Skip to content

build(deps): bump @grpc/grpc-js from 1.14.4 to 1.14.6 - #66

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/grpc/grpc-js-1.14.5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/grpc/grpc-js-1.14.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @grpc/grpc-js from 1.14.4 to 1.14.6.

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.6

@​grpc/grpc-js 1.14.5

  • Fix a bug that caused clients to automatically transmit excessive error details to clients by default (advisory GHSA-f596-whhp-79r4)
  • Fix a bug that caused getAuthContext to return unverified certificates as though they were verified in some configurations (advisory GHSA-m9gg-hp2v-232j)
  • Fix a bug that could cause stale call data to accumulate if a channel failed to connect for a long period of time (#3078)
  • Fix a bug that could cause call status to be reported with expected fields missing (#3079)
  • Avoid redundant end() calls on completed HTTP/2 streams (#3082 contributed by @​olavloite)
  • Unify call numbers and avoid disabled trace allocations (#3084 contributed by @​olavloite)
Commits
  • c63ed15 Merge pull request #3105 from murgatroid99/grpc-js_error_details_1.14
  • 025cc24 Merge pull request #3107 from olavloite/backport-perf-to-1.14.x
  • 9b50778 grpc-js: Increment version to 1.14.6
  • 1126061 grpc-js: Don't transmit error details by default in server interceptors
  • 40b61a0 perf(grpc-js): avoid allocations for empty CallCredentials on the RPC hot pat...
  • aed1745 test(grpc-js): stabilize weighted round robin tests on slow runners (#3104)
  • 8db8a06 perf(grpc-js): avoid redundant metadata clone in RetryingCall on initial atte...
  • 2aa8b88 perf(grpc-js): memoize method config lookup in default config selector (#3098)
  • e4ccd66 perf(grpc-js): cache precomputed serviceUrl in InternalChannel (#3097)
  • 17c61a5 test(grpc-js): fix Windows CI test failures (#3094)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 5, 2026
Bumps [@grpc/grpc-js](https://github.com/grpc/grpc-node) from 1.14.4 to 1.14.6.
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.14.4...@grpc/grpc-js@1.14.6)

---
updated-dependencies:
- dependency-name: "@grpc/grpc-js"
  dependency-version: 1.14.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump @grpc/grpc-js from 1.14.4 to 1.14.5 build(deps): bump @grpc/grpc-js from 1.14.4 to 1.14.6 Oct 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/grpc/grpc-js-1.14.5 branch from a1891e6 to 3618770 Compare October 15, 2026 18:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants