Skip to content

Bump the production-dependencies group across 1 directory with 2 updates - #179

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/functions/production-dependencies-21887282a1
Open

Bump the production-dependencies group across 1 directory with 2 updates#179
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/functions/production-dependencies-21887282a1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 2 updates in the /functions directory: firebase-admin and firebase-functions.

Updates firebase-admin from 13.8.0 to 13.10.0

Release notes

Sourced from firebase-admin's releases.

Firebase Admin Node.js SDK v13.10.0

New Features

  • feat(appcheck): Add support for minting limited-use tokens and custom JTI (#3027)

Bug Fixes

  • fix: Replace node-forge with native crypto for private key validation (#3051)

Miscellaneous

  • [chore] Release 13.10.0 (#3146)
  • add node prefix to crypto imports (#3144)
  • chore: remove uuid dependency (#3130)
  • build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 (#3134)
  • build(deps): bump protobufjs from 7.5.5 to 7.5.8 (#3141)
  • build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#3135)

Firebase Admin Node.js SDK v13.9.0

New Features

  • feat(remote-config): add optional exposurePercent field to ExperimentValue (#3096)

Miscellaneous

  • [chore] Release 13.9.0 (#3129)
  • chore: Deprecate support for Node.js 20 (#3128)
  • build(deps-dev): bump @​typescript-eslint/parser from 8.57.2 to 8.59.1 (#3114)
  • build(deps): bump follow-redirects in /.github/actions/send-email (#3113)
  • build(deps): bump protobufjs from 7.5.4 to 7.5.5 (#3119)
  • build(deps): bump uuid and @​actions/core in /.github/actions/send-email (#3120)
  • build(deps): bump axios in /.github/actions/send-email (#3123)
  • build(deps): bump fast-xml-parser from 5.5.9 to 5.7.1 (#3122)
Commits
  • e0a2177 [chore] Release 13.10.0 (#3146)
  • 67d6d82 add node prefix to crypto imports (#3144)
  • 2c8d215 chore: remove uuid dependency (#3130)
  • da2141a build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 (#3134)
  • fcedf6b feat(appcheck): Add support for minting limited-use tokens and custom JTI (#3...
  • 48d5212 build(deps): bump protobufjs from 7.5.5 to 7.5.8 (#3141)
  • 16e6c33 fix: Replace node-forge with native crypto for private key validation (#3051)
  • 6c81c7e build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#3135)
  • 0efb21f [chore] Release 13.9.0 (#3129)
  • 363a302 chore: Deprecate support for Node.js 20 (#3128)
  • Additional commits viewable in compare view

Updates firebase-functions from 7.2.5 to 7.3.2

Release notes

Sourced from firebase-functions's releases.

v7.3.2

  • chore: update dependencies to close CVEs (#1936)
  • Fix an issue with npm labeling in the deployment pipeline. (#1937)
  • chore: improve release script (#1932)

v7.3.2-rc.1

  • chore: update dependencies to close CVEs (#1936)
  • Fix an issue with npm labeling in the deployment pipeline. (#1937)
  • chore: improve release script (#1932)

v7.3.2-rc.0

  • Internal maintenance updates and chore improvements.

v7.3.1-rc.0

  • Internal maintenance updates and chore improvements.

v7.3.0

  • Bringing in lifecycle triggers into docgen. (#1931)
  • fix: Remove false warning when using Expression in cors option (#1802)
  • feat: Add requiresRole developer API for declarative security support and automatic Manifest extraction (#1908)
  • Validate literal timeoutSeconds values per v2 trigger type (0-540s for events, 0-3600s for HTTPS/callable, 0-1800s for task queues, 0-7s for identity functions) so misconfigured values fail at function-definition or manifest-extraction time instead of at deploy time. (#1877)
  • feat: Add requiresAPI function to allow declaring Google Cloud API dependencies in code. (#1900)
  • fix(v1): Call onInit for schedule.onRun functions (#1801)
  • feat: Add support to declare lifecycle hooks in functions. (#1915)
  • fix(cors): Fix issue using Params to set CORS allowed hosts (#1903)
  • fix(v2): Fix event data unpacking for auth event triggers (#1923)
  • feat: Add "v2/lifecycle" and "lifecycle" import paths for lifecycle hooks (#1926)
  • chore: revamp deploy pipeline to be stateless. Changes must now include relnotes (#1929)
  • chore: move the last encrypted keys into Google Cloud Secrets Manager (#1929)
Commits
  • 565db02 fix: rename task timeout kind and also apply it to scheduler (#1934)
  • d2315bb chore(deps): resolve pipeline deprecations and upgrade dependencies (#1936)
  • 17ebe7c feat: default npm distribution tag to next for prereleases (#1937)
  • c2cd3f7 fix: dynamically increment prerelease versions in publish.sh (#1932)
  • ce42106 Adding lifecycle events in docgen (#1931)
  • 923b3a9 fix: resolve BASH_REMATCH overwriting in changelog.sh (#1930)
  • 642d901 fix: resolve Cloud Build invalid argument errors for substitutions (#1929)
  • 58aadd2 Revamp deploy pipeline to be stateless (#1925)
  • 66a9235 chore: suppress new auth triggers and internal pubsub types from docgen (#1927)
  • 85fdeb0 Add "v2/lifecycle" import path (#1926)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 2 updates in the /functions directory: [firebase-admin](https://github.com/firebase/firebase-admin-node) and [firebase-functions](https://github.com/firebase/firebase-functions).


Updates `firebase-admin` from 13.8.0 to 13.10.0
- [Release notes](https://github.com/firebase/firebase-admin-node/releases)
- [Changelog](https://github.com/firebase/firebase-admin-node/blob/main/CHANGELOG.md)
- [Commits](firebase/firebase-admin-node@v13.8.0...v13.10.0)

Updates `firebase-functions` from 7.2.5 to 7.3.2
- [Release notes](https://github.com/firebase/firebase-functions/releases)
- [Commits](firebase/firebase-functions@v7.2.5...v7.3.2)

---
updated-dependencies:
- dependency-name: firebase-admin
  dependency-version: 13.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: firebase-functions
  dependency-version: 7.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 3, 2026
@vercel

vercel Bot commented Sep 3, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
pet-note Ready Ready Preview Sep 3, 2026 7:25am UTC

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants