Skip to content

fix(remove-dep-on-ts-proto): Removes unnecessary ts-proto dependency#148

Merged
dkoss merged 1 commit intoGoogleCloudPlatform:mainfrom
dkoss:remove-taffy-db-from-deps
Jun 9, 2025
Merged

fix(remove-dep-on-ts-proto): Removes unnecessary ts-proto dependency#148
dkoss merged 1 commit intoGoogleCloudPlatform:mainfrom
dkoss:remove-taffy-db-from-deps

Conversation

@dkoss
Copy link
Collaborator

@dkoss dkoss commented Jun 4, 2025

Removes non-dev dependency on ts-proto, which had an indirect dependency on the taffydb module. https://nvd.nist.gov/vuln/detail/CVE-2019-10790.

Additionally: the ci workflow needed to be updated for the following reasons...

  1. pins ubuntu-latest to ubuntu-22.04, to account for Puppeteer library unable to launch browser - "No usable sandbox!" puppeteer/puppeteer#13595, where the latest image of ubuntu no longer supports puppeteer out of the box.
  2. changed ci run to all branches (not just main)
  3. runs npm ci --verbose twice, instead of npm install so that progress in that step is obvious (it takes ~7 minutes to run on github actions)
  4. upgrades puppeteer as it could no longer be installed through github workflows

@dkoss dkoss requested a review from adamfweidman June 7, 2025 03:20
@dkoss dkoss force-pushed the remove-taffy-db-from-deps branch 6 times, most recently from e3ed3a1 to c9b8920 Compare June 9, 2025 15:37
@dkoss dkoss force-pushed the remove-taffy-db-from-deps branch 4 times, most recently from 5b4f738 to 2491238 Compare June 9, 2025 17:22
…oto dependency and upgrade puppeteer

* removes ts-proto to fix GoogleCloudPlatform#141
* upgrades puppeteer to newest version as it could no longer be installed directly
@dkoss dkoss force-pushed the remove-taffy-db-from-deps branch from 2491238 to eac7cb4 Compare June 9, 2025 17:31
@dkoss dkoss requested a review from adamfweidman June 9, 2025 17:34
@dkoss dkoss merged commit c3c21d7 into GoogleCloudPlatform:main Jun 9, 2025
4 checks passed
This was referenced Jun 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants