Skip to content

fix(deps): bump internal dependencies in @google-cloud/storage#8595

Open
mhassan1 wants to merge 1 commit into
googleapis:mainfrom
mhassan1:bump-storage-internal-deps
Open

fix(deps): bump internal dependencies in @google-cloud/storage#8595
mhassan1 wants to merge 1 commit into
googleapis:mainfrom
mhassan1:bump-storage-internal-deps

Conversation

@mhassan1

@mhassan1 mhassan1 commented Jun 11, 2026

Copy link
Copy Markdown
Contributor

This PR bumps internal dependencies in @google-cloud/storage to remove its transitive dependency on vulnerable uuid (GHSA-w5hq-g745-h8pq).

@mhassan1 mhassan1 requested a review from a team as a code owner June 11, 2026 19:35
"fast-xml-parser": "^5.3.4",
"gaxios": "^6.0.2",
"google-auth-library": "^9.6.3",
"gaxios": "^7.1.5",

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@shivanee-p @pearigee one potential problem with this approach is that the target versions of these dependencies have engines.node >= 18, while @google-cloud/storage@7 has engines.node >= 14; what do you think?

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates several dependencies in handwritten/storage/package.json, upgrading gaxios, google-auth-library, retry-request, and teeny-request to their newer versions. There are no review comments, and I have no feedback to provide.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet