Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade firebase-admin from 9.4.2 to 9.12.0 #711

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

davidhin
Copy link
Owner

@davidhin davidhin commented Sep 5, 2024

snyk-top-banner

Snyk has created this PR to upgrade firebase-admin from 9.4.2 to 9.12.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 9 versions ahead of your current version.

  • The recommended version was released on 3 years ago.

Release notes
Package name: firebase-admin
  • 9.12.0 - 2021-09-28

    New Features

    • feat(rc): Add Remote Config Parameter Value Type Support (#1424)

    Bug Fixes

    • fix(fac): Verify Token: Change the jwks cache duration from 1 day to 6 hours (#1439)
    • fix(rtdb): Changed admin.database to use database-compat package (#1437)

    Miscellaneous

    • [chore] Release 9.12.0 (#1442)
    • Pin @ types/jsonwebtoken to 8.5.1 (#1438)
    • build(deps): bump tar from 6.1.3 to 6.1.11 (#1430)
    • build(deps-dev): bump @ types/lodash from 4.14.171 to 4.14.173 (#1435)
    • build(deps-dev): bump @ microsoft/api-extractor from 7.18.4 to 7.18.7 (#1423)
    • fix typo (#1420)
  • 9.11.1 - 2021-08-19

    Bug Fixes

    • fix: Update comments in index files (#1414)
    • fix: Throw error on user disabled and check revoked set true (#1401)

    Miscellaneous

    • [chore] Release 9.11.1 (#1415)
    • build(deps): bump path-parse from 1.0.6 to 1.0.7 (#1413)
    • build(deps-dev): bump yargs from 17.0.1 to 17.1.1 (#1412)
    • chore: Add emulator tests to nightlies (#1409)
    • build(deps-dev): bump ts-node from 9.0.0 to 10.2.0 (#1402)
    • build(deps): bump tar from 6.1.0 to 6.1.3 (#1399)
    • build(deps-dev): bump @ microsoft/api-extractor from 7.15.2 to 7.18.4 (#1379)
    • build(deps): bump jwks-rsa from 2.0.3 to 2.0.4 (#1393)
    • build(deps-dev): bump @ types/minimist from 1.2.1 to 1.2.2 (#1388)
    • build(deps-dev): bump @ types/request from 2.48.5 to 2.48.6 (#1387)
    • build(deps-dev): bump @ types/lodash from 4.14.157 to 4.14.171 (#1386)
    • build(deps): bump @ firebase/database from 0.10.6 to 0.10.7 (#1385)
    • build(deps-dev): bump @ types/bcrypt from 2.0.0 to 5.0.0 (#1384)
    • build(deps-dev): bump nock from 13.1.0 to 13.1.1 (#1370)
  • 9.11.0 - 2021-07-15

    New Features

    • feat(fac): Add custom TTL options for App Check (#1363)

    Miscellaneous

    • [chore] Release 9.11.0 (#1376)
    • Fix typo and formatting in docs (#1378)
    • Add AppCheckTokenOptions type to ToC (#1375)
    • Reduce App Check custom token exp to 5 mins (#1372)
    • build(deps): bump @ google-cloud/firestore from 4.12.2 to 4.13.1 (#1369)
    • Update index.ts (#1367)
    • build(deps-dev): bump @ types/chai from 4.2.11 to 4.2.21 (#1365)
    • build(deps-dev): bump yargs from 16.1.0 to 17.0.1 (#1357)
    • build(deps): bump jwks-rsa from 2.0.2 to 2.0.3 (#1361)
    • build(deps): bump @ firebase/database from 0.10.5 to 0.10.6 (#1356)
    • build(deps-dev): bump @ types/sinon from 9.0.4 to 10.0.2 (#1326)
    • build(deps-dev): bump @ types/nock from 9.3.1 to 11.1.0 (#1351)
    • build(deps): bump @ firebase/database from 0.10.4 to 0.10.5 (#1350)
    • build(deps-dev): bump @ types/request-promise from 4.1.46 to 4.1.47 (#1338)
  • 9.10.0 - 2021-06-24

    New Features

    • feat(fis): Adding the admin.installations() API for deleting Firebase installation IDs (#1187)

    Bug Fixes

    • fix: Updated TOC for new Auth type aliases (#1342)
    • fix(docs): replace all global.html -> admin.html (#1341)
    • fix(auth): Better type hierarchies for Auth API (#1294)

    Miscellaneous

    • [chore] Release 9.10.0 (#1345)
    • build(deps-dev): bump @ types/minimist from 1.2.0 to 1.2.1 (#1336)
    • build(deps-dev): bump gulp-filter from 6.0.0 to 7.0.0 (#1334)
    • build(deps-dev): bump request-promise from 4.2.5 to 4.2.6 (#1331)
    • build(deps): bump @ firebase/database from 0.10.0 to 0.10.4 (#1328)
    • build(deps-dev): bump @ firebase/app from 0.6.21 to 0.6.26 (#1329)
    • build(deps-dev): bump @ types/mocha from 2.2.48 to 8.2.2 (#1323)
    • build(deps): bump @ google-cloud/firestore from 4.5.0 to 4.12.2 (#1325)
    • build(deps-dev): bump bcrypt from 5.0.0 to 5.0.1 (#1324)
    • build(deps-dev): bump @ types/sinon-chai from 3.2.4 to 3.2.5 (#1316)
    • build(deps-dev): bump nock from 13.0.11 to 13.1.0 (#1313)
    • build(deps-dev): bump @ types/jsonwebtoken from 8.5.0 to 8.5.1 (#1315)
    • build(deps-dev): bump del from 2.2.2 to 6.0.0 (#1310)
    • build(deps): bump ws from 7.3.1 to 7.4.6 (#1309)
    • build(deps-dev): bump nock from 13.0.5 to 13.0.11 (#1311)
    • Add OAuthResponseType to ToC (#1303)
    • Update OIDC reference docs (#1305)
  • 9.9.0 - 2021-05-26

    Breaking Changes

    • change: The Admin SDK now requires Node.js 10.13.0 or higher. (#1300)

    New Features

    • feat(auth): Added code flow support for OIDC flow. (#1220)

    Bug Fixes

    • fix(auth): make MFA uid optional for updateUser operations (#1278)
    • fix: Revert regression introduced in #1257 (#1277)

    Miscellaneous

    • [chore] Release 9.9.0 (#1302)
    • Fixed integration test failure of skipped tests (#1299)
    • chore: Teporarily disabling sendToDeviceGroup integration test (#1292)
    • build(deps-dev): bump @ microsoft/api-extractor from 7.11.2 to 7.15.2 (#1291)
    • build(deps-dev): bump chalk from 1.1.3 to 4.1.1 (#1288)
    • build(deps-dev): bump nyc from 14.1.1 to 15.1.0 (#1290)
    • build(deps-dev): bump sinon from 9.0.2 to 9.2.4 (#1289)
    • build(deps-dev): bump run-sequence from 1.2.2 to 2.2.1 (#1282)
    • build(deps-dev): bump gulp-header from 1.8.12 to 2.0.9 (#1283)
    • chore: Remove gulp-replace dependency (#1285)
    • chore: Enabled dependabot (#1279)
    • build(deps): bump jose from 2.0.4 to 2.0.5 (#1265)
    • build(deps): bump handlebars from 4.7.6 to 4.7.7 (#1253)
  • 9.8.0 - 2021-05-10

    Bug Fixes

    • fix: adds missing EMAIL_NOT_FOUND error code (#1246)

    Miscellaneous

    • [chore] Release 9.8.0 (#1266)
    • Fix @ types/node conflict with grpc and port type (#1258)
    • build(deps): bump hosted-git-info from 2.8.8 to 2.8.9 (#1260)
    • feat: Add abuse reduction support (#1264)
    • Fix storage emulator env formatting (#1257)
    • build(deps): bump y18n from 3.2.1 to 3.2.2 (#1208)
    • chore: Upgraded RTDB and other @ firebase dependencies (#1250)
    • build(deps-dev): bump lodash from 4.17.19 to 4.17.21 (#1255)
  • 9.7.0 - 2021-04-27

    Bug Fixes

    • fix(rtdb): Fixing a token refresh livelock in Cloud Functions (#1234)

    Miscellaneous

    • [chore] Release 9.7.0 (#1240)
    • Revert "Disable one flaky tests in emulator. (#1205)" (#1227)
    • Add support for FIREBASE_STORAGE_EMULATOR_HOST env var (#1175)
    • chore: Clean up nightly workflow trigger tests (#1212)
    • Change dispatch event name in nightly workflow (#1216)
    • chore: Fix bug in send-email action code (#1214)
    • chore: Add Mailgun send email action (#1210)
    • (chore): Add JWT Decoder and Signature Verifier (#1204)
  • 9.6.0 - 2021-03-29

    New Features

    • feat(rtdb): Support emulator mode for rules management operations (#1190)

    Bug Fixes

    • fix(rtdb): Fixing the RTDB token listener callback (#1203)
    • fix: Decoupled proactive token refresh from FirebaseApp (#1194)

    Miscellaneous

    • [chore] Release 9.6.0 (#1209)
    • Disable one flaky tests in emulator. (#1205)
    • Add emulator-based integration tests. (#1155)
    • Update HOME.md (#1181)
    • chore: Updated doc generator for typedoc 0.19.0 (#1166)
  • 9.5.0 - 2021-02-10

    New Features

    • feat(auth): Add ability to link a federated ID with the updateUser() method. (#770)
    • feat(auth): Implement getUserByProviderId (#769)
    • feat: Exporting all types of Messages so they can be used by consumers (#1147)

    Bug Fixes

    • fix: Removing FirebaseServiceInterface and FirebaseServiceInternalsInterface (#1128)

    Miscellaneous

    • [chore] Release 9.5.0 (#1167)
    • (chore): Export UserProvider type and add it to toc.yaml (#1165)
    • Allow enabling of anonymous provider via tenant configuration (#802)
    • Improve token verification logic with Auth Emulator. (#1148)
    • update typo in interface name (#1138)
    • Updating Google Cloud naming (#1122)
    • chore(core): Automate Daily Integration Tests (#1130)
    • chore(rc): Add more unit tests for timestamp validation (#1092)
    • Remove delayed response message for holidays (#1125)
    • build(deps): bump highlight.js from 10.4.0 to 10.5.0 (#1127)
    • build(deps): bump ini from 1.3.5 to 1.3.8 (#1126)
    • build(deps): bump date-and-time from 0.14.1 to 0.14.2 (#1120)
    • Adding delayed response message for holidays (#1118)
  • 9.4.2 - 2020-12-09

    Bug Fixes

    • fix(fcm): Support arbitrary custom values in the ApnsPayload (#1097)

    Miscellaneous

    • [chore] Release 9.4.2 (#1111)
    • chore: adds missing provider IDs for Auth (#1106)
    • Adds @ license JSDoc tag to license comments (#1102)
    • chore: Upgraded mocha, ts-node, typedoc and nock (#1105)
    • chore: Upgraded JS SDK dependencies (#1104)
from firebase-admin GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Verified

This commit was signed with the committer’s verified signature.
snyk-bot Snyk bot
Snyk has created this PR to upgrade firebase-admin from 9.4.2 to 9.12.0.

See this package in npm:
firebase-admin

See this project in Snyk:
https://app.snyk.io/org/davidhin/project/841c5671-e275-457f-90b0-2f0dac39b3e5?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants