Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): upgrade pprof to v3.2.1 [security] #885

Merged
merged 1 commit into from
Jul 24, 2023

Conversation

aabmass
Copy link
Collaborator

@aabmass aabmass commented Jul 24, 2023

Fixes #879, take two of #883 with correct commit message (was reverted in #884).

This caused an issue where the proto definitions in protos/ are incompatible with those returned from pprof. The fix I assumed was to regenerate the protos with npm run protos, however this fails because the third_party directory was removed in #486.

To make things work, I instead just imported the same proto definitions from pprof library. I will delete the now unused protos/ directory for the next major version release as someone could theoretically have been importing them from build, just to be safe.

Fixes googleapis#879, take two of googleapis#883 with correct commit message.

This caused an issue where the proto definitions in `protos/` are incompatible with those returned from pprof. The fix I assumed was to regenerate the protos with `npm run protos`, however this fails because the third_party directory was removed in googleapis#486.

To make things work, I instead just imported the same proto definitions from pprof library. I will delete the now unused `protos/` directory for the next major version release as someone could theoretically have been importing them from build, just to be safe.
@aabmass aabmass requested review from a team as code owners July 24, 2023 18:23
@product-auto-label product-auto-label bot added size: s Pull request size is small. api: cloudprofiler Issues related to the googleapis/cloud-profiler-nodejs API. labels Jul 24, 2023
@aabmass aabmass requested a review from psx95 July 24, 2023 18:24
@aabmass aabmass merged commit c140fe5 into googleapis:main Jul 24, 2023
@aabmass aabmass deleted the upgrade-pprof2 branch July 24, 2023 18:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
api: cloudprofiler Issues related to the googleapis/cloud-profiler-nodejs API. size: s Pull request size is small.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CVE-2023-36665 vunerablity in protobufjs >= 6.10.0, < 7.2.4
2 participants