[Snyk] Security upgrade @google-cloud/firestore from 0.15.2 to 6.2.0

[Jeremip11]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	486/1000 Why? Recently disclosed, Has a fix available, CVSS 4	Insecure Storage of Sensitive Information SNYK-JS-GOOGLECLOUDFIRESTORE-6100635	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @google-cloud/firestore

The new version differs by 250 commits.

• 282ac8a chore(main): release 6.2.0 ([chore] Release 11.0.0 firebase/firebase-admin-node#1770)
• 6393fe7 fix: minify proto JSON files ([FR] A better and more explicit way to close and end firebase connection firebase/firebase-admin-node#1771)
• d85b0e9 feat: Use REST (build(deps-dev): bump @microsoft/api-extractor from 7.19.4 to 7.23.2 firebase/firebase-admin-node#1698)
• 6ba6751 fix: Remove hack in update.sh, and replace with existing pattern for protobuf dependencies. (build(deps): bump @types/node from 17.0.41 to 17.0.42 firebase/firebase-admin-node#1769)
• 5eea279 chore(main): release 6.1.0 ([FR] Cancel enqueued task firebase/firebase-admin-node#1753)
• 40f1db3 fix: Version 7 of protobufjs broke the update.sh script. Added path to built in protobuf. (build(deps-dev): bump @firebase/auth-compat from 0.2.15 to 0.2.16 firebase/firebase-admin-node#1766)
• ef59a22 feat: accept google-gax instance as a parameter (fix: Switch to @fastify/busboy firebase/firebase-admin-node#1757)
• dd01b27 fix: Pin Typescript to prevent new type checking. (build(deps-dev): bump @typescript-eslint/parser from 5.27.1 to 5.28.0 firebase/firebase-admin-node#1764)
• 1931415 fix: Update GAX (fix: Add type declarations to exports fields firebase/firebase-admin-node#1758)
• a029a6e fix: better support for fallback mode (Error: error:25066067:DSO support routines:dlfcn_load:could not load the shared library firebase/firebase-admin-node#1756)
• fd7002d chore: remove unused proto imports (Error: error:25066067:DSO support routines:dlfcn_load:could not load the shared library firebase/firebase-admin-node#1755)
• fa0ad66 fix: Don't allow serialization of firestore settings (CVE-2022-24434 Crash in HeaderParser in dicer firebase/firebase-admin-node#1742)
• a67a124 build(node): Remove npm_publish_token from the list of SECRET_MANAGER_KEYS. This has been moved back to keystore. (build(deps): bump @google-cloud/storage from 5.19.4 to 6.1.0 firebase/firebase-admin-node#1752)
• 2aa15b4 build(node): switch back to keystore for publication. (build(deps-dev): bump @microsoft/api-extractor from 7.24.2 to 7.25.0 firebase/firebase-admin-node#1750)
• bd5acf5 chore(main): release 6.0.0 (build(deps-dev): bump @types/lodash from 4.14.178 to 4.14.182 firebase/firebase-admin-node#1731)
• 4e8d33c fix(deps): update dependency protobufjs to v7 (build(deps): bump jwks-rsa from 2.1.0 to 2.1.4 firebase/firebase-admin-node#1747)
• f618e9f chore(deps): update dependency linkinator to v4 (build(deps-dev): bump @firebase/app-compat from 0.1.25 to 0.1.26 firebase/firebase-admin-node#1746)
• b9d8fef feat: support regapic LRO (Crash in HeaderParser in dicer firebase/firebase-admin-node#1729)
• 07de28a feat: Support Logical Termination on RunQueryResponse ([FR] Export Errors For Use firebase/firebase-admin-node#1741)
• 962d586 chore(deps): update dependency @ types/mocha to v9 (build(deps-dev): bump @microsoft/api-extractor from 7.23.2 to 7.24.0 firebase/firebase-admin-node#1714)
• 211b105 chore(deps): update dependency jsdoc-region-tag to v2 (build(deps): bump @types/node from 17.0.35 to 17.0.38 firebase/firebase-admin-node#1736)
• 2bf1d52 chore(deps): update dependency jsdoc-fresh to v2 (build(deps-dev): bump @firebase/auth-compat from 0.2.14 to 0.2.15 firebase/firebase-admin-node#1735)
• 86abdc8 build(node): add new jsteam + enforce branches up-to-date (build(deps): bump @types/node from 16.9.6 to 16.10.3 firebase/firebase-admin-node#1451) (build(deps-dev): bump @microsoft/api-extractor from 7.24.1 to 7.24.2 firebase/firebase-admin-node#1734)
• 0abbd21 build!: update library to use Node 12 (build(deps-dev): bump del from 6.1.0 to 6.1.1 firebase/firebase-admin-node#1725)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.