Skip to content
This repository was archived by the owner on Feb 20, 2026. It is now read-only.

fix(deps): upgrade pprof to v3.2.1 [security]#885

Merged
aabmass merged 1 commit intogoogleapis:mainfrom
aabmass:upgrade-pprof2
Jul 24, 2023
Merged

fix(deps): upgrade pprof to v3.2.1 [security]#885
aabmass merged 1 commit intogoogleapis:mainfrom
aabmass:upgrade-pprof2

Conversation

@aabmass
Copy link
Contributor

@aabmass aabmass commented Jul 24, 2023

Fixes #879, take two of #883 with correct commit message (was reverted in #884).

This caused an issue where the proto definitions in protos/ are incompatible with those returned from pprof. The fix I assumed was to regenerate the protos with npm run protos, however this fails because the third_party directory was removed in #486.

To make things work, I instead just imported the same proto definitions from pprof library. I will delete the now unused protos/ directory for the next major version release as someone could theoretically have been importing them from build, just to be safe.

Fixes googleapis#879, take two of googleapis#883 with correct commit message.

This caused an issue where the proto definitions in `protos/` are incompatible with those returned from pprof. The fix I assumed was to regenerate the protos with `npm run protos`, however this fails because the third_party directory was removed in googleapis#486.

To make things work, I instead just imported the same proto definitions from pprof library. I will delete the now unused `protos/` directory for the next major version release as someone could theoretically have been importing them from build, just to be safe.
@aabmass aabmass requested a review from a team as a code owner July 24, 2023 18:23
@aabmass aabmass requested a review from a team July 24, 2023 18:23
@product-auto-label product-auto-label bot added size: s Pull request size is small. api: cloudprofiler Issues related to the googleapis/cloud-profiler-nodejs API. labels Jul 24, 2023
@aabmass aabmass requested a review from psx95 July 24, 2023 18:24
@aabmass aabmass merged commit c140fe5 into googleapis:main Jul 24, 2023
@aabmass aabmass deleted the upgrade-pprof2 branch July 24, 2023 18:44
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

api: cloudprofiler Issues related to the googleapis/cloud-profiler-nodejs API. size: s Pull request size is small.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CVE-2023-36665 vunerablity in protobufjs >= 6.10.0, < 7.2.4

2 participants