Skip to content

[Snyk] Upgrade firebase from 10.12.2 to 10.12.3 #27

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Merged
merged 2 commits into from
Aug 2, 2024

Conversation

ciscoviit
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade firebase from 10.12.2 to 10.12.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 11 versions ahead of your current version.

  • The recommended version was released on 22 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Uncontrolled Resource Consumption
SNYK-JS-GRPCGRPCJS-7242922
345 No Known Exploit
Release notes
Package name: firebase
  • 10.12.3 - 2024-07-03

    For more detailed release notes, see Firebase JavaScript SDK Release Notes.

    What's Changed

    @ firebase/analytics@0.10.5

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8
    • @ firebase/installations@0.6.8

    @ firebase/analytics-compat@0.2.11

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/analytics@0.10.5
    • @ firebase/component@0.6.8

    @ firebase/app@0.10.6

    Patch Changes

    • ed1c99379 #8335 - Guard the use of FinalizationRegistry in FirebaseServerApp initialization based on the availability of FinalizationRegistry in the runtime.

    • 192561b15 #8315 (fixes #8299) - fix: server app should initialize in web workers

    • f01806221 #8341 - The FirebaseServerAppSettings.name field inherited from FirebaseAppSettings is now omitted
      instead of overloading the value as undefined. This fixes a TypeScript compilation error. For more
      information, see GitHub Issue #8336.

    • Updated dependencies [192561b15]:

    • @ firebase/util@1.9.7

    • @ firebase/component@0.6.8

    @ firebase/app-check@0.8.5

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8

    @ firebase/app-check-compat@0.3.12

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/app-check@0.8.5
    • @ firebase/component@0.6.8

    @ firebase/app-compat@0.2.36

    Patch Changes

    @ firebase/auth@1.7.5

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8

    @ firebase/auth-compat@0.5.10

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/auth@1.7.5
    • @ firebase/component@0.6.8

    @ firebase/component@0.6.8

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7

    @ firebase/database@1.0.6

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8

    @ firebase/database-compat@1.0.6

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8
    • @ firebase/database@1.0.6
    • @ firebase/database-types@1.0.4

    @ firebase/database-types@1.0.4

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7

    firebase@10.12.3

    Patch Changes

    • ed1c99379 #8335 - Guard the use of FinalizationRegistry in FirebaseServerApp initialization based on the availability of FinalizationRegistry in the runtime.

    • ecadbe380 #8339 (fixes #8314) - Fix persistence multi-tab snapshot listener metadata sync issue.

    • f01806221 #8341 - The FirebaseServerAppSettings.name field inherited from FirebaseAppSettings is now omitted
      instead of overloading the value as undefined. This fixes a TypeScript compilation error. For more
      information, see GitHub Issue #8336.

    • Updated dependencies [192561b15, ed1c99379, 192561b15, ecadbe380, e7260e23d, f01806221]:

    • @ firebase/util@1.9.7

    • @ firebase/app@0.10.6

    • @ firebase/firestore@4.6.4

    • @ firebase/vertexai-preview@0.0.3

    • @ firebase/analytics@0.10.5

    • @ firebase/analytics-compat@0.2.11

    • @ firebase/app-check@0.8.5

    • @ firebase/app-check-compat@0.3.12

    • @ firebase/app-compat@0.2.36

    • @ firebase/auth@1.7.5

    • @ firebase/auth-compat@0.5.10

    • @ firebase/database@1.0.6

    • @ firebase/database-compat@1.0.6

    • @ firebase/firestore-compat@0.3.33

    • @ firebase/functions@0.11.6

    • @ firebase/functions-compat@0.3.12

    • @ firebase/installations@0.6.8

    • @ firebase/installations-compat@0.2.8

    • @ firebase/messaging@0.12.10

    • @ firebase/messaging-compat@0.2.10

    • @ firebase/performance@0.6.8

    • @ firebase/performance-compat@0.2.8

    • @ firebase/remote-config@0.4.8

    • @ firebase/remote-config-compat@0.2.8

    • @ firebase/storage@0.12.6

    • @ firebase/storage-compat@0.3.9

    @ firebase/firestore@4.6.4

    Patch Changes

    • ecadbe380 #8339 (fixes #8314) - Fix persistence multi-tab snapshot listener metadata sync issue.

    • Updated dependencies [192561b15, b09a267ba]:

    • @ firebase/util@1.9.7

    • @ firebase/webchannel-wrapper@1.0.1

    • @ firebase/component@0.6.8

    @ firebase/firestore-compat@0.3.33

    Patch Changes

    • Updated dependencies [192561b15, ecadbe380]:
    • @ firebase/util@1.9.7
    • @ firebase/firestore@4.6.4
    • @ firebase/component@0.6.8

    @ firebase/functions@0.11.6

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8

    @ firebase/functions-compat@0.3.12

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8
    • @ firebase/functions@0.11.6

    @ firebase/installations@0.6.8

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8

    @ firebase/installations-compat@0.2.8

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8
    • @ firebase/installations@0.6.8

    @ firebase/messaging@0.12.10

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8
    • @ firebase/installations@0.6.8

    @ firebase/messaging-compat@0.2.10

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8
    • @ firebase/messaging@0.12.10

    @ firebase/performance@0.6.8

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8
    • @ firebase/installations@0.6.8

    @ firebase/performance-compat@0.2.8

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8
    • @ firebase/performance@0.6.8

    @ firebase/remote-config@0.4.8

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8
    • @ firebase/installations@0.6.8

    @ firebase/remote-config-compat@0.2.8

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8
    • @ firebase/remote-config@0.4.8

    @ firebase/storage@0.12.6

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8

    @ firebase/storage-compat@0.3.9

    Patch Changes

    • Updated dependencies [192561b15]:
    • @ firebase/util@1.9.7
    • @ firebase/component@0.6.8
    • @ firebase/storage@0.12.6

    @ firebase/util@1.9.7

    Patch Changes

    @ firebase/vertexai-preview@0.0.3

    Patch Changes

    • e7260e23d #8240 - Add a publicly exported VertexAIError class.

    • Updated dependencies [192561b15]:

    • @ firebase/util@1.9.7

    • @ firebase/component@0.6.8

    @ firebase/webchannel-wrapper@1.0.1

    Patch Changes

    • b09a267ba #8331 - fix: Fix a typo in the webchannel-wrapper's package.json that affected ems5 exports.
  • 10.12.3-canary.fd8bd4b02 - 2024-07-16
  • 10.12.3-canary.f58d48cd4 - 2024-07-16
  • 10.12.3-canary.d752e8096 - 2024-07-10
  • 10.12.3-canary.84fe88079 - 2024-07-10
  • 10.12.3-canary.52f8deb1d - 2024-07-03
  • 10.12.3-canary.4b4db85ff - 2024-07-15
  • 10.12.3-canary.1b9d95e5a - 2024-07-19
  • 10.12.3-canary.025f2a103 - 2024-07-18
  • 10.12.3-20240703135951 - 2024-07-03
  • 10.12.3-20240702143745 - 2024-07-02
  • 10.12.2 - 2024-05-27
from firebase GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade firebase from 10.12.2 to 10.12.3.

See this package in npm:
firebase

See this project in Snyk:
https://app.snyk.io/org/ciscoviit/project/256002a9-6444-4774-a958-7fd72b6c4187?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link
Contributor

github-actions bot commented Jul 25, 2024

Visit the preview URL for this PR (updated for commit e7898f1):

https://netacad-7098b--pr27-snyk-upgrade-712edcf-m37zewqs.web.app

(expires Sat, 03 Aug 2024 04:41:30 GMT)

🔥 via Firebase Hosting GitHub Action 🌎

Sign: 858e1f6c04c8345e4fdef35d708bc96d8a86e675

@ciscoviit ciscoviit merged commit f14b0ac into main Aug 2, 2024
6 checks passed
@ciscoviit ciscoviit deleted the snyk-upgrade-712edcfdcb03820b4cb5714dee5a4128 branch August 2, 2024 09:23
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
2 participants