Skip to content

[Snyk] Security upgrade @google-cloud/speech from 1.5.0 to 2.0.0#333

Open
twilio-product-security wants to merge 1 commit into
masterfrom
snyk-fix-da3a6b7532239f1a3bf5e309925e9d10
Open

[Snyk] Security upgrade @google-cloud/speech from 1.5.0 to 2.0.0#333
twilio-product-security wants to merge 1 commit into
masterfrom
snyk-fix-da3a6b7532239f1a3bf5e309925e9d10

Conversation

@twilio-product-security
Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • node/realtime-transcriptions/package.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
critical severity Improper Certificate Validation
SNYK-JS-NODEFORGE-15789771
  226  

Breaking Change Risk

Merge Risk: High

Notice: This assessment is enhanced by AI.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

@twilio-product-security
Copy link
Copy Markdown
Author

Merge Risk: High

This is a major version upgrade that migrates the client library to target the Google Cloud Speech-to-Text V2 API, introducing significant breaking changes.

Key Changes:

  • V2 API Migration: The client now uses the modern V2 backend API instead of V1. This requires code modifications, as the API interface has changed. For example, V2 introduces reusable "Recognizer" resources for recognition configurations. [8, 11]
  • TypeScript Conversion: The library is now written in TypeScript. If you were using @types/google-cloud__speech for type definitions, you must remove it from your dependencies as types are now included directly. [1]
  • Node.js Support: Support for end-of-life Node.js versions is dropped, in line with Google Cloud's support policy. [3]

Recommendation: This upgrade requires developers to review the V2 API documentation and update their implementation to align with the new API structure and features. Migration from the V1 to V2 API is not automatic and will require code changes. [11]

Source: Migrate to the latest version of Cloud Speech-to-Text API, Release notes

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants