Christina Holland and GitHub
18d46d06dd
chore(deps): Upgrade more dependencies ( #10193 )
2026-07-28 11:33:52 -07:00
cfed3b8781
build(deps): bump linkify-it from 5.0.0 to 5.0.2 ( #10194 )
...
Bumps [linkify-it](https://github.com/markdown-it/linkify-it ) from 5.0.0 to 5.0.2.
- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md )
- [Commits](https://github.com/markdown-it/linkify-it/compare/5.0.0...5.0.2 )
---
updated-dependencies:
- dependency-name: linkify-it
dependency-version: 5.0.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-22 12:50:54 -07:00
1ac79883c8
build(deps): bump fast-uri from 3.0.6 to 3.1.4 ( #10195 )
...
Bumps [fast-uri](https://github.com/fastify/fast-uri ) from 3.0.6 to 3.1.4.
- [Release notes](https://github.com/fastify/fast-uri/releases )
- [Commits](https://github.com/fastify/fast-uri/compare/v3.0.6...v3.1.4 )
---
updated-dependencies:
- dependency-name: fast-uri
dependency-version: 3.1.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-22 12:50:23 -07:00
0003ae2a25
build(deps-dev): bump protobufjs from 7.5.6 to 7.6.5 ( #10187 )
...
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js ) from 7.5.6 to 7.6.5.
- [Release notes](https://github.com/protobufjs/protobuf.js/releases )
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.5/CHANGELOG.md )
- [Commits](https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.6...protobufjs-v7.6.5 )
---
updated-dependencies:
- dependency-name: protobufjs
dependency-version: 7.6.5
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-21 11:49:07 -07:00
78188d0176
build(deps): bump js-yaml from 4.1.1 to 4.3.0 ( #10185 )
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) from 4.1.1 to 4.3.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 4.3.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-21 10:55:46 -07:00
67d2f63b47
chore(deps): update dependency @grpc/grpc-js to v1.9.16 [security] ( #10157 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-21 10:54:40 -07:00
8b58b4ee38
build(deps): bump websocket-driver from 0.7.4 to 0.7.5 ( #10173 )
...
Bumps [websocket-driver](https://github.com/faye/websocket-driver-node ) from 0.7.4 to 0.7.5.
- [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md )
- [Commits](https://github.com/faye/websocket-driver-node/compare/0.7.4...0.7.5 )
---
updated-dependencies:
- dependency-name: websocket-driver
dependency-version: 0.7.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-21 10:54:10 -07:00
5aa25e812a
build(deps): bump tmp from 0.2.6 to 0.2.7 in /repo-scripts/size-analysis ( #10188 )
...
* build(deps): bump tmp from 0.2.6 to 0.2.7 in /repo-scripts/size-analysis
Bumps [tmp](https://github.com/raszi/node-tmp ) from 0.2.6 to 0.2.7.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.6...v0.2.7 )
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.7
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-07-21 10:53:00 -07:00
9143588657
chore(deps): update dependency @babel/core to v7.29.6 [security] ( #10162 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-20 16:05:43 -07:00
f8396287d7
fix(deps): update dependency tmp to v0.2.6 [security] ( #10159 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-20 16:00:05 -07:00
Christina Holland and GitHub
f3de0bc9fe
chore(deps): remove mz dependency and replace with Node native fs/promises ( #10175 )
2026-07-20 14:06:24 -07:00
Christina Holland and GitHub
165df7a1f2
chore(deps): Remove "request" dependency ( #10174 )
2026-07-20 11:11:26 -07:00
macastelaz and GitHub
9825de58e8
Fix ReDoS vulnerability in FirebaseError template replacement ( #10146 )
...
* Fix ReDoS vulnerability in FirebaseError template replacement
* chore: add changeset and fix FirebaseError template replacing bug
* chore(auth): update chromedriver to ^150.0.0 to match environment
* ci: skip chromedriver download in firefox and webkit jobs
* style: format packages/util/src/errors.ts
* fix(auth): fix typescript mismatch for `User` type in webdriver tests
* chore(auth): configure custom emulator ports to avoid CI conflicts
* test: add unit test for FirebaseError template replace fallback
* Fix formatting and clean up yarn.lock conflict resolution
* build: workaround glob-stream singular glob Node 22 bug in firestore integration tests
* style: fix prettier formatting for firestore
* chore: address PR feedback (revert formatting & workaround, isolate auth config)
* chore: restore firestore formatting to satisfy prettier and update changeset
2026-07-17 13:55:07 -05:00
8286fde4c9
build(deps): bump shell-quote from 1.8.2 to 1.8.4 ( #10047 )
...
* build(deps): bump shell-quote from 1.8.2 to 1.8.4
Bumps [shell-quote](https://github.com/ljharb/shell-quote ) from 1.8.2 to 1.8.4.
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ljharb/shell-quote/compare/v1.8.2...v1.8.4 )
---
updated-dependencies:
- dependency-name: shell-quote
dependency-version: 1.8.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected] [email protected]
2026-07-13 11:31:48 -07:00
Christina Holland and GitHub
343eb17424
chore(deps): Upgrade rollup and gulp ( #10136 )
2026-07-13 11:11:10 -07:00
13d866cb05
build(deps): bump undici from 6.26.0 to 6.27.0 ( #10129 )
...
Bumps [undici](https://github.com/nodejs/undici ) from 6.26.0 to 6.27.0.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v6.26.0...v6.27.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 6.27.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-13 10:24:00 -07:00
78ab102683
Update re2js version ( #10104 )
...
* Update re2js
* Update re2js, add changeset
* chore(changeset): use @firebase/firestore patch bump per review comment (#10104 )
---------
Co-authored-by: wu-hui <[email protected]
2026-07-09 13:56:09 -04:00
Christina Holland and GitHub
3180c9a700
build(deps): update deps with security issues (pass 1) ( #10119 )
2026-07-01 12:30:03 -07:00
DellaBitta and GitHub
71b94c4e87
build(deps): Upgrade Lerna to 9.0.6 ( #10032 )
...
### Discussion
Upgrade `lerna` from `4.x` to `9.x`. This newer version of `lerna` is powered by `NX`, which also requires a newer minor version bump of `node` in our workflows, and slight changes our test execution parms.
The new version of Lerna is said to improve performance, and that seems to have exacerbated race conditions in the Auth test suites (@firebase/auth and @firebase/auth-compat). To resolve intermittent CI failures caused by these race conditions, I've configured these tests to run in serial instead of concurrently.
Also I needed to bump the node version of our workflows by 2 minor versions (20.10.0 -> 2.12.0) because Lerna 9.0.6 isn't supported in Node 20.10.0.
### Testing
- Clean repo, clean cache, clean dependency installs.
- CI, local builds and tests.
Note: The Firestore WebKit failure in the optional CI execution list is a known issue (b/524995481).
### API Changes
None.
2026-06-30 20:27:27 -04:00
Thomas Bouldin and GitHub
7362bfc0c0
Security Audit & Remediation: repo-scripts/api-documenter ( #10112 )
...
* security-audit(api-documenter): purge abandonware colors and resolve dependencies
* security-audit(api-documenter): address review comments and update yarn.lock
2026-06-30 10:04:39 -07:00
wu-hui and GitHub
4703c99e12
merge off pipeline into main ( #9929 )
...
* chore(ci): make all firestore integration tests optional
* fix: align expressions and pipelines, address review comments, update yarn.lock, and fix package versions
* chore: update yarn.lock after merge
* fix: restore firestore package version and devDependencies to 4.15.0
2026-06-05 10:28:06 -04:00
Christina Holland and GitHub
b0588826a8
chore: Add explicit types to tsconfig ( #10015 )
2026-06-01 09:23:40 -07:00
16170e4fa4
build(deps-dev): bump protobufjs-cli from 1.1.3 to 1.2.1 ( #9955 )
...
Bumps [protobufjs-cli](https://github.com/protobufjs/protobuf.js ) from 1.1.3 to 1.2.1.
- [Release notes](https://github.com/protobufjs/protobuf.js/releases )
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/protobufjs/protobuf.js/compare/protobufjs-cli-v1.1.3...protobufjs-cli-v1.2.1 )
---
updated-dependencies:
- dependency-name: protobufjs-cli
dependency-version: 1.2.1
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <[email protected]
2026-05-18 14:29:20 -04:00
2338b5a4d7
build(deps): bump protobufjs from 7.5.5 to 7.5.8 ( #9973 )
...
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js ) from 7.5.5 to 7.5.8.
- [Release notes](https://github.com/protobufjs/protobuf.js/releases )
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.5.8/CHANGELOG.md )
- [Commits](https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.5.5...protobufjs-v7.5.8 )
---
updated-dependencies:
- dependency-name: protobufjs
dependency-version: 7.5.8
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-05-18 11:00:09 -04:00
c35695070f
build(deps): bump axios from 1.13.5 to 1.15.2 ( #9860 )
...
Bumps [axios](https://github.com/axios/axios ) from 1.13.5 to 1.15.2.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.13.5...v1.15.2 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.15.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-05-04 09:28:14 -07:00
fe4118e124
chore: Update picomatch and rollup-plugin-typescript2 ( #9892 )
...
* build(deps): bump picomatch from 2.3.1 to 2.3.2
Bumps [picomatch](https://github.com/micromatch/picomatch ) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2 )
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected]
2026-04-29 13:05:59 -07:00
Christina Holland and GitHub
758afc0797
chore: Upgrade webpack to 5.104.1 ( #9891 )
2026-04-27 12:08:23 -07:00
cc51bbef1e
build(deps-dev): bump simple-git from 3.27.0 to 3.32.3 ( #9710 )
...
Bumps [simple-git](https://github.com/steveukx/git-js/tree/HEAD/simple-git ) from 3.27.0 to 3.32.3.
- [Release notes](https://github.com/steveukx/git-js/releases )
- [Changelog](https://github.com/steveukx/git-js/blob/main/simple-git/CHANGELOG.md )
- [Commits](https://github.com/steveukx/git-js/commits/[email protected] /simple-git )
---
updated-dependencies:
- dependency-name: simple-git
dependency-version: 3.32.3
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-24 15:04:13 -07:00
10fccaa9cc
chore: Combine a group of dependabot security updates ( #9883 )
...
* Bump decode-uri-component in /packages/auth-compat/demo
Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component ) from 0.2.0 to 0.2.2.
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases )
- [Commits](https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2 )
---
updated-dependencies:
- dependency-name: decode-uri-component
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/jonschlinkert/word-wrap ) from 1.2.3 to 1.2.5.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases )
- [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.5 )
---
updated-dependencies:
- dependency-name: word-wrap
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/grpc/grpc-node ) from 1.8.21 to 1.8.22.
- [Release notes](https://github.com/grpc/grpc-node/releases )
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/[email protected] ...@grpc/[email protected] )
---
updated-dependencies:
- dependency-name: "@grpc/grpc-js"
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/micromatch/micromatch ) from 4.0.4 to 4.0.8.
- [Release notes](https://github.com/micromatch/micromatch/releases )
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/micromatch/compare/4.0.4...4.0.8 )
---
updated-dependencies:
- dependency-name: micromatch
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/expressjs/express ) from 4.17.1 to 4.21.0.
- [Release notes](https://github.com/expressjs/express/releases )
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md )
- [Commits](https://github.com/expressjs/express/compare/4.17.1...4.21.0 )
---
updated-dependencies:
- dependency-name: express
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/webpack/webpack-dev-server ) from 5.2.0 to 5.2.1.
- [Release notes](https://github.com/webpack/webpack-dev-server/releases )
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md )
- [Commits](https://github.com/webpack/webpack-dev-server/compare/v5.2.0...v5.2.1 )
---
updated-dependencies:
- dependency-name: webpack-dev-server
dependency-version: 5.2.1
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/raszi/node-tmp ) from 0.2.3 to 0.2.4.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.3...v0.2.4 )
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/crypto-browserify/sha.js ) from 2.4.11 to 2.4.12.
- [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crypto-browserify/sha.js/compare/v2.4.11...v2.4.12 )
---
updated-dependencies:
- dependency-name: sha.js
dependency-version: 2.4.12
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/raszi/node-tmp ) from 0.2.1 to 0.2.5.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.1...v0.2.5 )
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/mafintosh/tar-fs ) from 2.1.2 to 2.1.4.
- [Commits](https://github.com/mafintosh/tar-fs/compare/v2.1.2...v2.1.4 )
---
updated-dependencies:
- dependency-name: tar-fs
dependency-version: 2.1.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/raszi/node-tmp ) from 0.2.3 to 0.2.4.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.3...v0.2.4 )
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.4
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/nodeca/js-yaml ) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 4.1.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/nodeca/js-yaml ) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 4.1.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/micromatch/picomatch ) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2 )
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/handlebars-lang/handlebars.js ) from 4.7.7 to 4.7.9.
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases )
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md )
- [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.7...v4.7.9 )
---
updated-dependencies:
- dependency-name: handlebars
dependency-version: 4.7.9
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/eemeli/yaml ) from 1.10.2 to 1.10.3.
- [Release notes](https://github.com/eemeli/yaml/releases )
- [Commits](https://github.com/eemeli/yaml/compare/v1.10.2...v1.10.3 )
---
updated-dependencies:
- dependency-name: yaml
dependency-version: 1.10.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] https://github.com/patrickjuchli/basic-ftp ) from 5.2.0 to 5.2.2.
- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases )
- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/patrickjuchli/basic-ftp/compare/v5.2.0...v5.2.2 )
---
updated-dependencies:
- dependency-name: basic-ftp
dependency-version: 5.2.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] [email protected]
2026-04-23 11:57:15 -07:00
4966aecce1
build(deps-dev): bump lodash from 4.17.23 to 4.18.1 ( #9804 )
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.18.1
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-22 16:51:37 -07:00
cfa2088882
build(deps): bump pbkdf2 from 3.1.2 to 3.1.5 ( #9573 )
...
Bumps [pbkdf2](https://github.com/browserify/pbkdf2 ) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md )
- [Commits](https://github.com/browserify/pbkdf2/compare/v3.1.2...v3.1.5 )
---
updated-dependencies:
- dependency-name: pbkdf2
dependency-version: 3.1.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-22 16:20:04 -07:00
2881b7c8dd
build(deps): bump flatted from 3.3.2 to 3.4.2 ( #9738 )
...
Bumps [flatted](https://github.com/WebReflection/flatted ) from 3.3.2 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.2...v3.4.2 )
---
updated-dependencies:
- dependency-name: flatted
dependency-version: 3.4.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-22 16:18:30 -07:00
bb2859de25
build(deps-dev): bump playwright from 1.51.1 to 1.55.1 ( #9333 )
...
Bumps [playwright](https://github.com/microsoft/playwright ) from 1.51.1 to 1.55.1.
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.51.1...v1.55.1 )
---
updated-dependencies:
- dependency-name: playwright
dependency-version: 1.55.1
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-22 15:26:59 -07:00
370ec769eb
build(deps): bump follow-redirects from 1.15.9 to 1.16.0 ( #9844 )
...
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects ) from 1.15.9 to 1.16.0.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases )
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.9...v1.16.0 )
---
updated-dependencies:
- dependency-name: follow-redirects
dependency-version: 1.16.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-22 14:57:19 -07:00
9adb31a7fd
build(deps-dev): bump protobufjs from 7.4.0 to 7.5.5 ( #9859 )
...
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js ) from 7.4.0 to 7.5.5.
- [Release notes](https://github.com/protobufjs/protobuf.js/releases )
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/protobufjs/protobuf.js/compare/protobufjs-v7.4.0...protobufjs-v7.5.5 )
---
updated-dependencies:
- dependency-name: protobufjs
dependency-version: 7.5.5
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-21 14:42:26 -07:00
3f1d33b383
build(deps): bump handlebars from 4.7.8 to 4.7.9 ( #9778 )
...
Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js ) from 4.7.8 to 4.7.9.
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases )
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md )
- [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9 )
---
updated-dependencies:
- dependency-name: handlebars
dependency-version: 4.7.9
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-04-17 12:18:02 -07:00
macastelaz and GitHub
f16431be0c
Re-enable coverage reporting for firebase-js-sdk ( #9761 )
2026-04-01 14:49:58 -07:00
f19f14610e
fix(deps): update dependency tmp to v0.2.4 [security] ( #9619 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-23 10:30:31 -07:00
ea8c53a581
build(deps): bump basic-ftp from 5.0.5 to 5.2.0 ( #9598 )
...
Bumps [basic-ftp](https://github.com/patrickjuchli/basic-ftp ) from 5.0.5 to 5.2.0.
- [Release notes](https://github.com/patrickjuchli/basic-ftp/releases )
- [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/patrickjuchli/basic-ftp/compare/v5.0.5...v5.2.0 )
---
updated-dependencies:
- dependency-name: basic-ftp
dependency-version: 5.2.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-03-04 08:36:22 -08:00
9f669bd0d0
build(deps): bump axios from 1.7.9 to 1.13.5 ( #9574 )
...
Bumps [axios](https://github.com/axios/axios ) from 1.7.9 to 1.13.5.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.7.9...v1.13.5 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.13.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]
2026-03-04 08:19:26 -08:00
f422029f95
fix(deps): update dependency @rushstack/node-core-library to v5 ( #8816 )
...
* fix(deps): update dependency @rushstack/node-core-library to v5
* Fix method name
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Christina Holland <[email protected]
2026-02-20 10:19:47 -08:00
bfb968200e
fix(deps): update dependency @rollup/plugin-virtual to v3 ( #8771 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-19 11:46:31 -08:00
6777cf21cb
chore(deps): update dependency @rollup/plugin-strip to v3 ( #8745 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-19 11:45:35 -08:00
b5d544a649
build(deps-dev): bump lodash from 4.17.21 to 4.17.23 ( #9465 )
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.17.23
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <[email protected]
2026-02-18 10:20:14 -08:00
Daniel La Rocque and GitHub
96ef5fe2bd
chore: update browserslist DB version ( #9478 )
...
There's a warning that is being logged because this is over 6 months out
of date. Updating the version makes the log go away :)
See: https://github.com/browserslist/update-db?tab=readme-ov-file#readme
2026-02-03 13:42:41 -05:00
Mark Duckworth and GitHub
d096720646
feat/pipelines to main ( #9356 )
2026-01-07 19:05:34 -07:00
Mark Duckworth and GitHub
38783a4b23
chore(firestore): Update closure-net dependency to the latest release ( #9242 )
...
* Update closure-net dependency to the latest release (6f48f578d3e80fe7a85e530a5d95b9351433d135)
2025-09-16 15:07:28 -06:00
Daniel La Rocque and GitHub
8380989c70
Update BrowsersList DB ( #9188 )
2025-07-31 11:23:25 -04:00
Christina Holland and GitHub
0267edce9c
build!: update build targets to ES2020 ( #9101 )
2025-07-11 17:27:17 -07:00
Christina Holland and GitHub
0df221de40
[chore] Update some dependencies ( #8868 )
2025-03-28 17:43:22 -07:00
