[Snyk] Upgrade @google-cloud/storage from 1.2.1 to 1.7.0

[snyk-bot]

Snyk has created this PR to upgrade @google-cloud/storage from 1.2.1 to 1.7.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 2 years ago, on 2018-05-22.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Uninitialized Memory Exposure npm:base64url:20180511	526/1000 Why? Mature exploit, CVSS 7.1	Mature
	Regular Expression Denial of Service (ReDoS) npm:node-forge:20180226	526/1000 Why? Mature exploit, CVSS 7.1	Proof of Concept
	Prototype Pollution SNYK-JS-DOTPROP-543489	526/1000 Why? Mature exploit, CVSS 7.1	Proof of Concept
	Regular Expression Denial of Service (ReDoS) npm:mime:20170907	526/1000 Why? Mature exploit, CVSS 7.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @google-cloud/storage

• 1.7.0 - 2018-05-22
  

  Features

  • (#165): Check if $HOME is writable before starting a resumable upload.
  • (#174): Introduce a directory option to getFiles().
  • (#179): Introduce KMS.

  Fixes

  • (#160): Return apiResponse argument from bucket.upload(). (Thanks for pointing this out, @scragg0x!)
  • (#168): Don't require a content type for bucket.combine(). (Thanks, @zbjornson!)
  • (#169): Properly encode signed URLs. (Thanks again to @zbjornson!)
• 1.6.0 - 2018-02-13
  

  Features

  • (#125): Allow setting additional request parameters during a Bucket#upload() from a remote file. (Thanks, @ImmaculatePine!)
  • (#129): Support the resumable action for File#getSignedUrl().
  • (#133): Add auto options to automatically determine contentType and gzip settings for File#createWriteStream(). (Thanks, @calvinmetcalf!)

  Fixes

  • (#122) Normalize arguments when using new.
  • (#128): Remove leading gs:// parts of a File name provided to a File object.
  • Update dependencies to mitigate possible security issues.
• 1.5.2 - 2018-01-02
  

  Fixes

  • (#110): Wait for incoming File download stream to end completely before confirming data integrity.
• 1.5.1 - 2017-12-05
  

  Fixes

  • (#99): Generated signed policies correctly.
• 1.5.0 - 2017-11-28
  

  Features

  • (#63): Upload a file to your bucket from a URL. Idea and implementation by @Kiricon, thank you! 🙇
  • (#81): Update the customer-supplied encryption key for a file with file#rotateEncryptionKey().
  • (#82): Allow unauthenticated File downloads.
  • (#91): Signed policies and URLs no longer require a JSON key file.

  Fixes

  • (#57): Correct "Requester Pays" and "User Project" terminology in our documentation.
  • (#61): Correct typo in documentation. (Thanks, @Crazometer!)
  • (#78): Correct userProject type definition. (Nice catch, @tejohnso!)
  • (#79): Explain extensionHeaders better for file#getSignedUrl(). (Thanks for pointing this out, @teemeh!)
• 1.4.0 - 2017-10-10
  

  Features

  • (#38): Add support for PubSub notifications.

  Refer to the nodejs-storage API reference documentation for details.

• 1.3.1 - 2017-09-28
  
  • (#2604, #2611, #25, #33) Update gcs-resumable-upload.

  Refer to the nodejs-storage API reference documentation for details.

• 1.3.0 - 2017-09-21
  
  • Add runnable samples in samples/ directory.
  • Replace use of deprecated new Buffer with Buffer.from.
  • Change to a new linter (ESLint) and code style formatter (prettify).
  • Update docs to use JSDoc 3.
  • Migrate to the googleapis/nodejs-storage repository.

  Refer to the nodejs-storage API reference documentation for details.

• 1.2.1 - 2017-07-20
  
  • Strip leading slashes from a File path. (Thanks, @sabrehagen!)
    • googleapis/google-cloud-node#2440
    • googleapis/google-cloud-node#2470

from @google-cloud/storage GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs