refactor: Bump @grpc/grpc-js from 1.14.3 to 1.14.4

[dependabot]

Bumps @grpc/grpc-js from 1.14.3 to 1.14.4.

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.4

• Fix a bug that could cause servers to crash when handling malformed requests (advisory GHSA-5375-pq7m-f5r2)
• Fix a bug that could cause clients and servers to crash when handling malformed compressed messages (advisory GHSA-99f4-grh7-6pcq)

Commits

• a380735 Merge pull request #3052 from murgatroid99/grpc-js_1.14.4
• 5b8d37b Merge commit from fork
• 6a97456 Merge commit from fork
• e5e0b1d grpc-js: Bump version to 1.14.4
• 5029a26 Make compression error a static string
• 2fe55fd Fix crashes when receiving malformed compressed data
• 234f917 Fix server crash when handling invalid requests
• acef8d4 Merge pull request #3043 from murgatroid99/rbac_types_change_fix_1.14
• 4f3c58f grpc-js-xds: Update RBAC code to handle Node type change, pin @​types/node
• See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Summary by CodeRabbit

• Chores
  • Updated the gRPC dependency to version 1.14.4.
  • Refreshed dependency metadata to ensure consistent package installation.

[mtrezza]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

📝 Walkthrough

Walkthrough

The lockfile updates both @grpc/grpc-js entries from version 1.14.3 to 1.14.4, including their resolved tarball URLs and integrity hashes.

Changes

gRPC dependency lock refresh

Layer / File(s)	Summary
Update gRPC lock entries package-lock.json	Both @grpc/grpc-js lock entries now reference version 1.14.4 with matching resolved URLs and integrity hashes.

Estimated code review effort: 1 (Trivial) | ~2 minutes

---

Caution

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

• Ignore

❌ Failed checks (1 error)

Check name	Status	Explanation	Resolution
Description check	❌ Error	The description omits the required Issue, Approach, and Tasks sections from the repository template.	Add the missing Issue, Approach, and Tasks sections, and mark relevant checklist items such as tests or documentation.

✅ Passed checks (6 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title matches the dependency bump and uses an allowed prefix with a capitalized action word.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Security Check	✅ Passed	Only package-lock.json changed, bumping @grpc/grpc-js to 1.14.4; no application code changed and the update matches the security-fix release.
Engage In Review Feedback	✅ Passed	PASS: This is a solitary lockfile bump, and the provided context shows no substantive review-feedback comments to engage or ignore.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/npm_and_yarn/grpc/grpc-js-1.14.4

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[parseplatformorg]

🎉 This change has been released in version 9.10.1-alpha.1