Skip to content

Remove remaining google-p12-pem dependency edges from supported packages #9550

Description

@Connor-Vandenberg

Context

google-p12-pem is archived and deprecated. Nexus is auditing a zero-warning frozen install on Node 22 and Node 24 in PR #705, where the package remains transitively reachable and emits an install deprecation warning.

Request

Please identify the currently supported Google Cloud package or auth dependency that still pulls google-p12-pem, and remove that edge or document the exact legacy-only boundary. Newer Google auth code has moved away from automatic P12-to-PEM conversion; downstream consumers need a released, deterministic path that removes this deprecated package from frozen graphs.

Evidence

  • Deprecated package: google-p12-pem
  • Archived source package: googleapis/google-p12-pem
  • Consumer reproduction: Nexus PR core: add retry logic to read streams #705, strict pnpm install --frozen-lockfile --ignore-scripts warning-as-error lane
  • Required outcome: no deprecated google-p12-pem edge in supported published paths

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions