grpc-web icon indicating copy to clipboard operation
grpc-web copied to clipboard
verified publisher icon improbable-eng

go/grpcweb: please bump version

Open muhlemmer opened this issue 3 years ago • 4 comments

PR #1063 bumps nhooyr.io/websocket for a security fix. Is it possible to do a bugfix bump to v0.15.1?

go get -u github.com/improbable-eng/grpc-web/go/grpcweb@latest pulls in the latest tagged version, which at the moment is older than the merge of #1063, leaving depending packages exposed.

Thanks in advance!

muhlemmer avatar Jan 19 '22 17:01 muhlemmer

CC @MarcusLongmuir

johanbrandhorst avatar Jan 19 '22 17:01 johanbrandhorst

+1

pzeinlinger avatar Jan 20 '23 09:01 pzeinlinger

I can't publish new packages to NPM and the other maintainers appear to be AWOL. I recommend moving away from this library or using it from source. Sorry.

johanbrandhorst avatar Jan 20 '23 17:01 johanbrandhorst

Sounds like the best thing is to just fork this as a whole.

pcfreak30 avatar Apr 27 '23 18:04 pcfreak30