build(deps): bump @grpc/grpc-js from 1.11.4 to 1.13.6

[dependabot]

Bumps @grpc/grpc-js from 1.11.4 to 1.13.6.

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.13.6

• Fix a bug that caused clients to automatically transmit excessive error details to clients by default (advisory GHSA-f596-whhp-79r4)

@​grpc/grpc-js 1.13.5

• Fix a bug that could cause servers to crash when handling malformed requests (advisory GHSA-5375-pq7m-f5r2)
• Fix a bug that could cause clients and servers to crash when handling malformed compressed messages (advisory GHSA-99f4-grh7-6pcq)

@​grpc/grpc-js 1.13.4

• Fix ability to set SNI with ssl_target_name_override option (#2956)

@​grpc/grpc-js 1.13.3

• Disable Nagle's algorithm (#2936)
• Avoid calling http2.getDefaultSettings (#2937)

@​grpc/grpc-js 1.13.2

• Fix a bug that caused clients to be unable to connect through local proxies (#2933)

@​grpc/grpc-js 1.13.1

• Fix a bug that caused the rejectUnauthorized channel credentials option to be handled incorrectly (#2926)
• Fix a bug that caused the client to never send retries if any retryThrottling config was set (#2927)
• Fix a bug that caused clients to incorrectly send retries if the feature was disabled by a channel option and a retry config was provided (#2927)

@​grpc/grpc-js-xds 1.13.1

• Fix a bug in RBAC that caused exact path matchers in case insensitive mode to behave as a prefix matcher (advisory GHSA-88h9-xgvx-hvf2)

@​grpc/grpc-js-xds 1.13.0

• Implement gRFC A29: xDS-Based Security for gRPC Clients and Servers (#2837, #2866)
• Fix aggregate cluster behavior (gRFC A75) (#2844)
• Include validation error details when NACKing invalid resources (#2902)
• Proactively connect in more cases when using the ring_hash load balancing policy (#2904)

@​grpc/grpc-js 1.13.0

Changelog

• Add support for channel option grpc-node.flow_control_window to control HTTP/2 flow control window size (#2864 contributed by @​rickihastings)
• Show meaningful error messages more consistently when requests fail (#2868)
• Add support for CIDR blocks in no_proxyenvironment variable (#2876 contributed by @​melkouri)
• Fix a bug that caused server interceptor sendMetadata methods to not be called if the server interceptor did not explicitly send metadata (#2897)
• Fix IPv6-mapped IPv4 address parsing in channelz, and represent them as IPv4 addresses (#2909)

Experimental API changes

Added:

• SecureConnector
• SecureConnectResult
• SUBCHANNEL_ARGS_EXCLUDE_KEY_PREFIX
• Server#experimentalRegisterListenerToChannelz protected method
• ServerexperimentalUnregisterListenerFromChannelz protected method
• Server#experimentalCreateConnectionInjectorWithChannelzRef protected method

... (truncated)

Commits

• 5296a05 Merge pull request #3087 from murgatroid99/grpc-js_1.13.6
• 82422cd grpc-js(-xds): Increment version numbers (1.13.x)
• bfc35b4 Merge commit from fork
• fe6195e Merge commit from fork
• a47e4b3 Add matcher test suite
• 350de32 grpc-js: Don't transmit application error details by default
• 6cf64b5 grpc-js-xds: Fix case-insensitive exact path matcher behavior
• d646ccd Merge pull request #3053 from murgatroid99/grpc-js_1.13.5
• 603df1b Merge commit from fork
• 98b4020 Merge commit from fork
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.