[dependabot]

Bumps @grpc/grpc-js from 1.14.4 to 1.14.7.

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.7

• Fix a bug causing automatic retries to continue after a call is cancelled (#3102 contributed by @​phyous)
• Fix a bug causing automatic retries to fail to trigger in some cases (#3111 contributed by @​kahirokunn)

@​grpc/grpc-js 1.14.6

• Address remaining instances of advisory GHSA-f596-whhp-79r4 (#3105)
• Avoid Date allocations on request and channelz tracking paths (#3090 contributed by @​olavloite)
• Avoid throwaway timer allocation in ResolvingCall (#3092 contributed by @​olavloite)
• Avoid building metadata map when parsing trailers (#3093 contributed by @​olavloite)
• Lazily allocate Metadata opaqueData map (#3095 contributed by @​olavloite)
• Cache precomputed serviceUrl in InternalChannel (#3097 contributed by @​olavloite)
• Memoize method config lookup in default config selector (#3098 contributed by @​olavloite)
• Avoid array allocation for single-value metadata headers (#3099 contributed by @​olavloite)
• Avoid allocations for empty CallCredentials on the RPC hot path (#3100 contributed by @​olavloite)
• Avoid redundant metadata clone in RetryingCall on initial attempt (#3101 contributed by @​olavloite)

@​grpc/grpc-js 1.14.5

• Fix a bug that caused clients to automatically transmit excessive error details to clients by default (advisory GHSA-f596-whhp-79r4)
• Fix a bug that caused getAuthContext to return unverified certificates as though they were verified in some configurations (advisory GHSA-m9gg-hp2v-232j)
• Fix a bug that could cause stale call data to accumulate if a channel failed to connect for a long period of time (#3078)
• Fix a bug that could cause call status to be reported with expected fields missing (#3079)
• Avoid redundant end() calls on completed HTTP/2 streams (#3082 contributed by @​olavloite)
• Unify call numbers and avoid disabled trace allocations (#3084 contributed by @​olavloite)

Commits

• 5e0c170 Merge pull request #3119 from murgatroid99/grpc-js_1.14.7
• 4fdb028 Merge commit from fork
• 870fd2b Merge commit from fork
• d3d1649 Merge pull request #3110 from murgatroid99/grpc-js-xds_authority_validation
• 387fcf3 grpc-js(-xds): Bump patch version (1.14.x)
• ea73ef5 Merge pull request #3118 from murgatroid99/grpc-js_refused_stream_fix_1.14_at...
• a167b2f grpc-js: Preserve HTTP/2 reset codes on write errors
• 5f932bf Merge pull request #3117 from murgatroid99/grpc-js_retry_cancel_backoff_fix_1.14
• e7b81e7 fix(grpc-js): stop retry attempts after the call is cancelled
• 99b5008 grpc-js-xds: Fix bug causing clients to accept resources from the wrong autho...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)