From b6cf6012c01d417b9d3f08f25f3e7d4cbec6cd13 Mon Sep 17 00:00:00 2001 From: nicktrn <55853254+nicktrn@users.noreply.github.com> Date: Wed, 19 Aug 2026 14:32:11 +0100 Subject: [PATCH 1/2] chore(deps): upgrade grpc-js to 1.12.7 `@grpc/grpc-js` sat at 1.12.6 in the lockfile. `dockerode` is the only consumer and already declares `^1.11.1`, so a scoped override is enough: "@grpc/grpc-js@>=1.12.0 <1.12.7": "1.12.7" Pinned exactly to stay on the 1.12 line; a caret would pull 1.14.x. --- package.json | 1 + pnpm-lock.yaml | 13 +++++++------ 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index 60b439de5d7..c4ac2507624 100644 --- a/package.json +++ b/package.json @@ -123,6 +123,7 @@ "picomatch@>=4 <4.0.4": "^4.0.4", "minimatch@>=3 <3.1.3": "^3.1.3", "protobufjs@>=7 <7.6.5": "^7.6.5", + "@grpc/grpc-js@>=1.12.0 <1.12.7": "1.12.7", "fast-xml-parser@>=4 <4.5.5": "^4.5.5", "fast-xml-parser@>=5 <5.7.0": "^5.7.0", "path-to-regexp@>=0.1 <0.1.13": "^0.1.13", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index d2ab76bcb2a..32b1fc32f98 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -42,6 +42,7 @@ overrides: picomatch@>=4 <4.0.4: ^4.0.4 minimatch@>=3 <3.1.3: ^3.1.3 protobufjs@>=7 <7.6.5: ^7.6.5 + '@grpc/grpc-js@>=1.12.0 <1.12.7': 1.12.7 fast-xml-parser@>=4 <4.5.5: ^4.5.5 fast-xml-parser@>=5 <5.7.0: ^5.7.0 path-to-regexp@>=0.1 <0.1.13: ^0.1.13 @@ -4289,8 +4290,8 @@ packages: peerDependencies: graphql: ^0.8.0 || ^0.9.0 || ^0.10.0 || ^0.11.0 || ^0.12.0 || ^0.13.0 || ^14.0.0 || ^15.0.0 || ^16.0.0 || ^17.0.0 - '@grpc/grpc-js@1.12.6': - resolution: {integrity: sha512-JXUj6PI0oqqzTGvKtzOkxtpsyPRNsrmhh41TtIz/zEB6J+AUiZZ0dxWzcMwO9Ns5rmSPuMdghlTbUuqIM48d3Q==} + '@grpc/grpc-js@1.12.7': + resolution: {integrity: sha512-Tugep4V4GCsN9dSAVkXoBWqJXDoH+NSXd50kFGsm7ZG1tBXFEAnLoxzkGUIksTrDjiaMwlpsbC24oWbESGHpIQ==} engines: {node: '>=12.10.0'} '@grpc/proto-loader@0.7.13': @@ -18059,7 +18060,7 @@ snapshots: dependencies: graphql: 16.14.2 - '@grpc/grpc-js@1.12.6': + '@grpc/grpc-js@1.12.7': dependencies: '@grpc/proto-loader': 0.7.13 '@js-sdsl/ordered-map': 4.4.2 @@ -23837,7 +23838,7 @@ snapshots: dockerode@4.0.10: dependencies: '@balena/dockerignore': 1.0.2 - '@grpc/grpc-js': 1.12.6 + '@grpc/grpc-js': 1.12.7 '@grpc/proto-loader': 0.7.13 docker-modem: 5.0.7 protobufjs: 7.6.5 @@ -23849,7 +23850,7 @@ snapshots: dockerode@4.0.6: dependencies: '@balena/dockerignore': 1.0.2 - '@grpc/grpc-js': 1.12.6 + '@grpc/grpc-js': 1.12.7 '@grpc/proto-loader': 0.7.13 docker-modem: 5.0.6 protobufjs: 7.6.5 @@ -27043,7 +27044,7 @@ snapshots: node-abi@3.89.0: dependencies: - semver: 7.8.1 + semver: 7.8.5 optional: true node-abort-controller@3.1.1: {} From e084a7de8779c26de33ff0328f6871502a31b8f5 Mon Sep 17 00:00:00 2001 From: nicktrn <55853254+nicktrn@users.noreply.github.com> Date: Wed, 19 Aug 2026 14:42:18 +0100 Subject: [PATCH 2/2] chore(deps): drop unrelated node-abi semver drift --- pnpm-lock.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 32b1fc32f98..5ef9a634dce 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -27044,7 +27044,7 @@ snapshots: node-abi@3.89.0: dependencies: - semver: 7.8.5 + semver: 7.8.1 optional: true node-abort-controller@3.1.1: {}