Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

@google-cloud/logging-min not being released #1496

Closed
vlinder opened this issue Apr 11, 2024 · 4 comments
Closed

@google-cloud/logging-min not being released #1496

vlinder opened this issue Apr 11, 2024 · 4 comments
Assignees
@cindy-peng
Labels
api: logging Issues related to the googleapis/nodejs-logging API. priority: p3 Desirable enhancement or fix. May not be included in next release. type: question Request for information or clarification. Not an issue.

Comments

@vlinder
Copy link

vlinder commented Apr 11, 2024

It seems that the package @google-cloud/logging-min is not being kept up to date and released at the same time as @google-cloud/logging

@google-cloud/loggin-min still has a dependency on an old version of 'google-gax': '^3.5.2' which now has a security vulnerability through protobufjs.

Would it be possible to release @google-cloud/logging-min together with @google-cloud/logging?
@vlinder vlinder added priority: p3 Desirable enhancement or fix. May not be included in next release. type: question Request for information or clarification. Not an issue. labels Apr 11, 2024
@product-auto-label product-auto-label bot added the api: logging Issues related to the googleapis/nodejs-logging API. label Apr 11, 2024
@scaryguy scaryguy mentioned this issue Apr 15, 2024
Closed
@jportner
Copy link

jportner commented Jun 4, 2024

@cindy-peng any chance you can take a look at this? It would be great to get a new release of @google-cloud/logging-min

@levyeden levyeden mentioned this issue Jul 19, 2024
Closed
@klon
Copy link

klon commented Aug 17, 2024

@cindy-peng What is going on here, why is it taking months to get this fixed? There is a critical vulnerability in a dependency that is not getting fixed due to this seemingly trivial task.

@aabmass aabmass mentioned this issue Sep 10, 2024
Closed
@cindy-peng
Copy link
Contributor

Sorry about the late response! We have released a newer version for @google-cloud/logging-min: https://www.npmjs.com/package/@google-cloud/logging-min?activeTab=readme
Please retry and let us know if this resolves the vulnerability issue. Thanks!

@cindy-peng
Copy link
Contributor

Closing issue as the new version has been released and should resolve the vulnerability.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@cindy-peng cindy-peng

Labels
api: logging Issues related to the googleapis/nodejs-logging API. priority: p3 Desirable enhancement or fix. May not be included in next release. type: question Request for information or clarification. Not an issue.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@vlinder @klon @jportner @cindy-peng