Skip to content

Update grpc-js to 1.3 #4871

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
May 22, 2021
Merged

Update grpc-js to 1.3 #4871

merged 3 commits into from
May 22, 2021

Conversation

schmidt-sebastian
Copy link
Contributor

Updates minimum GRPC version to 1.3.

Fixes #4851

@changeset-bot
Copy link

changeset-bot bot commented May 5, 2021

⚠️ No Changeset found

Latest commit: f559936

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@google-oss-bot
Copy link
Contributor

google-oss-bot commented May 5, 2021

Binary Size Report

Affected SDKs

  • firebase

    Click to show 15 binary size changes.
    Type Base (a285f37) Head (c383ee1) Diff
    firebase-analytics.js 35.8 kB 35.7 kB -16 B (-0.0%)
    firebase-app-check.js 22.2 kB 22.2 kB -34 B (-0.2%)
    firebase-app.js 21.8 kB 21.8 kB -42 B (-0.2%)
    firebase-auth.js 177 kB 177 kB -21 B (-0.0%)
    firebase-database.js 187 kB 187 kB -128 B (-0.1%)
    firebase-firestore.js 332 kB 332 kB -75 B (-0.0%)
    firebase-firestore.memory.js 267 kB 267 kB -63 B (-0.0%)
    firebase-functions.js 10.8 kB 10.8 kB +4 B (+0.0%)
    firebase-installations.js 19.3 kB 19.3 kB +5 B (+0.0%)
    firebase-messaging.js 41.0 kB 40.9 kB -100 B (-0.2%)
    firebase-performance-standalone.js 49.7 kB 49.6 kB -48 B (-0.1%)
    firebase-performance.js 38.3 kB 38.3 kB -6 B (-0.0%)
    firebase-remote-config.js 36.9 kB 36.9 kB +5 B (+0.0%)
    firebase-storage.js 41.6 kB 41.5 kB -56 B (-0.1%)
    firebase.js 889 kB 888 kB -405 B (-0.0%)

Test Logs

@google-oss-bot
Copy link
Contributor

google-oss-bot commented May 5, 2021

Size Analysis Report

Affected Products

No changes between base commit (a285f37) and head commit (c383ee1).

@Feiyang1
Copy link
Member

Feiyang1 commented May 6, 2021

Please add a changeset

@schmidt-sebastian
Copy link
Contributor Author

@Feiyang1 The size increase seems to be from the inclusion of AppCheck. Is that a good assumption?

@@ -71,7 +71,7 @@
"@firebase/logger": "0.2.6",
"@firebase/util": "1.0.0",
"@firebase/webchannel-wrapper": "0.4.1",
"@grpc/grpc-js": "^1.0.0",
"@grpc/grpc-js": "1.3.0",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do you want to use ^ version ?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Makes sense. I didn't realize we only use fixed versions for our own dependencies.

@Feiyang1
Copy link
Member

I think so. the base is a commit before appcheck was merged into master. The diff should be much smaller if you rebase the PR.

@schmidt-sebastian
Copy link
Contributor Author

Hm, I am not able to run the yarn update right now ("error An unexpected error occurred: "expected workspace package to exist for "inquirer"""). I will ping you once I updated the yarn.lock

@schmidt-sebastian
Copy link
Contributor Author

@Feiyang1 CI finally passed. I had to update some random types after removing yarn.lock

@@ -27,7 +27,7 @@
"rollup-plugin-typescript2": "0.29.0",
"@rollup/plugin-virtual": "2.0.3",
"webpack": "4.44.2",
"@types/webpack": "4.41.25",
"@types/webpack": "5.28.0",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it required to pass CI? This is a wrong change because we are not using webpack@5. I will be okay with it if it's required to pass CI for some unknown reason. I don't want us to waste time on it and we should be updating to webpack@5 soon.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am not sure if 5.x is required, but the version that was installed without the yarn.lock file caused compilation errors. I can try an older 4.x version, but we should be safe since the code itself did not change.

Copy link
Contributor Author

@schmidt-sebastian schmidt-sebastian May 21, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The problem is here (from the original yarn.lock):

"@types/webpack@4.41.25":
  version "4.41.25"
  resolved "https://registry.npmjs.org/@types/webpack/-/webpack-4.41.25.tgz#4d3b5aecc4e44117b376280fbfd2dc36697968c4"
  integrity sha512-cr6kZ+4m9lp86ytQc1jPOJXgINQyz3kLLunZ57jznW+WIAL0JqZbGubQk4GlD42MuQL5JGOABrxdpqqWeovlVQ==
  dependencies:
    "@types/anymatch" "*"
    "@types/node" "*"
    "@types/tapable" "*"
    "@types/uglify-js" "*"
    "@types/webpack-sources" "*"
    source-map "^0.6.0"

Webpack 4.x does not compile against tapable 2.x. The old version was 1.06 (before removing the lock file).

These are some of the errors:

../../node_modules/@types/webpack/index.d.ts:1106:32 - error TS2314: Generic type 'HookMap<H>' requires 1 type argument(s).

1106                 callAnyMember: HookMap;
                                    ~~~~~~~

@schmidt-sebastian schmidt-sebastian merged commit 3f3fc95 into master May 22, 2021
@schmidt-sebastian schmidt-sebastian deleted the mrschmidt/grpc branch May 22, 2021 02:21
@firebase firebase locked and limited conversation to collaborators Jun 22, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Security Exploits! Prototype Pollution in node-forge & node-fetch
3 participants