[Snyk] Upgrade google-auth-library from 7.1.2 to 7.13.0

[snyk-bot]

Snyk has created this PR to upgrade google-auth-library from 7.1.2 to 7.13.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 22 versions ahead of your current version.
• The recommended version was released 23 days ago, on 2022-02-17.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-NODEFORGE-2331908	315/1000 Why? CVSS 6.3	No Known Exploit
	Open Redirect SNYK-JS-NODEFORGE-2330875	315/1000 Why? CVSS 6.3	Proof of Concept
	Information Exposure SNYK-JS-NODEFETCH-2342118	315/1000 Why? CVSS 6.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: google-auth-library

• 7.13.0 - 2022-02-17
  

  7.13.0 (2022-02-17)

  Features

  • Support instantiating GoogleAuth with an AuthClient (#1364) (8839b5b)
• 7.12.0 - 2022-02-09
  

  7.12.0 (2022-02-09)

  Features

  • Export AuthClient (#1361) (88f42ec)
• 7.11.0 - 2021-12-15
  

  Features

  • adds README, samples and integration tests for downscoping with CAB (#1311) (4549116)
• 7.10.4 - 2021-12-13
  

  Bug Fixes

  • deps: update dependency puppeteer to v13 (#1334) (e05548d)
• 7.10.3 - 2021-12-03
  

  Bug Fixes

  • deps: update dependency puppeteer to v12 (#1325) (110ddc2)
• 7.10.2 - 2021-11-03
  

  Bug Fixes

  • deps: update dependency puppeteer to v11 (#1312) (b3ba9ac)
• 7.10.1 - 2021-10-14
  

  Bug Fixes

  • security: explicitly update keypair dependency (94401a6)
• 7.10.0 - 2021-09-28
  

  Features

  • add workforce config support. (#1251) (fe29e38)
• 7.9.2 - 2021-09-16
  

  Bug Fixes

  • deps: update dependency @ googleapis/iam to v2 (#1253) (59b8243)
• 7.9.1 - 2021-09-02
  

  Bug Fixes

  • build: switch to main branch (#1249) (2c72de4)
• 7.9.0 - 2021-09-02
• 7.8.0 - 2021-08-30
• 7.8.0-beta.0 - 2021-08-30
• 7.7.0 - 2021-08-30
• 7.6.2 - 2021-08-17
• 7.6.1 - 2021-08-13
• 7.6.0 - 2021-08-13
• 7.5.0 - 2021-08-04
• 7.4.1 - 2021-07-29
• 7.4.0 - 2021-07-29
• 7.3.0 - 2021-07-07
• 7.2.0 - 2021-06-30
• 7.1.2 - 2021-06-10

from google-auth-library GitHub release notes

Commit messages

Package name: google-auth-library

• 6ff40e5 chore(main): release 7.13.0 (#1367)
• 8839b5b feat: Support instantiating `GoogleAuth` with an `AuthClient` (#1364)
• 8c2c355 chore(main): release 7.12.0 (#1362)
• 88f42ec feat: Export `AuthClient` (#1361)
• 74be65d fix spelling (#1350)
• 3035c9d docs(nodejs): version support policy edits (#1346) (#1357)
• c23ae13 chore(deps): update dependency sinon to v13 (#1354)
• ac84aa8 chore(deps): update actions/setup-node action to v2 (#1353)
• 34ca2a0 build(node): switch back to keystore for publication (#1328) (#1348)
• 097d328 chore: update github issue templates (#1085) (#1347)
• 58c53b4 test(nodejs): remove 15 add 16 (#1322) (#1346)
• 580c5bd docs(badges): tweak badge to use new preview/stable language (#1314) (#1344)
• 7862a50 chore: add api_shortname and library_type to repo metadata (#1341)
• d2d80e5 docs(node): support "stable"/"preview" release level (#1312) (#1342)
• a5ac436 samples: audience for Cloud Functions needs path (#1340)
• 7b6c041 chore: release 7.11.0 (#1336)
• 4549116 feat: adds README, samples and integration tests for downscoping with CAB (#1311)
• e91472a chore: release 7.10.4 (#1335)
• e05548d fix(deps): update dependency puppeteer to v13 (#1334)
• 9c3ceed build: add generated samples to .eslintignore (#1333)
• 0552915 chore: release 7.10.3 (#1326)
• 110ddc2 fix(deps): update dependency puppeteer to v12 (#1325)
• 5ed9105 chore(serverless): add missing var to snippet block (#1212)
• 30bbd69 test: remove commented out retries (#1317)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs