[Snyk] Upgrade @google-cloud/iot from 0.2.1 to 2.5.1

[snyk-bot]

Snyk has created this PR to upgrade @google-cloud/iot from 0.2.1 to 2.5.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 33 versions ahead of your current version.
• The recommended version was released 5 months ago, on 2021-09-27.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-JSONBIGINT-608659	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-GRPCGRPCJS-1038818	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @google-cloud/iot

• 2.5.1 - 2021-09-27
  

  Bug Fixes

  • deps: update dependency @ google-cloud/storage to v5 (#515) (ba34e57)
• 2.5.0 - 2021-09-17
  

  Features

  • Add sample codes for cloud-iot-token-service generateAccessToken API (#502) (21ef5c7)
• 2.4.0 - 2021-09-03
  

  Features

  • turns on self-signed JWT feature flag (#509) (09350a3)

  Bug Fixes

  • build: migrate to main branch (#512) (8528684)
• 2.3.6 - 2021-08-17
  

  Bug Fixes

  • deps: google-gax v2.24.1 (#507) (8fa3d71)
• 2.3.5 - 2021-07-21
  

  Bug Fixes

  • deps: google-gax v2.17.1 (#496) (dc278eb)
  • Updating WORKSPACE files to use the newest version of the Typescript generator. (#499) (0e5967f)
• 2.3.4 - 2021-07-01
  

  Bug Fixes

  • deps: require google-gax v2.17.0 (#493) (f61a834)
• 2.3.3 - 2021-06-23
  

  Bug Fixes

  • make request optional in all cases (#487) (72c258b)
• 2.3.2 - 2021-06-07
  

  Bug Fixes

  • GoogleAdsError missing using generator version after 1.3.0 (#478) (5c20030)
• 2.3.1 - 2021-05-13
  

  Bug Fixes

  • deps: require google-gax v2.12.0 (#469) (fba8758)
  • use require() to load JSON protos (#472) (d963cf7)
• 2.3.0 - 2021-02-11
  

  Features

  • add serverCertFile parameter (#438) (e979160)
• 2.2.1 - 2021-02-09
• 2.2.0 - 2021-01-12
• 2.1.3 - 2020-12-02
• 2.1.2 - 2020-11-16
• 2.1.1 - 2020-07-15
• 2.1.0 - 2020-06-29
• 2.0.2 - 2020-06-04
• 2.0.1 - 2020-05-18
• 2.0.0 - 2020-04-13
• 1.8.0 - 2020-03-11
• 1.7.0 - 2020-01-30
• 1.6.1 - 2020-01-09
• 1.6.0 - 2020-01-06
• 1.5.0 - 2019-11-20
• 1.4.0 - 2019-11-18
• 1.3.1 - 2019-11-13
• 1.3.0 - 2019-10-22
• 1.2.0 - 2019-09-16
• 1.1.3 - 2019-08-02
• 1.1.2 - 2019-06-27
• 1.1.1 - 2019-06-14
• 1.1.0 - 2019-06-06
• 1.0.0 - 2019-05-20
• 0.2.1 - 2019-03-13

from @google-cloud/iot GitHub release notes

Commit messages

Package name: @google-cloud/iot

• 5c3676d chore: release 2.5.1 (Bump decode-uri-component from 0.2.0 to 0.2.2 in /tutorials/cloud-iot-mender-ota/auth-function/functions #519)
• ba34e57 fix(deps): update dependency @ google-cloud/storage to v5 (Bump cookiejar from 2.1.0 to 2.1.4 in /archived/express-memcached-session-appengine #515)
• e40359e chore: relocate owl bot post processor ([Snyk] Security upgrade python from 3.8.0-slim to 3.8-slim #516)
• 23833fd chore: release 2.5.0 ([Snyk] Security upgrade python from 3.7.2 to 3.12.0a4 #514)
• 21ef5c7 feat: Add sample codes for cloud-iot-token-service generateAccessToken API ([Snyk] Fix for 1 vulnerabilities #502)
• 567a6fb build: enable release-trigger bot (moving tutorial to archived folder pending fix for security vulnerability GoogleCloudPlatform/community#1212) ([Snyk] Security upgrade setuptools from 39.0.1 to 65.5.1 #513)
• 827328c chore: release 2.4.0 ([Snyk] Fix for 4 vulnerabilities #510)
• 8528684 fix(build): migrate to main branch ([Snyk] Security upgrade python from 3.7.2 to 3.11.1 #512)
• c837136 chore: disable renovate dependency dashboard (#1194) ([Snyk] Security upgrade future from 0.16.0 to 0.18.3 #511)
• 09350a3 feat: turns on self-signed JWT feature flag ([Snyk] Fix for 2 vulnerabilities #509)
• 604a9e5 chore: release 2.3.6 ([Snyk] Fix for 2 vulnerabilities #508)
• 8fa3d71 fix(deps): google-gax v2.24.1 ([Snyk] Fix for 2 vulnerabilities #507)
• 0c6bf64 chore(nodejs): update client ref docs link in metadata ([Snyk] Security upgrade io.grpc:grpc-protobuf from 1.15.1 to 1.52.0 #505)
• 9fc00b6 build: update auto-approve config for new validation (Update index.md GoogleCloudPlatform/community#1169) ([Snyk] Security upgrade com.google.cloud.dataflow:google-cloud-dataflow-java-sdk-all from 2.1.0 to 2.3.0 #503)
• c1a8bac chore: release 2.3.5 ([Snyk] Security upgrade python from 3.7.2 to 3.11.1 #497)
• e39ef4f build: switch to release-please release tagging (#1129) ([Snyk] Security upgrade io.jsonwebtoken:jjwt from 0.7.0 to 0.8.0 #501)
• 0e5967f fix: Updating WORKSPACE files to use the newest version of the Typescript generator. ([Snyk] Security upgrade python from 3.7.2 to 3.12.0a3 #499)
• dc278eb fix(deps): google-gax v2.17.1 ([Snyk] Security upgrade urllib3 from 1.24.2 to 1.24.3 #496)
• c004a1b chore: release 2.3.4 ([Snyk] Fix for 12 vulnerabilities #495)
• f61a834 fix(deps): require google-gax v2.17.0 ([Snyk] Security upgrade react-scripts from 4.0.3 to 5.0.0 #493)
• 85511b2 build: auto-approve renovate-bot PRs for minor updates (removed two extraneous asterisks GoogleCloudPlatform/community#1145) ([Snyk] Security upgrade webpack from 2.2.1 to 5.0.0 #494)
• 8090d43 build(node): do not throw on deprecation (#1140) ([Snyk] Fix for 4 vulnerabilities #492)
• c890606 build(node): don't throw on deprecation in unit tests ([Snyk] Fix for 9 vulnerabilities #491)
• df4c9a8 chore: release 2.3.3 ([Snyk] Security upgrade setuptools from 39.0.1 to 65.5.1 #488)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs