chore(deps): update dependency google-auth-library to v6.1.6 (develop)

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
google-auth-library	dependencies	patch	6.1.3 -> 6.1.6

This PR resolves the vulnerabilities described in Issue #787

---

Version 6.1.3

Risk Change	Critical	High	Medium	Low
N/A	0	5	5	0

Version 6.1.6

Risk Change	Critical	High	Medium	Low
-100%	0 (--)	0 (-5 )	0 (-5 )	0 (--)

Mend ensures you have the greatest risk reduction ("Recommended Fix"-highlighted in green) by removing as many vulnerabilities as possible. Click to see how we calculate risk reduction.

---

Release Notes

googleapis/google-auth-library-nodejs (google-auth-library)

v6.1.6

Compare Source

⚠ BREAKING CHANGES

• integrates external_accounts with GoogleAuth and ADC (#​1052)
• workload identity federation support (#​1131)

Features

• adds service account impersonation to ExternalAccountClient (#​1041) (997f124)
• adds text/json credential_source support to IdentityPoolClients (#​1059) (997f124)
• defines ExternalAccountClient used to instantiate external account clients (#​1050) (997f124)
• defines IdentityPoolClient used for K8s and Azure workloads (#​1042) (997f124)
• defines ExternalAccountClient abstract class for external_account credentials (#​1030) (997f124)
• get AWS region from environment variable (#​1067) (997f124)
• implements AWS signature version 4 for signing requests (#​1047) (997f124)
• implements the OAuth token exchange spec based on rfc8693 (#​1026) (997f124)
• integrates external_accounts with GoogleAuth and ADC (#​1052) (997f124)
• workload identity federation support (#​1131) (997f124)

Bug Fixes

• deps: update dependency puppeteer to v6 (#​1129) (5240fb0)
• deps: update dependency puppeteer to v7 (#​1134) (02d0d73)

6.1.6 (2021-01-27)

Bug Fixes

• call addSharedMetadataHeaders even when token has not expired (#​1116) (aad043d)

6.1.5 (2021-01-22)

Bug Fixes

• support PEM and p12 when using factory (#​1120) (c2ead4c)

6.1.4 (2020-12-22)

Bug Fixes

• move accessToken to headers instead of parameter (#​1108) (67b0cc3)

6.1.3 (2020-10-22)

Bug Fixes

• deps: update dependency gaxios to v4 (#​1086) (f2678ff)

6.1.2 (2020-10-19)

Bug Fixes

• update gcp-metadata to catch a json-bigint security fix (#​1078) (125fe09)

6.1.1 (2020-10-06)

Bug Fixes

• deps: upgrade gtoken (#​1064) (9116f24)

v6.1.5

Compare Source

⚠ BREAKING CHANGES

• integrates external_accounts with GoogleAuth and ADC (#​1052)
• workload identity federation support (#​1131)

Features

• adds service account impersonation to ExternalAccountClient (#​1041) (997f124)
• adds text/json credential_source support to IdentityPoolClients (#​1059) (997f124)
• defines ExternalAccountClient used to instantiate external account clients (#​1050) (997f124)
• defines IdentityPoolClient used for K8s and Azure workloads (#​1042) (997f124)
• defines ExternalAccountClient abstract class for external_account credentials (#​1030) (997f124)
• get AWS region from environment variable (#​1067) (997f124)
• implements AWS signature version 4 for signing requests (#​1047) (997f124)
• implements the OAuth token exchange spec based on rfc8693 (#​1026) (997f124)
• integrates external_accounts with GoogleAuth and ADC (#​1052) (997f124)
• workload identity federation support (#​1131) (997f124)

Bug Fixes

• deps: update dependency puppeteer to v6 (#​1129) (5240fb0)
• deps: update dependency puppeteer to v7 (#​1134) (02d0d73)

6.1.6 (2021-01-27)

Bug Fixes

• call addSharedMetadataHeaders even when token has not expired (#​1116) (aad043d)

6.1.5 (2021-01-22)

Bug Fixes

• support PEM and p12 when using factory (#​1120) (c2ead4c)

6.1.4 (2020-12-22)

Bug Fixes

• move accessToken to headers instead of parameter (#​1108) (67b0cc3)

6.1.3 (2020-10-22)

Bug Fixes

• deps: update dependency gaxios to v4 (#​1086) (f2678ff)

6.1.2 (2020-10-19)

Bug Fixes

• update gcp-metadata to catch a json-bigint security fix (#​1078) (125fe09)

6.1.1 (2020-10-06)

Bug Fixes

• deps: upgrade gtoken (#​1064) (9116f24)

v6.1.4

Compare Source

⚠ BREAKING CHANGES

• integrates external_accounts with GoogleAuth and ADC (#​1052)
• workload identity federation support (#​1131)

Features

• adds service account impersonation to ExternalAccountClient (#​1041) (997f124)
• adds text/json credential_source support to IdentityPoolClients (#​1059) (997f124)
• defines ExternalAccountClient used to instantiate external account clients (#​1050) (997f124)
• defines IdentityPoolClient used for K8s and Azure workloads (#​1042) (997f124)
• defines ExternalAccountClient abstract class for external_account credentials (#​1030) (997f124)
• get AWS region from environment variable (#​1067) (997f124)
• implements AWS signature version 4 for signing requests (#​1047) (997f124)
• implements the OAuth token exchange spec based on rfc8693 (#​1026) (997f124)
• integrates external_accounts with GoogleAuth and ADC (#​1052) (997f124)
• workload identity federation support (#​1131) (997f124)

Bug Fixes

• deps: update dependency puppeteer to v6 (#​1129) (5240fb0)
• deps: update dependency puppeteer to v7 (#​1134) (02d0d73)

6.1.6 (2021-01-27)

Bug Fixes

• call addSharedMetadataHeaders even when token has not expired (#​1116) (aad043d)

6.1.5 (2021-01-22)

Bug Fixes

• support PEM and p12 when using factory (#​1120) (c2ead4c)

6.1.4 (2020-12-22)

Bug Fixes

• move accessToken to headers instead of parameter (#​1108) (67b0cc3)

6.1.3 (2020-10-22)

Bug Fixes

• deps: update dependency gaxios to v4 (#​1086) (f2678ff)

6.1.2 (2020-10-19)

Bug Fixes

• update gcp-metadata to catch a json-bigint security fix (#​1078) (125fe09)

6.1.1 (2020-10-06)

Bug Fixes

• deps: upgrade gtoken (#​1064) (9116f24)

---

• If you want to rebase/retry this PR, check this box

[mend-for-github-com]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.