compare Source

Bug Fixes
  • file#move do not delete origin file if same as destination (#​874) (dcaba8a)
  • pass predefined acl as destinationPredefinedAcl to qs (#​872) (09b8fa4)
Features
  • add flag to allow disabling auto decompression by client (#​850) (9ebface)
  • allow setting standard Bucket storage class (#​873) (12a99e9)
3.3.1 (2019-09-30)
Bug Fixes

v3.3.1

Compare Source

v3.3.0

Compare Source

Bug Fixes
Features
  • adds support for asyncIterators (via readable-stream@3 dependency) (dd5ae7f)
  • allow removal of resumable upload cache (#​773) (da943db), closes #​217
3.2.1 (2019-08-28)
Bug Fixes
  • docs: stop redirecting reference docs to anchor, add new sample to README (bbb5537)
  • samples: fix failing sample view IAM member-role groups (1c4f21f)

v3.2.1

Compare Source

v3.2.0

Compare Source

Bug Fixes
Features

v3.1.0

Compare Source

Bug Fixes
Features
  • file: allow setting configPath of resumable upload (#​642) (a8ceb78)
3.0.4 (2019-07-25)
Bug Fixes
3.0.3 (2019-07-16)
Bug Fixes
3.0.2 (2019-07-01)
Bug Fixes
3.0.1 (2019-06-14)
Bug Fixes

v3.0.4

Compare Source

v3.0.3

Compare Source

v3.0.2

Compare Source

v3.0.1

Compare Source

v3.0.0

Compare Source

⚠ BREAKING CHANGES
  • upgrade engines field to >=8.10.0 (#​688)
Bug Fixes
Build System
Features

v2.5.0

Compare Source

04-04-2019 12:27 PDT

This release brings an option to file#getSignedURL to create a version 4 Signed URL.

file.getSignedUrl({
  version: 'v4', // optional, defaults to v2 (existing version)
  action: 'read',
  expires: FUTURE_DATE,
})
New Features
  • feat: introduce v4 signed url (#​637)
Dependencies
Documentation
  • docs: regenerate the samples/README.md (#​649)
  • docs: slight difference in how nightly synthtool run generated README (#​650)
  • docs: new synthtool generated README (#​645)
  • docs(samples): refactor the quickstart to match the new rubric (#​647)
  • docs: update README format
  • docs: add requires_billing, retire .cloud-repo-tools.json (#​644)
  • docs: add additional api_id field (#​640)
  • docs: document destination option (#​633)
  • docs: clarify in docs, the meaning of ASIA and coldline (#​632)
  • docs: add a .repo-metadata.json (#​639)
Internal / Testing Changes
  • test(v2-sign): add multi-valued headers system-test (#​646)
  • refactor: replace once with onetime (#​660)
  • fix: do not download cached files (#​643)
  • chore: publish to npm using wombat (#​634)
  • build: use per-repo npm publish token (#​630)

v2.4.3

Compare Source

03-13-2019 17:10 PDT

Bug Fixes / Implementation Changes
  • fix: getSigned(Policy|Url) throws if expiration is invalid Date (#​614)
  • fix: handle errors from file#createReadStream (#​615)
Dependencies
Documentation
  • docs: update links in contrib guide (#​610)
  • docs: update contributing path in README (#​603)
  • chore: move CONTRIBUTING.md to root (#​601)
Internal / Testing Changes
  • build: Add docuploader credentials to node publish jobs (#​624)
  • build: use node10 to run samples-test, system-test etc (#​623)
  • build: update release configuration
  • build: use linkinator for docs test (#​607)
  • build: create docs test npm scripts (#​605)
  • build: test using @​grpc/grpc-js in CI (#​604)
  • chore: remove console.log in system test (#​599)

v2.4.2

Compare Source

02-05-2019 16:55 PST

Dependencies
Documentation
  • docs: add lint/fix example to contributing guide (#​594)
Internal / Testing Changes
  • test: skip public bucket system tests running under VPCSC (#​595)

v2.4.1

Compare Source

01-29-2019 13:05 PST

Implementation Changes
  • fix(ts): fix Storage.createBucket overloaded signature (#​589)
Dependencies

v2.4.0

Compare Source

01-28-2019 12:13 PST

New Features
  • fix: expires can be a Date, string, or number (#​548)
Dependencies
Documentation
  • docs(samples): Bucket Policy Only Samples (#​557)
  • fix(docs): move jsdoc away from interface (#​565)
Internal / Testing Changes
  • test: Bucket Policy Only related system test (#​579)
  • build: check broken links in generated docs (#​567)
  • build: include only build/src in compiled source (#​572)

v2.3.4

Compare Source

12-19-2018 14:21 PST

Implementation Changes
  • fix(types): file.getMetadata should resolves to Metadata, not File (#​560)
Internal / Testing Changes
  • refactor: modernize the sample tests (#​558)
  • chore(build): inject yoshi automation key (#​555)
  • chore: update nyc and eslint configs (#​554)
  • chore: fix publish.sh permission +x (#​552)
  • fix(build): fix Kokoro release script (#​551)
  • build: add Kokoro configs for autorelease (#​550)

v2.3.3

Compare Source

12-06-2018 17:09 PST

Dependencies
Documentation
  • fix(docs): place doc comment above the last overload (#​544)
  • docs: update readme badges (#​536)
Internal / Testing Changes
  • chore: always nyc report before calling codecov (#​543)
  • chore: nyc ignore build/test by default (#​542)
  • chore: update license file (#​539)

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Jul 5, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @google-cloud/storage to v5 Update dependency @google-cloud/storage to v5 - autoclosed Mar 26, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/google-cloud-storage-5.x branch March 26, 2023 11:58
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @google-cloud/storage to v5 - autoclosed Update dependency @google-cloud/storage to v5 Mar 31, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/google-cloud-storage-5.x branch March 31, 2023 04:50
@mend-for-github-com mend-for-github-com bot reopened this Mar 31, 2023
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @google-cloud/storage to v5 Update dependency @google-cloud/storage to v5 - autoclosed Apr 23, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/google-cloud-storage-5.x branch April 23, 2023 11:24
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @google-cloud/storage to v5 - autoclosed Update dependency @google-cloud/storage to v5 Apr 24, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/google-cloud-storage-5.x branch April 24, 2023 11:09
@mend-for-github-com mend-for-github-com bot reopened this Apr 24, 2023
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @google-cloud/storage to v5 Update dependency @google-cloud/storage to v5 - autoclosed Jun 14, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/google-cloud-storage-5.x branch June 14, 2023 21:23
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @google-cloud/storage to v5 - autoclosed Update dependency @google-cloud/storage to v5 Jun 18, 2023
@mend-for-github-com mend-for-github-com bot reopened this Jun 18, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/google-cloud-storage-5.x branch June 18, 2023 11:56
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/google-cloud-storage-5.x branch from f7e2818 to 2b2dc6e Compare June 18, 2023 11:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants