@overdeck/desktop 0.45.24 → 0.46.0

package/server/node_modules/google-gax/build/protos/google/type/phone_number.proto

@@ -1,4 +1,4 @@
-// Copyright 2025 Google LLC
+// Copyright 2026 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -16,7 +16,6 @@ syntax = "proto3";
 
 package google.type;
 
-option cc_enable_arenas = true;
 option go_package = "google.golang.org/genproto/googleapis/type/phone_number;phone_number";
 option java_multiple_files = true;
 option java_outer_classname = "PhoneNumberProto";
@@ -39,13 +38,13 @@ option objc_class_prefix = "GTP";
 //
 // For instance, in Java this would be:
 //
-//    com.google.type.PhoneNumber wireProto =
-//        com.google.type.PhoneNumber.newBuilder().build();
-//    com.google.i18n.phonenumbers.Phonenumber.PhoneNumber phoneNumber =
-//        PhoneNumberUtil.getInstance().parse(wireProto.getE164Number(), "ZZ");
-//    if (!wireProto.getExtension().isEmpty()) {
-//      phoneNumber.setExtension(wireProto.getExtension());
-//    }
+//     com.google.type.PhoneNumber wireProto =
+//         com.google.type.PhoneNumber.newBuilder().build();
+//     com.google.i18n.phonenumbers.Phonenumber.PhoneNumber phoneNumber =
+//         PhoneNumberUtil.getInstance().parse(wireProto.getE164Number(), "ZZ");
+//     if (!wireProto.getExtension().isEmpty()) {
+//       phoneNumber.setExtension(wireProto.getExtension());
+//     }
 //
 //  Reference(s):
 //   - https://github.com/google/libphonenumber
@@ -53,12 +52,13 @@ message PhoneNumber {
   // An object representing a short code, which is a phone number that is
   // typically much shorter than regular phone numbers and can be used to
   // address messages in MMS and SMS systems, as well as for abbreviated dialing
-  // (e.g. "Text 611 to see how many minutes you have remaining on your plan.").
+  // (For example "Text 611 to see how many minutes you have remaining on your
+  // plan.").
   //
   // Short codes are restricted to a region and are not internationally
   // dialable, which means the same short code can exist in different regions,
   // with different usage and pricing, even if those regions share the same
-  // country calling code (e.g. US and CA).
+  // country calling code (For example: US and CA).
   message ShortCode {
     // Required. The BCP-47 region code of the location where calls to this
     // short code can be made, such as "US" and "BB".
@@ -68,7 +68,7 @@ message PhoneNumber {
     string region_code = 1;
 
     // Required. The short code digits, without a leading plus ('+') or country
-    // calling code, e.g. "611".
+    // calling code. For example "611".
     string number = 2;
   }
 
@@ -79,24 +79,29 @@ message PhoneNumber {
     // The phone number, represented as a leading plus sign ('+'), followed by a
     // phone number that uses a relaxed ITU E.164 format consisting of the
     // country calling code (1 to 3 digits) and the subscriber number, with no
-    // additional spaces or formatting, e.g.:
+    // additional spaces or formatting. For example:
+    //
     //  - correct: "+15552220123"
-    //  - incorrect: "+1 (555) 222-01234 x123".
+    //
+    //  - incorrect: "+1 (555) 222-01234 x123"
     //
     // The ITU E.164 format limits the latter to 12 digits, but in practice not
     // all countries respect that, so we relax that restriction here.
     // National-only numbers are not allowed.
     //
     // References:
+    //
     //  - https://www.itu.int/rec/T-REC-E.164-201011-I
+    //
     //  - https://en.wikipedia.org/wiki/E.164.
+    //
     //  - https://en.wikipedia.org/wiki/List_of_country_calling_codes
     string e164_number = 1;
 
     // A short code.
     //
     // Reference(s):
-    //  - https://en.wikipedia.org/wiki/Short_code
+    //  - https://wikipedia.org/wiki/Short_code
     ShortCode short_code = 2;
   }
 

package/server/node_modules/google-gax/build/protos/google/type/postal_address.proto

@@ -1,4 +1,4 @@
-// Copyright 2025 Google LLC
+// Copyright 2026 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -16,30 +16,29 @@ syntax = "proto3";
 
 package google.type;
 
-option cc_enable_arenas = true;
 option go_package = "google.golang.org/genproto/googleapis/type/postaladdress;postaladdress";
 option java_multiple_files = true;
 option java_outer_classname = "PostalAddressProto";
 option java_package = "com.google.type";
 option objc_class_prefix = "GTP";
 
-// Represents a postal address, e.g. for postal delivery or payments addresses.
-// Given a postal address, a postal service can deliver items to a premise, P.O.
-// Box or similar.
-// It is not intended to model geographical locations (roads, towns,
-// mountains).
+// Represents a postal address, such as for postal delivery or payments
+// addresses. With a postal address, a postal service can deliver items to a
+// premise, P.O. box, or similar. A postal address is not intended to model
+// geographical locations like roads, towns, or mountains.
 //
-// In typical usage an address would be created via user input or from importing
+// In typical usage, an address would be created by user input or from importing
 // existing data, depending on the type of process.
 //
-// Advice on address input / editing:
-//  - Use an i18n-ready address widget such as
-//    https://github.com/google/libaddressinput)
-// - Users should not be presented with UI elements for input or editing of
-//   fields outside countries where that field is used.
+// Advice on address input or editing:
 //
-// For more guidance on how to use this schema, please see:
-// https://support.google.com/business/answer/6397478
+//  - Use an internationalization-ready address widget such as
+//  https://github.com/google/libaddressinput.
+//  - Users should not be presented with UI elements for input or editing of
+//  fields outside countries where that field is used.
+//
+// For more guidance on how to use this schema, see:
+// https://support.google.com/business/answer/6397478.
 message PostalAddress {
   // The schema revision of the `PostalAddress`. This must be set to 0, which is
   // the latest revision.
@@ -49,8 +48,8 @@ message PostalAddress {
 
   // Required. CLDR region code of the country/region of the address. This
   // is never inferred and it is up to the user to ensure the value is
-  // correct. See http://cldr.unicode.org/ and
-  // http://www.unicode.org/cldr/charts/30/supplemental/territory_information.html
+  // correct. See https://cldr.unicode.org/ and
+  // https://www.unicode.org/cldr/charts/30/supplemental/territory_information.html
   // for details. Example: "CH" for Switzerland.
   string region_code = 2;
 
@@ -70,55 +69,56 @@ message PostalAddress {
 
   // Optional. Postal code of the address. Not all countries use or require
   // postal codes to be present, but where they are used, they may trigger
-  // additional validation with other parts of the address (e.g. state/zip
-  // validation in the U.S.A.).
+  // additional validation with other parts of the address (for example,
+  // state or zip code validation in the United States).
   string postal_code = 4;
 
   // Optional. Additional, country-specific, sorting code. This is not used
   // in most regions. Where it is used, the value is either a string like
-  // "CEDEX", optionally followed by a number (e.g. "CEDEX 7"), or just a number
-  // alone, representing the "sector code" (Jamaica), "delivery area indicator"
-  // (Malawi) or "post office indicator" (e.g. Côte d'Ivoire).
+  // "CEDEX", optionally followed by a number (for example, "CEDEX 7"), or just
+  // a number alone, representing the "sector code" (Jamaica), "delivery area
+  // indicator" (Malawi) or "post office indicator" (Côte d'Ivoire).
   string sorting_code = 5;
 
   // Optional. Highest administrative subdivision which is used for postal
   // addresses of a country or region.
   // For example, this can be a state, a province, an oblast, or a prefecture.
-  // Specifically, for Spain this is the province and not the autonomous
-  // community (e.g. "Barcelona" and not "Catalonia").
-  // Many countries don't use an administrative area in postal addresses. E.g.
-  // in Switzerland this should be left unpopulated.
+  // For Spain, this is the province and not the autonomous
+  // community (for example, "Barcelona" and not "Catalonia").
+  // Many countries don't use an administrative area in postal addresses. For
+  // example, in Switzerland, this should be left unpopulated.
   string administrative_area = 6;
 
-  // Optional. Generally refers to the city/town portion of the address.
+  // Optional. Generally refers to the city or town portion of the address.
   // Examples: US city, IT comune, UK post town.
   // In regions of the world where localities are not well defined or do not fit
-  // into this structure well, leave locality empty and use address_lines.
+  // into this structure well, leave `locality` empty and use `address_lines`.
   string locality = 7;
 
   // Optional. Sublocality of the address.
-  // For example, this can be neighborhoods, boroughs, districts.
+  // For example, this can be a neighborhood, borough, or district.
   string sublocality = 8;
 
   // Unstructured address lines describing the lower levels of an address.
   //
-  // Because values in address_lines do not have type information and may
-  // sometimes contain multiple values in a single field (e.g.
+  // Because values in `address_lines` do not have type information and may
+  // sometimes contain multiple values in a single field (for example,
   // "Austin, TX"), it is important that the line order is clear. The order of
-  // address lines should be "envelope order" for the country/region of the
-  // address. In places where this can vary (e.g. Japan), address_language is
-  // used to make it explicit (e.g. "ja" for large-to-small ordering and
-  // "ja-Latn" or "en" for small-to-large). This way, the most specific line of
-  // an address can be selected based on the language.
+  // address lines should be "envelope order" for the country or region of the
+  // address. In places where this can vary (for example, Japan),
+  // `address_language` is used to make it explicit (for example, "ja" for
+  // large-to-small ordering and "ja-Latn" or "en" for small-to-large). In this
+  // way, the most specific line of an address can be selected based on the
+  // language.
   //
   // The minimum permitted structural representation of an address consists
-  // of a region_code with all remaining information placed in the
-  // address_lines. It would be possible to format such an address very
+  // of a `region_code` with all remaining information placed in the
+  // `address_lines`. It would be possible to format such an address very
   // approximately without geocoding, but no semantic reasoning could be
   // made about any of the address components until it was at least
   // partially resolved.
   //
-  // Creating an address only containing a region_code and address_lines, and
+  // Creating an address only containing a `region_code` and `address_lines` and
   // then geocoding is the recommended way to handle completely unstructured
   // addresses (as opposed to guessing which parts of the address should be
   // localities or administrative areas).

package/server/node_modules/google-gax/build/protos/google/type/quaternion.proto

@@ -1,4 +1,4 @@
-// Copyright 2025 Google LLC
+// Copyright 2026 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -16,13 +16,14 @@ syntax = "proto3";
 
 package google.type;
 
-option cc_enable_arenas = true;
 option go_package = "google.golang.org/genproto/googleapis/type/quaternion;quaternion";
 option java_multiple_files = true;
 option java_outer_classname = "QuaternionProto";
 option java_package = "com.google.type";
 option objc_class_prefix = "GTP";
 
+// A quaternion, represented by four 64-bit floating point values.
+//
 // A quaternion is defined as the quotient of two directed lines in a
 // three-dimensional space or equivalently as the quotient of two Euclidean
 // vectors (https://en.wikipedia.org/wiki/Quaternion).
@@ -40,7 +41,7 @@ option objc_class_prefix = "GTP";
 // where x, y, z, and w are real numbers, and i, j, and k are three imaginary
 // numbers.
 //
-// Our naming choice `(x, y, z, w)` comes from the desire to avoid confusion for
+// The naming choice `(x, y, z, w)` comes from the desire to avoid confusion for
 // those interested in the geometric properties of the quaternion in the 3D
 // Cartesian space. Other texts often use alternative names or subscripts, such
 // as `(a, b, c, d)`, `(1, i, j, k)`, or `(0, 1, 2, 3)`, which are perhaps
@@ -78,7 +79,6 @@ option objc_class_prefix = "GTP";
 // it would produce a unique representation. It is thus recommended that `w` be
 // kept positive, which can be achieved by changing all the signs when `w` is
 // negative.
-//
 message Quaternion {
   // The x component.
   double x = 1;

package/server/node_modules/google-gax/build/protos/google/type/timeofday.proto

@@ -1,4 +1,4 @@
-// Copyright 2025 Google LLC
+// Copyright 2026 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -16,7 +16,6 @@ syntax = "proto3";
 
 package google.type;
 
-option cc_enable_arenas = true;
 option go_package = "google.golang.org/genproto/googleapis/type/timeofday;timeofday";
 option java_multiple_files = true;
 option java_outer_classname = "TimeOfDayProto";
@@ -28,17 +27,21 @@ option objc_class_prefix = "GTP";
 // types are [google.type.Date][google.type.Date] and
 // `google.protobuf.Timestamp`.
 message TimeOfDay {
-  // Hours of day in 24 hour format. Should be from 0 to 23. An API may choose
-  // to allow the value "24:00:00" for scenarios like business closing time.
+  // Hours of a day in 24 hour format. Must be greater than or equal to 0 and
+  // typically must be less than or equal to 23. An API may choose to allow the
+  // value "24:00:00" for scenarios like business closing time.
   int32 hours = 1;
 
-  // Minutes of hour of day. Must be from 0 to 59.
+  // Minutes of an hour. Must be greater than or equal to 0 and less than or
+  // equal to 59.
   int32 minutes = 2;
 
-  // Seconds of minutes of the time. Must normally be from 0 to 59. An API may
-  // allow the value 60 if it allows leap-seconds.
+  // Seconds of a minute. Must be greater than or equal to 0 and typically must
+  // be less than or equal to 59. An API may allow the value 60 if it allows
+  // leap-seconds.
   int32 seconds = 3;
 
-  // Fractions of seconds in nanoseconds. Must be from 0 to 999,999,999.
+  // Fractions of seconds, in nanoseconds. Must be greater than or equal to 0
+  // and less than or equal to 999,999,999.
   int32 nanos = 4;
 }

package/server/node_modules/google-gax/package.json

@@ -1,6 +1,6 @@
 {
   "name": "google-gax",
-  "version": "5.0.7",
+  "version": "5.0.8",
   "description": "Google API Extensions",
   "main": "build/src/index.js",
   "types": "build/src/index.d.ts",
@@ -96,15 +96,15 @@
   },
   "repository": {
     "type": "git",
-    "directory": "packages/gax",
-    "url": "https://github.com/googleapis/google-cloud-node-core.git"
+    "directory": "core/packages/gax",
+    "url": "https://github.com/googleapis/google-cloud-node.git"
   },
   "author": "Google API Authors",
   "license": "Apache-2.0",
   "bugs": {
-    "url": "https://github.com/googleapis/google-cloud-node-core/issues"
+    "url": "https://github.com/googleapis/google-cloud-node/issues"
   },
-  "homepage": "https://github.com/googleapis/google-cloud-node-core/tree/main/packages/gax",
+  "homepage": "https://github.com/googleapis/google-cloud-node/tree/main/core/packages/gax",
   "engines": {
     "node": ">=18"
   },

package/server/node_modules/retry-request/package.json

@@ -1,12 +1,12 @@
 {
   "name": "retry-request",
-  "version": "8.0.3",
+  "version": "8.0.4",
   "description": "Retry a request.",
   "main": "index.js",
   "repository": {
     "type": "git",
-    "directory": "packages/retry-request",
-    "url": "https://github.com/googleapis/google-cloud-node-core.git"
+    "directory": "core/packages/retry-request",
+    "url": "https://github.com/googleapis/google-cloud-node.git"
   },
   "scripts": {
     "docs": "jsdoc -c .jsdoc.js",
@@ -47,5 +47,5 @@
     "mocha": "^11.1.0",
     "typescript": "5.8.3"
   },
-  "homepage": "https://github.com/googleapis/google-cloud-node-core/tree/main/packages/retry-request"
+  "homepage": "https://github.com/googleapis/google-cloud-node/tree/main/core/packages/retry-request"
 }

package/server/node_modules/teeny-request/package.json

@@ -1,6 +1,6 @@
 {
   "name": "teeny-request",
-  "version": "10.1.3",
+  "version": "10.1.4",
   "description": "Like request, but smaller.",
   "main": "./build/src/index.js",
   "types": "./build/src/index.d.ts",
@@ -25,8 +25,8 @@
   ],
   "repository": {
     "type": "git",
-    "directory": "packages/teeny-request",
-    "url": "https://github.com/googleapis/google-cloud-node-core.git"
+    "directory": "core/packages/teeny-request",
+    "url": "https://github.com/googleapis/google-cloud-node.git"
   },
   "keywords": [
     "request",
@@ -36,9 +36,9 @@
   "author": "fhinkel",
   "license": "Apache-2.0",
   "bugs": {
-    "url": "https://github.com/googleapis/teeny-request/issues"
+    "url": "https://github.com/googleapis/google-cloud-node/issues"
   },
-  "homepage": "https://github.com/googleapis/google-cloud-node-core/tree/main/packages/teeny-request",
+  "homepage": "https://github.com/googleapis/google-cloud-node/tree/main/core/packages/teeny-request",
   "dependencies": {
     "http-proxy-agent": "^7.0.0",
     "https-proxy-agent": "^7.0.1",

package/server/node_modules/undici/lib/cache/memory-cache-store.js

@@ -218,17 +218,62 @@ class MemoryCacheStore extends EventEmitter {
 }
 
 function findEntry (key, entries, now) {
-  return entries.find((entry) => (
-    entry.deleteAt > now &&
-    entry.method === key.method &&
-    (entry.vary == null || Object.keys(entry.vary).every(headerName => {
-      if (entry.vary[headerName] === null) {
-        return key.headers[headerName] === undefined
+  for (let i = 0; i < entries.length; i++) {
+    const entry = entries[i]
+    if (
+      entry.deleteAt > now &&
+      entry.method === key.method &&
+      varyMatches(key, entry)
+    ) {
+      return entry
+    }
+  }
+}
+
+function varyMatches (key, entry) {
+  if (entry.vary == null) {
+    return true
+  }
+
+  for (const headerName in entry.vary) {
+    if (Object.hasOwn(entry.vary, headerName) && !headerValueEquals(key.headers?.[headerName], entry.vary[headerName])) {
+      return false
+    }
+  }
+
+  return true
+}
+
+/**
+ * @param {string|string[]|null|undefined} lhs
+ * @param {string|string[]|null|undefined} rhs
+ * @returns {boolean}
+ */
+function headerValueEquals (lhs, rhs) {
+  if (lhs == null && rhs == null) {
+    return true
+  }
+
+  if ((lhs == null && rhs != null) ||
+      (lhs != null && rhs == null)) {
+    return false
+  }
+
+  if (Array.isArray(lhs) && Array.isArray(rhs)) {
+    if (lhs.length !== rhs.length) {
+      return false
+    }
+
+    for (let i = 0; i < lhs.length; i++) {
+      if (lhs[i] !== rhs[i]) {
+        return false
       }
+    }
+
+    return true
+  }
 
-      return entry.vary[headerName] === key.headers[headerName]
-    }))
-  ))
+  return lhs === rhs
 }
 
 module.exports = MemoryCacheStore

package/server/node_modules/undici/lib/cache/sqlite-cache-store.js

@@ -456,7 +456,13 @@ function headerValueEquals (lhs, rhs) {
       return false
     }
 
-    return lhs.every((x, i) => x === rhs[i])
+    for (let i = 0; i < lhs.length; i++) {
+      if (lhs[i] !== rhs[i]) {
+        return false
+      }
+    }
+
+    return true
   }
 
   return lhs === rhs

package/server/node_modules/undici/lib/core/request.js

@@ -472,7 +472,13 @@ function processHeader (request, key, val) {
       } else if (typeof val[i] === 'object') {
         throw new InvalidArgumentError(`invalid ${key} header`)
       } else {
-        arr.push(`${val[i]}`)
+        // Coerce primitives (and reject unsafe coercions such as functions
+        // with a crafted toString/Symbol.toPrimitive).
+        const str = `${val[i]}`
+        if (!isValidHeaderValue(str)) {
+          throw new InvalidArgumentError(`invalid ${key} header`)
+        }
+        arr.push(str)
       }
     }
     val = arr
@@ -483,7 +489,12 @@ function processHeader (request, key, val) {
   } else if (val === null) {
     val = ''
   } else {
+    // Coerce primitives (and reject unsafe coercions such as functions
+    // with a crafted toString/Symbol.toPrimitive).
     val = `${val}`
+    if (!isValidHeaderValue(val)) {
+      throw new InvalidArgumentError(`invalid ${key} header`)
+    }
   }
 
   if (headerName === 'host') {

package/server/node_modules/undici/lib/dispatcher/client-h1.js

@@ -10,6 +10,7 @@ const {
   RequestContentLengthMismatchError,
   ResponseContentLengthMismatchError,
   RequestAbortedError,
+  InvalidArgumentError,
   HeadersTimeoutError,
   HeadersOverflowError,
   SocketError,
@@ -1200,8 +1201,16 @@ function writeH1 (client, request) {
     }
     body = bodyStream.stream
     contentLength = bodyStream.length
-  } else if (util.isBlobLike(body) && request.contentType == null && body.type) {
-    headers.push('content-type', body.type)
+  } else if (util.isBlobLike(body) && request.contentType == null) {
+    const contentType = body.type
+    if (contentType) {
+      const contentTypeValue = `${contentType}`
+      if (!util.isValidHeaderValue(contentTypeValue)) {
+        util.errorRequest(client, request, new InvalidArgumentError('invalid content-type header'))
+        return false
+      }
+      headers.push('content-type', contentTypeValue)
+    }
   }
 
   if (body && typeof body.read === 'function') {

package/server/node_modules/undici/lib/global.js

@@ -8,6 +8,9 @@ const { InvalidArgumentError } = require('./core/errors')
 const Agent = require('./dispatcher/agent')
 const Dispatcher1Wrapper = require('./dispatcher/dispatcher1-wrapper')
 
+// Fallback storage for when globalThis is not extensible (e.g. frozen)
+let fallbackDispatcher
+
 if (getGlobalDispatcher() === undefined) {
   setGlobalDispatcher(new Agent())
 }
@@ -17,25 +20,42 @@ function setGlobalDispatcher (agent) {
     throw new InvalidArgumentError('Argument agent must implement Agent')
   }
 
-  Object.defineProperty(globalThis, globalDispatcher, {
-    value: agent,
-    writable: true,
-    enumerable: false,
-    configurable: false
-  })
-
-  const legacyAgent = agent instanceof Dispatcher1Wrapper ? agent : new Dispatcher1Wrapper(agent)
-
-  Object.defineProperty(globalThis, legacyGlobalDispatcher, {
-    value: legacyAgent,
-    writable: true,
-    enumerable: false,
-    configurable: false
-  })
+  try {
+    Object.defineProperty(globalThis, globalDispatcher, {
+      value: agent,
+      writable: true,
+      enumerable: false,
+      configurable: false
+    })
+  } catch (err) {
+    // globalThis is not extensible (e.g. Object.freeze(globalThis))
+    // Use fallback storage instead
+    if (err instanceof TypeError) {
+      fallbackDispatcher = agent
+      return
+    }
+    throw err
+  }
+
+  try {
+    const legacyAgent = agent instanceof Dispatcher1Wrapper ? agent : new Dispatcher1Wrapper(agent)
+
+    Object.defineProperty(globalThis, legacyGlobalDispatcher, {
+      value: legacyAgent,
+      writable: true,
+      enumerable: false,
+      configurable: false
+    })
+  } catch (err) {
+    // globalThis is not extensible; fallback storage is already set
+    if (!(err instanceof TypeError)) {
+      throw err
+    }
+  }
 }
 
 function getGlobalDispatcher () {
-  return globalThis[globalDispatcher]
+  return globalThis[globalDispatcher] ?? fallbackDispatcher
 }
 
 // These are the globals that can be installed by undici.install().