Update google-gax to 3.6.1
Closed this issue · 1 comments
praveendiwakar1 commented
Please Update the google-gax version to 3.6.1 as we have security vulnerability .
As mentioned here #1768 (comment) , this is on hold for now .
We are using google-cloud/pubsub which is consuming google-gax v.3.5.6 , https://github.com/googleapis/nodejs-pubsub/blob/main/package.json#L61C21-L61C26.
Now ,googleapis/gax-nodejs#1466, shows they've made a fix in google-gax@3.6.1, so please update the google-gax to 3.6.1 [https://www.npmjs.com/package/google-gax] ,so it will resolve the security issue.
feywind commented
@praveendiwakar1 There's a PR to do the update. I'm not sure why renovate-bot didn't make a PR, but thanks for the note.