[Snyk] Upgrade @grpc/grpc-js from 1.4.6 to 1.10.10

[snyk-io]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade @grpc/grpc-js from 1.4.6 to 1.10.10.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 78 versions ahead of your current version.

• The recommended version was released on 22 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	169	Proof of Concept
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	169	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	169	Proof of Concept

Release notes

Package name: @grpc/grpc-js

• 1.10.10 - 2024-06-24
  
  • Various improvements to handling of keepalive timers (#2760 by @ davidfiala)
  • Fix a bug causing unary response client requests to hang when unexpectedly receiving multiple messages (#2772)
  • Fix a bug causing some requests to fail when making requests through a local proxy (#2746 contributed by @ mjameswh, backported in #2777)
  • Fix handling of URL-encoded user credentials in proxy configuration (#2761 contributed by @ brendan-myers, backported in #2777)
  • Fix missing client-side handling of the grpc.max_send_message_length channel option (#2779)
• 1.10.9 - 2024-06-10
  
  • Avoid buffering significantly more than grpc.max_receive_message_size per received message.
• 1.10.8 - 2024-05-15
  
  • Fix a bug that caused channels with unix: targets to not reconnect after the channel goes idle (#2750)
• 1.10.7 - 2024-05-01
• 1.10.6 - 2024-04-03
• 1.10.5 - 2024-04-01
• 1.10.4 - 2024-03-26
• 1.10.3 - 2024-03-15
• 1.10.2 - 2024-03-11
• 1.10.1 - 2024-02-15
• 1.10.0 - 2024-02-06
• 1.9.15 - 2024-06-10
  
  • Avoid buffering significantly more than grpc.max_receive_message_size per received message.
• 1.9.14 - 2024-01-16
• 1.9.13 - 2023-12-12
• 1.9.12 - 2023-11-27
• 1.9.11 - 2023-11-16
• 1.9.10 - 2023-11-14
• 1.9.9 - 2023-10-30
• 1.9.8 - 2023-10-27
• 1.9.7 - 2023-10-19
• 1.9.6 - 2023-10-17
• 1.9.5 - 2023-10-02
• 1.9.4 - 2023-09-26
• 1.9.3 - 2023-09-13
• 1.9.2 - 2023-08-31
• 1.9.1 - 2023-08-22
• 1.9.0 - 2023-08-01
• 1.8.22 - 2024-06-10
  
  • Avoid buffering significantly more than grpc.max_receive_message_size per received message.
• 1.8.21 - 2023-07-28
• 1.8.20 - 2023-07-25
• 1.8.19 - 2023-07-24
• 1.8.18 - 2023-07-13
• 1.8.17 - 2023-06-27
• 1.8.16 - 2023-06-20
• 1.8.15 - 2023-06-05
• 1.8.14 - 2023-04-12
• 1.8.13 - 2023-03-23
• 1.8.12 - 2023-03-07
• 1.8.11 - 2023-02-24
• 1.8.10 - 2023-02-22
• 1.8.9 - 2023-02-15
• 1.8.8 - 2023-02-08
• 1.8.7 - 2023-01-25
• 1.8.6 - 2023-01-25
• 1.8.5 - 2023-01-23
• 1.8.4 - 2023-01-12
• 1.8.3 - 2023-01-11
• 1.8.2 - 2023-01-09
• 1.8.1 - 2023-01-03
• 1.8.0 - 2022-12-07
• 1.7.3 - 2022-10-21
• 1.7.2 - 2022-10-14
• 1.7.1 - 2022-09-21
• 1.7.0 - 2022-09-08
• 1.6.12 - 2022-08-31
• 1.6.11 - 2022-08-29
• 1.6.10 - 2022-08-15
• 1.6.9 - 2022-08-09
• 1.6.8 - 2022-07-21
• 1.6.7 - 2022-04-20
• 1.6.6 - 2022-04-18
• 1.6.5 - 2022-04-15
• 1.6.4 - 2022-04-14
• 1.6.3 - 2022-04-11
• 1.6.2 - 2022-04-04
• 1.6.1 - 2022-04-01
• 1.6.0 - 2022-03-31
• 1.5.10 - 2022-03-24
• 1.5.9 - 2022-03-16
• 1.5.8 - 2022-03-14
• 1.5.7 - 2022-02-24
• 1.5.6 - 2022-02-23
• 1.5.5 - 2022-02-10
• 1.5.4 - 2022-01-31
• 1.5.3 - 2022-01-20
• 1.5.2 - 2022-01-19
• 1.5.1 - 2022-01-14
• 1.5.0 - 2022-01-06
• 1.4.6 - 2022-01-04

from @grpc/grpc-js GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[github-actions]

This pull request has been marked as stale due to 60 days of inactivity. It will be closed in 1 week if no further activity occurs. If you think that’s incorrect or this pull request requires a review, please simply write any comment. If closed, you can revive the PR at any time and @mention a reviewer or discuss it on the [email protected] list. Thank you for your contributions.

[github-actions]

This pull request has been closed due to lack of activity. If you think that is incorrect, or the pull request requires review, you can revive the PR at any time.