[Snyk] Upgrade @grpc/proto-loader from 0.6.5 to 0.7.2

[snyk-bot]

Snyk has created this PR to upgrade @grpc/proto-loader from 0.6.5 to 0.7.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 11 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-08-17.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-PROTOBUFJS-2441248	517/1000 Why? Proof of Concept exploit, CVSS 8.2	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @grpc/proto-loader

• 0.7.2 - 2022-08-17
  
  • Revert upgrade of long dependency (#2197)
• 0.7.1 - 2022-08-17
  
  • Update long dependency to version 5 (#2192)
• 0.7.0 - 2022-07-14
• 0.6.13 - 2022-06-06
  
  • bump protobufjs dependency to "^6.11.3" (#2131 contributed by @ ocofaigh)
• 0.6.12 - 2022-05-05
  
  • Revert long dependency to 4.x (#2114)
• 0.6.11 - 2022-05-03
  
  • Broaden dependency on long to 4.x or 5.x (#2112)
• 0.6.10 - 2022-05-02
  
  • Update the dependency on the long library to version 5 to fix some TypeScript type compatibility issues (#2110)
• 0.6.9 - 2022-01-05
• 0.6.8 - 2022-01-04
• 0.6.7 - 2021-11-16
• 0.6.6 - 2021-10-18
• 0.6.5 - 2021-09-13

from @grpc/proto-loader GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[socket-security]

Socket Security Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

📜 New install scripts detected

A dependency change in this PR is introducing new install scripts to your install step.

Package	Script field	Location
[email protected] (upgraded)	postinstall	package.json via @grpc/[email protected]

Socket.dev scan summary

Issue	Status
Did you mean?	✅ no new possible package typos
Install scripts	⚠️ 1 new install script detected
Telemetry	✅ no new telemetry
Troll package	✅ no new troll packages
Malware	✅ no new malware
Native code	✅ no new native modules

Powered by socket.dev