[Snyk] Upgrade @google-cloud/trace-agent from 4.0.1 to 4.2.5

[EitanGayor]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @google-cloud/trace-agent from 4.0.1 to 4.2.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 4 years ago, on 2020-01-06.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @google-cloud/trace-agent

• 4.2.5 - 2020-01-06
  

  Bug Fixes

  • deps: update dependency semver to v7 (#1168) (b5811b5)
  • handle pg 7.16.0+ undefined Result#fields (#1179) (21dbb0d)
• 4.2.4 - 2019-12-06
  

  Bug Fixes

  • deps: TypeScript 3.7.0 causes breaking change in typings (#1163) (6448c94)
  • deps: update dependency @ opencensus/propagation-stackdriver to v0.0.19 (#1158) (76b2162)
  • deps: update dependency got to v10 (#1162) (432404d)
  • docs: add jsdoc-region-tag plugin (#1151) (ee19cb9)
• 4.2.3 - 2019-11-11
  

  Bug Fixes

  chore(deps): update dependency source-map-support to v0.5.16 (#1148) (3947e5b)

• 4.2.2 - 2019-10-14
  

  Bug Fixes

  • fix tracing not working in mongoose 3.3+ (#1134) (fe7e925)
  • deps: update dependency @ opencensus/propagation-stackdriver to v0.0.18 (#1140) (8d39dd2)
• 4.2.1 - 2019-10-03
  

  Bug Fixes

  • deps: update dependency gcp-metadata to v3 (#1115) (94c6dae)
  • unpin @ types/node and account for new http.request signatures (#1120) (bd9863b)
• 4.2.0 - 2019-09-10
  

  Bug Fixes

  • deps: update dependency @ opencensus/propagation-stackdriver to v0.0.17 (#1112) (5636738)
  • deps: update dependency require-in-the-middle to v5 (#1099) (1d49cb6)
  • deps: use the latest extend (#1096) (abc4b4e)
  • docs: remove reference doc anchor (#1109) (801e495)

  Features

  • support @ hapi/hapi (#1108) (d545e93)
• 4.1.1 - 2019-08-05
  

  Bug Fixes

  • deps: update dependency @ opencensus/propagation-stackdriver to v0.0.16 (#1079) (e48dc54)
  • docs: standardize README and add repo metadata (#1095) (c24faa3)
  • force http and https clients to be patched (#1084) (3ac0b90)
• 4.1.0 - 2019-07-18
  

  In this release, a log that is emitted by the Trace Agent when it's not the first required module has been downgraded from error-level to warn-level, and a new boolean config option disableUntracedModulesWarning disables this message entirely.

  Commits

  f688e33 feat: add config.disableUntracedModulesWarn (#1070)
  7cf423c test: upgrade grpc test fixture to 1.22.2 (#1071)
  8bdd946 fix: warn if tracing might not work instead of err (#1068)
  e1d0ed9 test: fix type issue in mongoose test (#1067)
  8bbd9b5 build: use synth templates and kokoro config (#1062)
  3cfa7a0 test: add smoke test for app sample (#1061)
  f3e81d3 test: don't timeout no-target http test if error not emitted (#1060)
  d40fee2 build: mark some new tests as integration tests (#1059)
  8a0ee15 build: fix npm run get-plugin-types on windows (#1057)

• 4.0.1 - 2019-06-26
  

  This release fixes a bug introduced in v4.0.0 where authentication credentials from the user configuration object wouldn't be read (#1048).

  Commits

  e3f763c refactor: use the shared prettier config (#1055)
  0d954a1 chore: add github issue templates (#1054)
  8930df3 fix: copy credentials in internal config (#1052)

from @google-cloud/trace-agent GitHub release notes

Commit messages

Package name: @google-cloud/trace-agent

• 9347a29 chore: release 4.2.5
• 43e05c6 chore(deps): update dependency mocha to v7 ([Snyk] Upgrade snyk from 1.101.1 to 1.1244.0 #1180)
• a6f825e refactor: use explicit mocha imports ([Snyk] Upgrade snyk-nodejs-lockfile-parser from 1.17.0 to 1.52.5 #1175)
• 21dbb0d fix: handle pg 7.16.0+ undefined Result#fields ([Snyk] Upgrade @grpc/proto-loader from 0.1.0 to 0.7.10 #1179)
• 6a02ee3 chore(deps): update dependency execa to v4 ([Snyk] Upgrade snyk from 1.101.1 to 1.1241.0 #1171)
• 2e24d15 docs: update jsdoc license/samples-README ([Snyk] Upgrade snyk-nodejs-lockfile-parser from 1.17.0 to 1.52.4 #1172)
• b5811b5 fix(deps): update dependency semver to v7 ([Snyk] Upgrade @grpc/proto-loader from 0.1.0 to 0.7.10 #1168)
• d84518a chore(deps): update dependency cpy to v8 ([Snyk] Upgrade pino from 5.6.2 to 5.17.0 #1164)
• 5d783a3 chore: release 4.2.4 ([Snyk] Upgrade snyk from 1.101.1 to 1.1237.0 #1154)
• 60dce0a chore: downgrade to got@9 in system tests ([Snyk] Upgrade @google-cloud/trace-agent from 4.0.1 to 4.2.5 #1166)
• 6448c94 fix(deps): TypeScript 3.7.0 causes breaking change in typings ([Snyk] Upgrade @grpc/proto-loader from 0.1.0 to 0.7.10 #1163)
• 432404d fix(deps): update dependency got to v10 ([Snyk] Upgrade a from 1.0.0 to 1.0.2 #1162)
• 48dac72 chore: update dependency @ google-cloud/datastore to v5 ([Snyk] Upgrade snyk from 1.101.1 to 1.1237.0 #1157)
• 76b2162 fix(deps): update dependency @ opencensus/propagation-stackdriver to v0.0.19 ([Snyk] Upgrade @grpc/proto-loader from 0.1.0 to 0.7.10 #1158)
• a4e397f test: regenerate files for source map tests ([Snyk] Upgrade snyk from 1.101.1 to 1.1238.0 #1160)
• 12a2f84 chore: update license headers
• e55a803 chore: add gitattributes to kokoro
• 8380eaa docs: update CHANGELOG.md with 4.2.3 release notes
• 13cb1e0 chore: pick up changes in the API or client library generator ([Snyk] Upgrade @grpc/proto-loader from 0.1.0 to 0.7.10 #1155)
• 8949f37 chore: pick up changes in the API or client library generator ([Snyk] Security upgrade proxy-agent from 3.1.1 to 4.0.0 #1153)
• ee19cb9 fix(docs): add jsdoc-region-tag plugin ([Snyk] Upgrade snyk from 1.101.1 to 1.1236.0 #1151)
• 7df4653 chore: 4.2.3 release proposal ([Snyk] Upgrade snyk from 1.101.1 to 1.1235.0 #1149)
• c85b228 refactor: run gts fix ([Snyk] Upgrade @grpc/proto-loader from 0.1.0 to 0.7.10 #1150)
• 3947e5b chore(deps): update dependency source-map-support to v0.5.16 ([Snyk] Upgrade snyk-nuget-plugin from 1.16.0 to 1.40.1 #1148)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs