Skip to content

Bump @grpc/grpc-js and @google-cloud/secret-manager in /secret-manager/secret-manager-client-lib#197

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/secret-manager/secret-manager-client-lib/multi-221cbfa119
Open

Bump @grpc/grpc-js and @google-cloud/secret-manager in /secret-manager/secret-manager-client-lib#197
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/secret-manager/secret-manager-client-lib/multi-221cbfa119

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 11, 2026

Copy link
Copy Markdown

Bumps @grpc/grpc-js to 1.14.4 and updates ancestor dependency @google-cloud/secret-manager. These dependencies need to be updated together.

Updates @grpc/grpc-js from 1.2.12 to 1.14.4

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.4

@​grpc/grpc-js 1.14.3

  • Send halfClose immediately after messages to prevent late halfClose issues with Envoy (#3031 contributed by @​serkanerip)

@​grpc/grpc-js 1.14.2

@​grpc/grpc-js 1.14.1

  • Fix a regression of the settings used internally for HTTP/2 sessions (#3023)

@​grpc/grpc-js-xds 1.14.0

  • Implement RBAC support (gRFC A41) (#2939, #2945)
  • Add weighted_round_robin to LB policy registry (#3001) (currently experimental, enabled by the environment variable GRPC_EXPERIMENTAL_XDS_WRR_LB)
  • Add wrr_locality to LB policy registry (#3003)

@​grpc/grpc-js 1.14.0

Changelog

  • Add getAuthContext method to client and server call classes (more details can be found in gRFC L35) (#2920)
  • Implement custom backend metrics support (gRFC A51) (#2978, #2983, #2985, #2986, #2999)
  • Add getConnectionInfo method to the ServerInterceptingCall class (#2922)
  • Implement the weighted_round_robin load balancing policy (#2998)
  • Fix jitter behavior for client retries (#2960 contributed by @​ekscentrysytet)
  • Start connecting from a random index in the round_robin LB policy (#2979)
  • Send connection-level WINDOW_UPDATE at session start (#2971 contributed by @​KoenRijpstra)

Experimental API Changes

Added:

  • CHANNEL_ARGS_CONFIG_SELECTOR_KEY
  • StatusOr<T>
  • CallStream
  • statusOrFromValue
  • statusOrFromError

Modified:

  • ResolverListener#onSuccessfulResolution now has the signature (endpointList: StatusOr<Endpoint[]>, attributes: { [key: string]: unknown }, serviceConfig: StatusOr<ServiceConfig> | null, resolutionNote: string): boolean
  • LoadBalancer#updateAddressList now has the signature `updateAddressList(endpointList: StatusOr<Endpoint[]>,lbConfig: TypedLoadBalancingConfig, channelOptions: ChannelOptions, resolutionNote: string): boolean

@​grpc/grpc-js 1.13.5

@​grpc/grpc-js 1.13.4

  • Fix ability to set SNI with ssl_target_name_override option (#2956)

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @google-cloud/secret-manager from 3.6.0 to 6.1.3

Release notes

Sourced from @​google-cloud/secret-manager's releases.

secret-manager: v6.1.3

6.1.3 (2026-06-01)

Bug Fixes

service-directory: v6.1.3

6.1.3 (2026-06-01)

Bug Fixes

data: v6.1.0

6.1.0 (2026-05-27)

Features

  • Clean up per-package eslintrc configurations (b053d0e)

cloud-profiler: v6.0.5

6.0.5 (2026-05-11)

Bug Fixes

logging-winston: v6.0.2

6.0.2 (2026-05-11)

Bug Fixes

common: v6.0.1

6.0.1 (2026-05-11)

Bug Fixes

paginator: v6.0.1

6.0.1 (2026-05-11)

... (truncated)

Changelog

Sourced from @​google-cloud/secret-manager's changelog.

6.1.3 (2026-06-01)

Bug Fixes

6.1.2 (2026-05-01)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
  • Do not publish the protos to npm (#8079) (816216b)
  • Revert "fix: Do not publish the protos to npm" (#8096) (ac0fbb6)

6.1.1 (2025-10-13)

Bug Fixes

  • [gkeconnect-gateway] remove unused GatewayServiceClient (#6775) (41c2ff2)
  • Remove unmaintained modules (#6789) (5540190)

6.1.0 (2025-07-09)

Features

  • [Many APIs] add methods from gax to cache proto root and process custom error details (#6419) (f8a324c)
  • [Many APIs] add methods from gax to cache proto root and process custom error details (#6423) (df9184f)
  • [secretmanager] update secret manager protos for tags (#6400) (b41f79d)
  • Add protobufjs 2023 edition support (#6303) (4a0cba1)

6.0.1 (2025-03-19)

Bug Fixes

  • [Many APIs] await/catch promises, and update listOperationsAsync return type (#6188) (a73cdbf)

6.0.0 (2025-03-18)

⚠ BREAKING CHANGES

  • upgrade to Node 18 (#6096)

Features

... (truncated)

Commits
  • 2b23ba2 chore: release main (#8367)
  • 3ec901e fix(deps): remove vulnerable dependency uuid (#8120)
  • ea7ec63 chore: [Many APIs] update generator version to newest release v4.11.14 (#8276)
  • 4aa32f5 chore: consolidate eslint rules (#8155)
  • 4572246 chore: release main (#8148)
  • 59f445d fix: sync legacy 0.1.0 snippet metadata versions across monorepo (#8144)
  • c1a03fe fix: change the copyright year for files in the packages folder (#8109)
  • a47507c chore: consolidate prettierignore and prettierrc files: autogen (#8082)
  • ac0fbb6 fix: Revert "fix: Do not publish the protos to npm" (#8096)
  • 816216b fix: Do not publish the protos to npm (#8079)
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@grpc/grpc-js](https://github.com/grpc/grpc-node) to 1.14.4 and updates ancestor dependency [@google-cloud/secret-manager](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-secretmanager). These dependencies need to be updated together.


Updates `@grpc/grpc-js` from 1.2.12 to 1.14.4
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/commits/@grpc/grpc-js@1.14.4)

Updates `@google-cloud/secret-manager` from 3.6.0 to 6.1.3
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-secretmanager/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/secret-manager-v6.1.3/packages/google-cloud-secretmanager)

---
updated-dependencies:
- dependency-name: "@grpc/grpc-js"
  dependency-version: 1.14.4
  dependency-type: indirect
- dependency-name: "@google-cloud/secret-manager"
  dependency-version: 6.1.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants