Skip to content

fix(deps): bump internal dependencies in @google-cloud/storage#8595

Open
mhassan1 wants to merge 1 commit into
googleapis:mainfrom
mhassan1:bump-storage-internal-deps
Open

fix(deps): bump internal dependencies in @google-cloud/storage#8595
mhassan1 wants to merge 1 commit into
googleapis:mainfrom
mhassan1:bump-storage-internal-deps

Conversation

@mhassan1

@mhassan1 mhassan1 commented Jun 11, 2026

Copy link
Copy Markdown
Contributor

This PR bumps internal dependencies in @google-cloud/storage to remove its transitive dependency on vulnerable uuid (GHSA-w5hq-g745-h8pq).

@mhassan1 mhassan1 requested a review from a team as a code owner June 11, 2026 19:35
"fast-xml-parser": "^5.3.4",
"gaxios": "^6.0.2",
"google-auth-library": "^9.6.3",
"gaxios": "^7.1.5",

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@shivanee-p @pearigee one potential problem with this approach is that the target versions of these dependencies have engines.node >= 18, while @google-cloud/storage@7 has engines.node >= 14; what do you think?

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates several dependencies in handwritten/storage/package.json, upgrading gaxios, google-auth-library, retry-request, and teeny-request to their newer versions. There are no review comments, and I have no feedback to provide.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant