Skip to content

Comments

Update gRPC dependency to address CVE-2024-37168#428

Merged
bestbeforetoday merged 1 commit intohyperledger:mainfrom
denyeart:bump_grpc
Jun 13, 2024
Merged

Update gRPC dependency to address CVE-2024-37168#428
bestbeforetoday merged 1 commit intohyperledger:mainfrom
denyeart:bump_grpc

Conversation

@denyeart
Copy link
Contributor

@denyeart denyeart commented Jun 13, 2024

Bump grpc-js to 1.10.9.
Bump fabric-protos to 0.2.1.
Remove unused proto-loader.

Used rush update command.

Closes #427

@denyeart denyeart requested a review from a team as a code owner June 13, 2024 15:00

settings:
autoInstallPeers: true
autoInstallPeers: false
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not sure why rush decided to change this setting, is it an issue?

Bump grpc-js to 1.10.9.
Bump fabric-protos to 0.2.1.
Remove unused proto-loader.

Used `rush update` command.

Signed-off-by: David Enyeart <enyeart@us.ibm.com>
@bestbeforetoday bestbeforetoday changed the title Bump grpc-js to 1.10.9 Update gRPC dependency to address CVE-2024-37168 Jun 13, 2024
@bestbeforetoday bestbeforetoday merged commit 1da07a6 into hyperledger:main Jun 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update @grpc/grpc-js

2 participants