Skip to content

build(deps): bump @grpc/grpc-js from 1.14.4 to 1.14.5 - #3267

Merged
lahirumaramba merged 1 commit into
mainfrom
dependabot/npm_and_yarn/grpc/grpc-js-1.14.5
Oct 7, 2026
Merged

lahirumaramba merged 1 commit into
mainfrom
dependabot/npm_and_yarn/grpc/grpc-js-1.14.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @grpc/grpc-js from 1.14.4 to 1.14.5.

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.5

  • Fix a bug that caused clients to automatically transmit excessive error details to clients by default (advisory GHSA-f596-whhp-79r4)
  • Fix a bug that caused getAuthContext to return unverified certificates as though they were verified in some configurations (advisory GHSA-m9gg-hp2v-232j)
  • Fix a bug that could cause stale call data to accumulate if a channel failed to connect for a long period of time (#3078)
  • Fix a bug that could cause call status to be reported with expected fields missing (#3079)
  • Avoid redundant end() calls on completed HTTP/2 streams (#3082 contributed by @​olavloite)
  • Unify call numbers and avoid disabled trace allocations (#3084 contributed by @​olavloite)
Commits
  • 56567d9 Merge pull request #3086 from murgatroid99/grpc-js_1.14.5
  • 748ae86 Merge pull request #3088 from murgatroid99/grpc-js_perf_improvement_backport
  • 526702d test(grpc-js): fix type errors in client stream lifecycle tests
  • 26a8d3d fix(grpc-js): avoid redundant end() calls on completed HTTP/2 streams
  • 152eebd chore(grpc-js): unify call numbers and avoid disabled trace allocations
  • c5ae750 grpc-js(-xds): Increment version numbers (1.14.x)
  • 735a09a Merge commit from fork
  • af9b140 Merge commit from fork
  • 45ac33e Merge commit from fork
  • 9df49e3 Merge pull request #3081 from murgatroid99/grpc-js-xds_weighted_target_fix_ba...
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from a team October 2, 2026 10:36
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/grpc/grpc-js-1.14.5 branch 4 times, most recently from abd2dc8 to 43b2a68 Compare October 7, 2026 19:56
Bumps [@grpc/grpc-js](https://github.com/grpc/grpc-node) from 1.14.4 to 1.14.5.
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.14.4...@grpc/grpc-js@1.14.5)

---
updated-dependencies:
- dependency-name: "@grpc/grpc-js"
  dependency-version: 1.14.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/grpc/grpc-js-1.14.5 branch from 43b2a68 to 4f0e49e Compare October 7, 2026 20:11
@lahirumaramba
lahirumaramba merged commit 55fc15f into main Oct 7, 2026
18 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/grpc/grpc-js-1.14.5 branch October 7, 2026 20:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant