Skip to content

deps: Bump @grpc/grpc-js from 1.14.4 to 1.14.5 - #2124

Merged
bradygaster merged 3 commits into
devfrom
dependabot/npm_and_yarn/grpc/grpc-js-1.14.5
Oct 2, 2026
Merged

bradygaster merged 3 commits into
devfrom
dependabot/npm_and_yarn/grpc/grpc-js-1.14.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @grpc/grpc-js from 1.14.4 to 1.14.5.

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.5

  • Fix a bug that caused clients to automatically transmit excessive error details to clients by default (advisory GHSA-f596-whhp-79r4)
  • Fix a bug that caused getAuthContext to return unverified certificates as though they were verified in some configurations (advisory GHSA-m9gg-hp2v-232j)
  • Fix a bug that could cause stale call data to accumulate if a channel failed to connect for a long period of time (#3078)
  • Fix a bug that could cause call status to be reported with expected fields missing (#3079)
  • Avoid redundant end() calls on completed HTTP/2 streams (#3082 contributed by @​olavloite)
  • Unify call numbers and avoid disabled trace allocations (#3084 contributed by @​olavloite)
Commits
  • 56567d9 Merge pull request #3086 from murgatroid99/grpc-js_1.14.5
  • 748ae86 Merge pull request #3088 from murgatroid99/grpc-js_perf_improvement_backport
  • 526702d test(grpc-js): fix type errors in client stream lifecycle tests
  • 26a8d3d fix(grpc-js): avoid redundant end() calls on completed HTTP/2 streams
  • 152eebd chore(grpc-js): unify call numbers and avoid disabled trace allocations
  • c5ae750 grpc-js(-xds): Increment version numbers (1.14.x)
  • 735a09a Merge commit from fork
  • af9b140 Merge commit from fork
  • 45ac33e Merge commit from fork
  • 9df49e3 Merge pull request #3081 from murgatroid99/grpc-js-xds_weighted_target_fix_ba...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 1, 2026
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/grpc/grpc-js-1.14.5 branch 5 times, most recently from a99a164 to 5527539 Compare October 1, 2026 20:36
Bumps [@grpc/grpc-js](https://github.com/grpc/grpc-node) from 1.14.4 to 1.14.5.
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.14.4...@grpc/grpc-js@1.14.5)

---
updated-dependencies:
- dependency-name: "@grpc/grpc-js"
  dependency-version: 1.14.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/grpc/grpc-js-1.14.5 branch from 5527539 to ce50f49 Compare October 2, 2026 18:14
@github-actions

github-actions Bot commented Oct 2, 2026 •

Copy link
Copy Markdown
Contributor

🛫 PR Readiness Check

ℹ️ This comment updates on each push. Last checked: commit 359d868

PR Scope: 🔧 Infrastructure

⚠️ 2 item(s) to address before review

Status Check Details
❌ Single commit 3 commits — consider squashing before review
✅ Not in draft Ready for review
✅ Branch up to date Up to date with dev
❌ Copilot review No Copilot review yet — it may still be processing
✅ Changeset present No source files changed — changeset not required
✅ Scope clean No .squad/ or docs/proposals/ files
✅ No merge conflicts No merge conflicts
✅ Copilot threads resolved No Copilot review threads
✅ CI passing All checks passing

Files Changed (1 file, +3 −3)

File +/−
package-lock.json +3 −3

Total: +3 −3


This check runs automatically on every push. Fix any ❌ items and push again.
See CONTRIBUTING.md and PR Requirements for details.

@github-actions

github-actions Bot commented Oct 2, 2026

Copy link
Copy Markdown
Contributor

🟢 Impact Analysis — PR #2124

Risk tier: 🟢 LOW

📊 Summary

Metric Count
Files changed 1
Files added 0
Files modified 1
Files deleted 0
Modules touched 1

🎯 Risk Factors

  • 1 files changed (≤5 → LOW)
  • 1 module(s) touched (≤1 → LOW)

📦 Modules Affected

root (1 file)
  • package-lock.json

This report is generated automatically for every PR. See #733 for details.

@bradygaster
bradygaster merged commit ebf1564 into dev Oct 2, 2026
17 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/grpc/grpc-js-1.14.5 branch October 2, 2026 19:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant