[Snyk] Upgrade @grpc/grpc-js from 1.10.3 to 1.12.3

[j-mendez]

Snyk has created this PR to upgrade @grpc/grpc-js from 1.10.3 to 1.12.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 16 versions ahead of your current version.

• The recommended version was released 22 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Uncontrolled Resource Consumption SNYK-JS-GRPCGRPCJS-7242922	559	No Known Exploit

Release notes

Package name: @grpc/grpc-js

• 1.12.3 - 2024-12-02
  

  Node changes:

  • Fix client interceptor handling in generic client method calls (#385)
• 1.12.2 - 2024-10-09
  

  Node changes:

  • Fix missing node-pre-gyp bundled dependency (#367)
• 1.12.1 - 2024-10-08
  

  Node changes:

  • Fix build on FreeBSD (#255)
  • Update dependency on lodash (#331 contributed by @ wyardley)
  • Update dependency on Protobuf.js to fix reported ReDoS security vulnerability (#342)

  Core changes:

  • Experimental support for configurable retries (use at your own risk) (grpc/grpc#10684)
  • Use socklen_t instead of size_t for address length (fixes use case for some big endian systems) (grpc/grpc#14464)
  • Avoid crashes on environments with hot-plugged CPUs (grpc/grpc#14712)
  • Fix: Check retry timer before starting resolving (grpc/grpc#15156)
  • Performance: Avoid low severity log message construction (grpc/grpc#14945)
• 1.12.0 - 2024-10-03
• 1.11.3 - 2024-09-17
  

  Bump to v1.11.3 because I forgot to update the submodule when I published v1.11.2

• 1.11.2 - 2024-09-05
  
  • Fix syntax errors in TypeScript type definitions file (#307 contributed by @ JustinBeckwith)
• 1.11.1 - 2024-07-16
  
  • Fixed an issue where building from source would sometimes fail (#304)
  • Added NodeJS 10 pre-built binaries (#302)
  • Added Electron 2 pre-built binaries (#291)
  • Added TypeScript type definitions for APIs added in v1.11.x (#306)
• 1.11.0 - 2024-07-15
  

  @ grpc/proto-loader v0.1.0

  This is a new library for loading .proto files for use with gRPC using the latest version of Protobuf.js. The output of this package is intended to be loaded using the new loadPackageDefinition function in the grpc library.

  @ grpc/grpc-js v0.1.0

  This is the first alpha release of the new pure JavaScript implementation of gRPC. It implements the same API as the existing grpc library. Currently only the client is implemented, with the following functionality:

  • loadPackageDefinition
  • Unary and streaming calls
  • Cancellation
  • Deadlines
  • Metadata
  • Basic automatic reconnection logic
  • Channel and call credentials

  grpc v1.11.0

  Node changes:

  • Add client interceptors API (#59 contributed by @ drobertduke)
  • Add loadPackageDefintion function (#196)
  • Publish ARM64 binaries (#200)
  • Improve function type test in a client method (#204 contributed by @ arcana261)
  • Add details to UNIMPLEMENTED response status (#207 contributed by @ theogravity)
  • Add error handling for missing files when calling grpc.load (#228 contributed by @ cblair)
  • Fix error message in grpc.loadObject when failing to detect Protobuf.js version (#253 contributed by @ kellycampbell)
  • Remove -zdefs flag from binding.gyp to enable building on FreeBSD (#266)
• 1.10.11 - 2024-07-10
• 1.10.10 - 2024-06-24
• 1.10.9 - 2024-06-10
• 1.10.8 - 2024-05-15
• 1.10.7 - 2024-05-01
• 1.10.6 - 2024-04-03
• 1.10.5 - 2024-04-01
• 1.10.4 - 2024-03-26
• 1.10.3 - 2024-03-15

from @grpc/grpc-js GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs