Bump the npm_and_yarn group across 1 directory with 8 updates - #29
Open
dependabot[bot] wants to merge 6 commits into
Open
Conversation
Copy link
Copy Markdown
Sorry, something went wrong.
Snyk has created this PR to upgrade firebase-admin from 5.10.0 to 5.13.1. See this package in npm: https://www.npmjs.com/package/firebase-admin See this project in Snyk: https://app.snyk.io/org/hawthorne001/project/6cb08067-7e0f-4511-9766-bfe74f81f1eb?utm_source=github&utm_medium=referral&page=upgrade-pr
…e0897c78dd9718bc3 [Snyk] Upgrade firebase-admin from 5.10.0 to 5.13.1
Bumps the npm_and_yarn group with 5 updates in the /functions/testapp/functions directory: | Package | From | To | | --- | --- | --- | | [@firebase/util](https://github.com/firebase/firebase-js-sdk/tree/HEAD/packages/util) | `0.2.14` | `1.9.6` | | [firebase-admin](https://github.com/firebase/firebase-admin-node) | `5.13.1` | `12.1.0` | | [express](https://github.com/expressjs/express) | `4.16.3` | `4.19.2` | | [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `7.4.3` | `9.0.2` | | [firebase-functions](https://github.com/firebase/firebase-functions) | `0.9.0` | `5.0.1` | Updates `@firebase/util` from 0.2.14 to 1.9.6 - [Release notes](https://github.com/firebase/firebase-js-sdk/releases) - [Changelog](https://github.com/firebase/firebase-js-sdk/blob/master/packages/util/CHANGELOG.md) - [Commits](https://github.com/firebase/firebase-js-sdk/commits/@firebase/util@1.9.6/packages/util) Updates `firebase-admin` from 5.13.1 to 12.1.0 - [Release notes](https://github.com/firebase/firebase-admin-node/releases) - [Commits](firebase/firebase-admin-node@v5.13.1...v12.1.0) Updates `@google-cloud/firestore` from 0.15.4 to 7.7.0 - [Release notes](https://github.com/googleapis/nodejs-firestore/releases) - [Changelog](https://github.com/googleapis/nodejs-firestore/blob/main/CHANGELOG.md) - [Commits](googleapis/nodejs-firestore@v0.15.4...v7.7.0) Updates `express` from 4.16.3 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.16.3...4.19.2) Updates `jsonwebtoken` from 7.4.3 to 9.0.2 - [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md) - [Commits](auth0/node-jsonwebtoken@v7.4.3...v9.0.2) Updates `firebase-functions` from 0.9.0 to 5.0.1 - [Release notes](https://github.com/firebase/firebase-functions/releases) - [Changelog](https://github.com/firebase/firebase-functions/blob/master/tsconfig.release.json) - [Commits](firebase/firebase-functions@v0.9.0...v5.0.1) Updates `node-forge` from 0.7.4 to 1.3.1 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@0.7.4...v1.3.1) Updates `qs` from 6.5.1 to 6.11.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.1...v6.11.0) --- updated-dependencies: - dependency-name: "@firebase/util" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: firebase-admin dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@google-cloud/firestore" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsonwebtoken dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: firebase-functions dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: node-forge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 5 updates in the /functions/testapp/functions directory:
Updates @firebase/util from 0.2.14 to 1.9.6
ChangelogSourced from @firebase/util's changelog.
... (truncated)
Commits- 8fb372a Version Packages (#8236)
- 13762a4 Version Packages (#8101)
- 0c51501 Run npm pkg fix on all packages (#8079)
- 9fa0e9f Version Packages (#7995)
- 434f841 Fix isSafari() throwing on React Native (fixes #7962) (#7963)
- ebc694a Comment changes for OSS (#7778)
- 2be12d7 [CI] update chrome install steps for Auth builds. (#7602)
- 2e7e548 Version Packages (#7069)
- c59f537 Improve decodeBase64() to throw on invalid input rather than silently accept ...
- 3d605f8 Version Packages (#7008)
- Additional commits viewable in compare view
Maintainer changesThis version was pushed to npm by google-wombot, a new releaser for @firebase/util since your current version.
Updates firebase-admin from 5.13.1 to 12.1.0
Release notesSourced from firebase-admin's releases.
... (truncated)
Commits- 67151e6 [chore] Release 12.1.0 (#2532)
- ba20755 Fix minor typo (#2533)
- 19c74dc chore: Excluding certain event_types from processing uid (#2370)
- a833f4e feat(rc): Add server side Remote Config support (#2529)
- a00de0c build(deps-dev): bump gulp from 4.0.2 to 5.0.0 (#2526)
- 25b2c68 build(deps-dev): bump @firebase/app-compat from 0.2.29 to 0.2.30 (#2527)
- fa59e2a build(deps): bump @google-cloud/firestore from 7.5.0 to 7.6.0 (#2528)
- 34f0ac2 build(deps): bump undici in /.github/actions/send-email (#2521)
- 837b69b build(deps-dev): bump @firebase/auth-types from 0.12.0 to 0.12.1 (#2514)
- e7ea83e build(deps-dev): bump mocha from 10.3.0 to 10.4.0 (#2513)
- Additional commits viewable in compare view
Maintainer changesThis version was pushed to npm by google-wombot, a new releaser for firebase-admin since your current version.
Updates @google-cloud/firestore from 0.15.4 to 7.7.0
Release notesSourced from @google-cloud/firestore's releases.
... (truncated)
ChangelogSourced from @google-cloud/firestore's changelog.
... (truncated)
Commits- 392ecf3 chore(main): release 7.7.0 (#2038)
- 0b9efa6 fix: Upgrade the google-gax dependency version. (#2040)
- 52099c8 fix: Nonblocking rollback (#2039)
- 2c726a1 feat: Lazy-started transactions (#2017)
- 5811492 docs: Allow 14 week backup retention for Firestore daily backups (#2031)
- 9da9fb0 chore(main): release 7.6.0 (#2033)
- e906b42 feat: Vector Search (#2006)
- d2d6bcb chore: run api-report for main (#2032)
- 1d751a8 chore(main): release 7.5.0 (#2030)
- 9a45ec8 feat: Query Profile (#2014)
- Additional commits viewable in compare view
Maintainer changesThis version was pushed to npm by google-wombot, a new releaser for @google-cloud/firestore since your current version.
Updates express from 4.16.3 to 4.19.2
Release notesSourced from express's releases.
... (truncated)
ChangelogSourced from express's changelog.
... (truncated)
Commits- 04bc627 4.19.2
- da4d763 Improved fix for open redirect allow list bypass
- 4f0f6cc 4.19.1
- a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
- a1fa90f fixed un-edited version in history.md for 4.19.0
- 11f2b1d build: fix build due to inconsistent supertest behavior in older versions
- 084e365 4.19.0
- 0867302 Prevent open redirect allow list bypass due to encodeurl
- 567c9c6 Add note on how to update docs for new release (#5541)
- 69a4cf2 deps: cookie@0.6.0
- Additional commits viewable in compare view
Maintainer changesThis version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates jsonwebtoken from 7.4.3 to 9.0.2
ChangelogSourced from jsonwebtoken's changelog.
... (truncated)
Commits- bc28861 Release 9.0.2 (#935)
- 96b8906 refactor: use specific lodash packages (#933)
- ed35062 security: Updating semver to 7.5.4 to resolve CVE-2022-25883 (#932)
- 84539b2 Updating package version to 9.0.1 (#920)
- a99fd4b fix(stubs): allow decode method to be stubbed (#876)
- e1fa9dc Merge pull request from GHSA-8cf7-32gw-wr33
- 5eaedbf chore(ci): remove github test actions job (#861)
- cd4163e chore(ci): configure Github Actions jobs for Tests & Security Scanning (#856)
- ecdf6cc fix!: Prevent accidental use of insecure key sizes & misconfiguration of secr...
- 8345030 fix(sign&verify)!: Remove default none support from sign and verify met...
- Additional commits viewable in compare view
Maintainer changesThis version was pushed to npm by charlesrea, a new releaser for jsonwebtoken since your current version.
Updates firebase-functions from 0.9.0 to 5.0.1
Release notesSourced from firebase-functions's releases.
... (truncated)
Commits- 80c5a37 5.0.1
- 680849e Fix: get the app when fetching named firestore (#1562)
- 77c16ff [firebase-release] Removed change log and reset repo after 5.0.0 release
- f59cd1a 5.0.0
- e7c72f3 Add changelog entry for removing admin v10 dep (#1560)
- 29bf78f bump firebase-admin version (#1555)
- 909215f bumping ts version (#1552)
- 6beaaeb Add option to get named firestore instance for v2 firestore functions (#1550)
- c89994f [firebase-release] Removed change log and reset repo after 4.9.0 release
- 482529a 4.9.0
- Additional commits viewable in compare view
Maintainer changesThis version was pushed to npm by google-wombot, a new releaser for firebase-functions since your current version.
Updates node-forge from 0.7.4 to 1.3.1
ChangelogSourced from node-forge's changelog.
... (truncated)
CommitsUpdates qs from 6.5.1 to 6.11.0
ChangelogSourced from qs's changelog.