chore(deps): update dependency google-auth-library to v6.1.6 (develop)

[mend-for-github-com]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
google-auth-library (source)	6.1.3 → 6.1.6

This PR resolves the vulnerabilities described in Issue #787

---

Version 6.1.3

Risk Change	Critical	High	Medium	Low
N/A	0	10	4	0

Version 6.1.6

Risk Change	Critical	High	Medium	Low
-100%	0 (--)	0 (-10 )	0 (-4 )	0 (--)

Mend ensures you have the greatest risk reduction ("Recommended Fix"-highlighted in green) by removing as many vulnerabilities as possible. Click to see how we calculate risk reduction.

---

Release Notes

googleapis/google-cloud-node-core (google-auth-library)

v6.1.6

Compare Source

⚠ BREAKING CHANGES

• integrates external_accounts with GoogleAuth and ADC (#​1052)
• workload identity federation support (#​1131)

Features

• adds service account impersonation to ExternalAccountClient (#​1041) (997f124)
• adds text/json credential_source support to IdentityPoolClients (#​1059) (997f124)
• defines ExternalAccountClient used to instantiate external account clients (#​1050) (997f124)
• defines IdentityPoolClient used for K8s and Azure workloads (#​1042) (997f124)
• defines ExternalAccountClient abstract class for external_account credentials (#​1030) (997f124)
• get AWS region from environment variable (#​1067) (997f124)
• implements AWS signature version 4 for signing requests (#​1047) (997f124)
• implements the OAuth token exchange spec based on rfc8693 (#​1026) (997f124)
• integrates external_accounts with GoogleAuth and ADC (#​1052) (997f124)
• workload identity federation support (#​1131) (997f124)

Bug Fixes

• deps: update dependency puppeteer to v6 (#​1129) (5240fb0)
• deps: update dependency puppeteer to v7 (#​1134) (02d0d73)

6.1.6 (2021-01-27)

Bug Fixes

• call addSharedMetadataHeaders even when token has not expired (#​1116) (aad043d)

6.1.5 (2021-01-22)

Bug Fixes

• support PEM and p12 when using factory (#​1120) (c2ead4c)

6.1.4 (2020-12-22)

Bug Fixes

• move accessToken to headers instead of parameter (#​1108) (67b0cc3)

6.1.3 (2020-10-22)

Bug Fixes

• deps: update dependency gaxios to v4 (#​1086) (f2678ff)

6.1.2 (2020-10-19)

Bug Fixes

• update gcp-metadata to catch a json-bigint security fix (#​1078) (125fe09)

6.1.1 (2020-10-06)

Bug Fixes

• deps: upgrade gtoken (#​1064) (9116f24)

v6.1.5

Compare Source

⚠ BREAKING CHANGES

• integrates external_accounts with GoogleAuth and ADC (#​1052)
• workload identity federation support (#​1131)

Features

• adds service account impersonation to ExternalAccountClient (#​1041) (997f124)
• adds text/json credential_source support to IdentityPoolClients (#​1059) (997f124)
• defines ExternalAccountClient used to instantiate external account clients (#​1050) (997f124)
• defines IdentityPoolClient used for K8s and Azure workloads (#​1042) (997f124)
• defines ExternalAccountClient abstract class for external_account credentials (#​1030) (997f124)
• get AWS region from environment variable (#​1067) (997f124)
• implements AWS signature version 4 for signing requests (#​1047) (997f124)
• implements the OAuth token exchange spec based on rfc8693 (#​1026) (997f124)
• integrates external_accounts with GoogleAuth and ADC (#​1052) (997f124)
• workload identity federation support (#​1131) (997f124)

Bug Fixes

• deps: update dependency puppeteer to v6 (#​1129) (5240fb0)
• deps: update dependency puppeteer to v7 (#​1134) (02d0d73)

6.1.6 (2021-01-27)

Bug Fixes

• call addSharedMetadataHeaders even when token has not expired (#​1116) (aad043d)

6.1.5 (2021-01-22)

Bug Fixes

• support PEM and p12 when using factory (#​1120) (c2ead4c)

6.1.4 (2020-12-22)

Bug Fixes

• move accessToken to headers instead of parameter (#​1108) (67b0cc3)

6.1.3 (2020-10-22)

Bug Fixes

• deps: update dependency gaxios to v4 (#​1086) (f2678ff)

6.1.2 (2020-10-19)

Bug Fixes

• update gcp-metadata to catch a json-bigint security fix (#​1078) (125fe09)

6.1.1 (2020-10-06)

Bug Fixes

• deps: upgrade gtoken (#​1064) (9116f24)

v6.1.4

Compare Source

⚠ BREAKING CHANGES

• integrates external_accounts with GoogleAuth and ADC (#​1052)
• workload identity federation support (#​1131)

Features

• adds service account impersonation to ExternalAccountClient (#​1041) (997f124)
• adds text/json credential_source support to IdentityPoolClients (#​1059) (997f124)
• defines ExternalAccountClient used to instantiate external account clients (#​1050) (997f124)
• defines IdentityPoolClient used for K8s and Azure workloads (#​1042) (997f124)
• defines ExternalAccountClient abstract class for external_account credentials (#​1030) (997f124)
• get AWS region from environment variable (#​1067) (997f124)
• implements AWS signature version 4 for signing requests (#​1047) (997f124)
• implements the OAuth token exchange spec based on rfc8693 (#​1026) (997f124)
• integrates external_accounts with GoogleAuth and ADC (#​1052) (997f124)
• workload identity federation support (#​1131) (997f124)

Bug Fixes

• deps: update dependency puppeteer to v6 (#​1129) (5240fb0)
• deps: update dependency puppeteer to v7 (#​1134) (02d0d73)

6.1.6 (2021-01-27)

Bug Fixes

• call addSharedMetadataHeaders even when token has not expired (#​1116) (aad043d)

6.1.5 (2021-01-22)

Bug Fixes

• support PEM and p12 when using factory (#​1120) (c2ead4c)

6.1.4 (2020-12-22)

Bug Fixes

• move accessToken to headers instead of parameter (#​1108) (67b0cc3)

6.1.3 (2020-10-22)

Bug Fixes

• deps: update dependency gaxios to v4 (#​1086) (f2678ff)

6.1.2 (2020-10-19)

Bug Fixes

• update gcp-metadata to catch a json-bigint security fix (#​1078) (125fe09)

6.1.1 (2020-10-06)

Bug Fixes

• deps: upgrade gtoken (#​1064) (9116f24)

---

• If you want to rebase/retry this PR, check this box

[mend-for-github-com]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json