Skip to content

chore(deps): upgrade @google-cloud/common dependency floor to ^8.2.0 - #9669

Draft
quirogas wants to merge 1 commit into
mainfrom
chore/bump-common-dep-floor
Draft

quirogas wants to merge 1 commit into
mainfrom
chore/bump-common-dep-floor

Conversation

@quirogas

@quirogas quirogas commented Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

Description

This change upgrades the @google-cloud/common dependency floor across consumer packages.

Impact

Consumers receive URI path encoding and project ID token handling fixes.

Changes

  • Upgrade "@google-cloud/common" dependency floor across handwritten/{bigquery,cloud-profiler,error-reporting,google-cloud-dns,logging,logging-bunyan,logging-winston,spanner}, packages/{google-cloud-speech,google-cloud-translate}, and librarian.yaml.
  • Layer 1 (#9668) is now merged on main (14b0cc6a45). Once Release-Please PR #9684 merges and publishes @google-cloud/common@8.2.2 to npm, this PR will be bumped to ^8.2.2 with pnpm-lock.yaml regenerated.

Testing

  • Verified GIT_DIFF_ARG=origin/main node ./bin/linter.mjs --strict passes with zero errors and zero warnings.
  • Verified unit tests in handwritten/bigquery (550 passing) and handwritten/google-cloud-dns (99 passing) under both Node.js and JS_RUNTIME=bun.
  • Verified live GCP system tests in handwritten/bigquery and handwritten/bigquery-storage against node-testbench-sandbox-789145.

Alternatives

  • Merging this floor bump before Release-Please PR #9684 publishes @google-cloud/common@8.2.2 to npm would resolve @google-cloud/common@8.2.1 from npm, which lacks #9668; keeping this PR in Draft until @google-cloud/common@8.2.2 is released avoids that regression.

@quirogas
quirogas added this pull request to stack #9670 October 20, 2026 04:50

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the @google-cloud/common dependency to version ^8.2.0 across several package files and librarian.yaml. However, the reviewer notes that version 8.2.0 contains a bug that percent-encodes {{projectId}} and breaks token replacement. To avoid this issue, it is highly recommended to bump the dependency floor directly to ^8.2.1 instead of ^8.2.0.

},
"dependencies": {
"@google-cloud/common": "^8.0.0",
"@google-cloud/common": "^8.2.0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

To prevent package managers from resolving to the buggy @google-cloud/common@8.2.0 release (which percent-encodes {{projectId}} and breaks token replacement), the dependency floor should be set directly to ^8.2.1 instead of ^8.2.0.

Suggested change
"@google-cloud/common": "^8.2.0",
"@google-cloud/common": "^8.2.1",

"license": "Apache-2.0",
"dependencies": {
"@google-cloud/common": "^8.0.0",
"@google-cloud/common": "^8.2.0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

To prevent package managers from resolving to the buggy @google-cloud/common@8.2.0 release (which percent-encodes {{projectId}} and breaks token replacement), the dependency floor should be set directly to ^8.2.1 instead of ^8.2.0.

Suggested change
"@google-cloud/common": "^8.2.0",
"@google-cloud/common": "^8.2.1",

},
"dependencies": {
"@google-cloud/common": "^8.0.0",
"@google-cloud/common": "^8.2.0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

To prevent package managers from resolving to the buggy @google-cloud/common@8.2.0 release (which percent-encodes {{projectId}} and breaks token replacement), the dependency floor should be set directly to ^8.2.1 instead of ^8.2.0.

Suggested change
"@google-cloud/common": "^8.2.0",
"@google-cloud/common": "^8.2.1",

},
"dependencies": {
"@google-cloud/common": "^8.0.0",
"@google-cloud/common": "^8.2.0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

To prevent package managers from resolving to the buggy @google-cloud/common@8.2.0 release (which percent-encodes {{projectId}} and breaks token replacement), the dependency floor should be set directly to ^8.2.1 instead of ^8.2.0.

Suggested change
"@google-cloud/common": "^8.2.0",
"@google-cloud/common": "^8.2.1",

},
"devDependencies": {
"@google-cloud/common": "^8.0.0",
"@google-cloud/common": "^8.2.0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

To prevent package managers from resolving to the buggy @google-cloud/common@8.2.0 release (which percent-encodes {{projectId}} and breaks token replacement), the dependency floor should be set directly to ^8.2.1 instead of ^8.2.0.

Suggested change
"@google-cloud/common": "^8.2.0",
"@google-cloud/common": "^8.2.1",

"@babel/helpers": "7.27.6",
"@babel/traverse": "7.27.7",
"@google-cloud/common": "^8.0.0",
"@google-cloud/common": "^8.2.0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

To prevent package managers from resolving to the buggy @google-cloud/common@8.2.0 release (which percent-encodes {{projectId}} and breaks token replacement), the dependency floor should be set directly to ^8.2.1 instead of ^8.2.0.

Suggested change
"@google-cloud/common": "^8.2.0",
"@google-cloud/common": "^8.2.1",

Comment thread librarian.yaml
default_version: v1
dependencies:
'@google-cloud/common': ^6.0.0
'@google-cloud/common': ^8.2.0

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

To prevent package managers from resolving to the buggy @google-cloud/common@8.2.0 release (which percent-encodes {{projectId}} and breaks token replacement), the dependency floor should be set directly to ^8.2.1 instead of ^8.2.0.

        '@google-cloud/common': ^8.2.1

Comment thread librarian.yaml
default_version: v3
dependencies:
'@google-cloud/common': ^6.0.0
'@google-cloud/common': ^8.2.0

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

To prevent package managers from resolving to the buggy @google-cloud/common@8.2.0 release (which percent-encodes {{projectId}} and breaks token replacement), the dependency floor should be set directly to ^8.2.1 instead of ^8.2.0.

        '@google-cloud/common': ^8.2.1

},
"dependencies": {
"@google-cloud/common": "^8.0.1",
"@google-cloud/common": "^8.2.0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

To prevent package managers from resolving to the buggy @google-cloud/common@8.2.0 release (which percent-encodes {{projectId}} and breaks token replacement), the dependency floor should be set directly to ^8.2.1 instead of ^8.2.0.

Suggested change
"@google-cloud/common": "^8.2.0",
"@google-cloud/common": "^8.2.1",

},
"dependencies": {
"@google-cloud/common": "^8.0.1",
"@google-cloud/common": "^8.2.0",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

To prevent package managers from resolving to the buggy @google-cloud/common@8.2.0 release (which percent-encodes {{projectId}} and breaks token replacement), the dependency floor should be set directly to ^8.2.1 instead of ^8.2.0.

Suggested change
"@google-cloud/common": "^8.2.0",
"@google-cloud/common": "^8.2.1",

Base automatically changed from fix/common-preserve-project-id-token to main October 21, 2026 23:15
@quirogas
quirogas force-pushed the chore/bump-common-dep-floor branch from 17e18ef to f86a1ff Compare October 21, 2026 23:15
@quirogas
quirogas force-pushed the chore/bump-common-dep-floor branch from f86a1ff to 132432c Compare October 22, 2026 00:15

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant