From 9047575f6b3f491ed0d61203b5072b2fa6015f2c Mon Sep 17 00:00:00 2001
From: "dd-octo-sts-2c363b[bot]"
 <266797965+dd-octo-sts-2c363b[bot]@users.noreply.github.com>
Date: Tue, 13 Oct 2026 18:13:47 +0000
Subject: [PATCH] =?UTF-8?q?ADMS:=20vuln=20@grpc/grpc-js=20(patch=20?=
 =?UTF-8?q?=E2=86=92=201.14.6)=20[integration-tests/lambda/otlp-node/packa?=
 =?UTF-8?q?ge.json]?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: gh-worker-campaigns-3e9aa4[bot] <244854796+gh-worker-campaigns-3e9aa4[bot]@users.noreply.github.com>
---
 .../lambda/otlp-node/package-lock.json        | 26 +++++++++++++++++++
 .../lambda/otlp-node/package.json             | 16 ++++++++++++
 2 files changed, 42 insertions(+)

diff --git a/integration-tests/lambda/otlp-node/package-lock.json b/integration-tests/lambda/otlp-node/package-lock.json
index d384aba96..fbf8d3abf 100644
--- a/integration-tests/lambda/otlp-node/package-lock.json
+++ b/integration-tests/lambda/otlp-node/package-lock.json
@@ -137,6 +137,19 @@
         "@opentelemetry/api": "^1.3.0"
       }
     },
+    "node_modules/@opentelemetry/exporter-logs-otlp-grpc/node_modules/@grpc/grpc-js": {
+      "version": "1.14.6",
+      "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.14.6.tgz",
+      "integrity": "sha512-SgC/B3/VZ8lTyOZ4Cwk6f1skWhmkNAaVfiX90qd5u1rRXGKk1//8FTUEN9GvOUq7rfWIqAYkA3CoyumYVpOS6g==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@grpc/proto-loader": "^0.8.0",
+        "@js-sdsl/ordered-map": "^4.4.2"
+      },
+      "engines": {
+        "node": ">=12.10.0"
+      }
+    },
     "node_modules/@opentelemetry/exporter-logs-otlp-http": {
       "version": "0.54.2",
       "resolved": "https://registry.npmjs.org/@opentelemetry/exporter-logs-otlp-http/-/exporter-logs-otlp-http-0.54.2.tgz",
@@ -239,6 +252,19 @@
         "@opentelemetry/api": "^1.3.0"
       }
     },
+    "node_modules/@opentelemetry/exporter-trace-otlp-grpc/node_modules/@grpc/grpc-js": {
+      "version": "1.14.6",
+      "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.14.6.tgz",
+      "integrity": "sha512-SgC/B3/VZ8lTyOZ4Cwk6f1skWhmkNAaVfiX90qd5u1rRXGKk1//8FTUEN9GvOUq7rfWIqAYkA3CoyumYVpOS6g==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@grpc/proto-loader": "^0.8.0",
+        "@js-sdsl/ordered-map": "^4.4.2"
+      },
+      "engines": {
+        "node": ">=12.10.0"
+      }
+    },
     "node_modules/@opentelemetry/exporter-trace-otlp-grpc/node_modules/@opentelemetry/resources": {
       "version": "1.27.0",
       "resolved": "https://registry.npmjs.org/@opentelemetry/resources/-/resources-1.27.0.tgz",
diff --git a/integration-tests/lambda/otlp-node/package.json b/integration-tests/lambda/otlp-node/package.json
index 0966f0a0c..36f3ee95e 100644
--- a/integration-tests/lambda/otlp-node/package.json
+++ b/integration-tests/lambda/otlp-node/package.json
@@ -14,5 +14,21 @@
     "@opentelemetry/sdk-trace-base": "^1.28.0",
     "@opentelemetry/sdk-trace-node": "^1.28.0",
     "@opentelemetry/semantic-conventions": "^1.28.0"
+  },
+  "overrides": {
+    "@opentelemetry/exporter-trace-otlp-grpc": {
+      "@grpc/grpc-js": "^1.14.6",
+      "@opentelemetry/otlp-grpc-exporter-base": {
+        "@grpc/grpc-js": "^1.14.6"
+      }
+    },
+    "@opentelemetry/sdk-node": {
+      "@opentelemetry/exporter-logs-otlp-grpc": {
+        "@grpc/grpc-js": "^1.14.6",
+        "@opentelemetry/otlp-grpc-exporter-base": {
+          "@grpc/grpc-js": "^1.14.6"
+        }
+      }
+    }
   }
 }