search

aporia-ai / mlnotify

🔔 No need to keep checking your training - just one import line and you'll know the second it's done.
https://mlnotify.aporia.com
MIT License
344 stars 19 forks source link

[Snyk] Upgrade firebase-admin from 9.11.0 to 10.2.0 #62

Open camparibot opened 2 years ago

camparibot commented 2 years ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade firebase-admin from 9.11.0 to 10.2.0.

![merge advice](https://app.snyk.io/badges/merge-advice/?package_manager=npm&package_name=firebase-admin&from_version=9.11.0&to_version=10.2.0&pr_id=9bf78c70-bd98-4245-9512-456e4271a144&visibility=true&has_feature_flag=false) As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.
:sparkles: Snyk has automatically assigned this pull request, [set who gets assigned](https://app.snyk.io/org/aporia/project/e325e2e0-2f76-484e-9926-f5229e0dd505/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr/settings/integration). :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
*Warning:* This is a major version upgrade, and may be a breaking change. - The recommended version is **9 versions** ahead of your current version. - The recommended version was released **23 days ago**, on 2022-05-05. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:------------------------- | Prototype Pollution
[SNYK-JS-PROTOBUFJS-2441248](https://snyk.io/vuln/SNYK-JS-PROTOBUFJS-2441248) | **589/1000**
**Why?** Proof of Concept exploit, Recently disclosed, CVSS 8.2 | Proof of Concept | Improper Verification of Cryptographic Signature
[SNYK-JS-NODEFORGE-2430339](https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430339) | **589/1000**
**Why?** Proof of Concept exploit, Recently disclosed, CVSS 8.2 | No Known Exploit | Improper Verification of Cryptographic Signature
[SNYK-JS-NODEFORGE-2430341](https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430341) | **589/1000**
**Why?** Proof of Concept exploit, Recently disclosed, CVSS 8.2 | No Known Exploit | Improper Verification of Cryptographic Signature
[SNYK-JS-NODEFORGE-2430337](https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430337) | **589/1000**
**Why?** Proof of Concept exploit, Recently disclosed, CVSS 8.2 | No Known Exploit | Prototype Pollution
[SNYK-JS-NODEFORGE-2331908](https://snyk.io/vuln/SNYK-JS-NODEFORGE-2331908) | **589/1000**
**Why?** Proof of Concept exploit, Recently disclosed, CVSS 8.2 | No Known Exploit | Open Redirect
[SNYK-JS-NODEFORGE-2330875](https://snyk.io/vuln/SNYK-JS-NODEFORGE-2330875) | **589/1000**
**Why?** Proof of Concept exploit, Recently disclosed, CVSS 8.2 | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: firebase-admin
  • 10.2.0 - 2022-05-05

    New Features

    • feat: Add Task Queue API (#1674)
    • feat(auth): Support generate oob code request type VERIFY_AND_CHANGE_EMAIL (#1633)

    Miscellaneous

    • [chore] Release 10.2.0 (#1688)
    • Fix markdown lists in reference docs (#1687)
    • Added support for calling Eventarc emulator (#1686)
    • build(deps-dev): bump @ typescript-eslint/eslint-plugin (#1682)
    • Implemented eventarc event publishing API (#1617) (#1644)
    • build(deps-dev): bump mocha from 9.2.2 to 10.0.0 (#1681)
    • build(deps-dev): bump @ firebase/app-compat from 0.1.22 to 0.1.23 (#1680)
    • build(deps): bump @ google-cloud/storage from 5.19.3 to 5.19.4 (#1679)
    • build(deps): bump @ types/node from 17.0.27 to 17.0.31 (#1678)
    • build(deps-dev): bump @ typescript-eslint/parser from 5.21.0 to 5.22.0 (#1677)
    • chore: Update App Check to V1 endpoints (#1632)
    • Revert "feat(auth): Support sms region config change on Tenant and Project level." (#1676)
    • build(deps): bump jwks-rsa from 2.0.5 to 2.1.0 (#1671)
    • build(deps-dev): bump @ types/chai from 4.3.0 to 4.3.1 (#1670)
    • build(deps-dev): bump @ typescript-eslint/eslint-plugin (#1669)
    • build(deps-dev): bump @ types/lodash from 4.14.181 to 4.14.182 (#1672)
    • build(deps-dev): bump @ types/mocha from 9.1.0 to 9.1.1 (#1668)
    • build(deps-dev): bump @ typescript-eslint/parser from 5.19.0 to 5.21.0 (#1667)
    • build(deps): bump @ google-cloud/storage from 5.19.2 to 5.19.3 (#1665)
    • build(deps-dev): bump eslint from 8.13.0 to 8.14.0 (#1664)
    • build(deps-dev): bump @ microsoft/api-extractor from 7.21.3 to 7.23.0 (#1663)
    • build(deps): bump @ types/node from 17.0.25 to 17.0.27 (#1662)
    • build(deps-dev): bump @ firebase/auth-compat from 0.2.11 to 0.2.12 (#1661)
    • chore: Update database-compat and database-types (#1660)
  • 10.1.0 - 2022-04-21
    Read more
  • 10.0.2 - 2022-01-21
    Read more
  • 10.0.1 - 2021-12-15

    Bug Fixes

    • fix(firestore): Expose more types from gcp firestore
    • fix(auth): Add user disabled error code. (#1506)
    • fix(auth): Remove request body for deleteTenant (#1461)

    Miscellaneous

    • [chore] Release 10.0.1 (#1520)
    • Add new Firestore types exposed from the admin firestore module (#1519)
    • Update base-auth.ts (#1501)
    • Update multi-tenancy integration tests to run against auth emulator (#1453)
    • build(deps-dev): bump mocha from 8.4.0 to 9.1.2 (#1440)
    • build(deps): bump @ types/node from 16.10.2 to 16.11.0 (#1464)
    • build(deps-dev): bump @ types/mocha from 8.2.2 to 9.0.0 (#1397)
  • 10.0.0 - 2021-10-14

    Breaking Changes

    • change: Dropped support for Node.js 10. Developers should use Node.js 12 or up when deploying the Admin SDK (#1445).

    New Features

    • Admin SDK now offers a series of ES module entry points (e.g. firebase-admin/app, firebase-admin/auth etc)
    • New module entry points can be used in native ESM runtimes.
    • Developers are recommended to use the new entry points, and migrate out of the namespaced API.

    Bug Fixes

    • fix: Using Node 12 for nightly builds (#1460)

    Miscellaneous

    • [chore] Release 10.0.0 (#1462)
    • chore: Enabled tsdoc error checking (#1459)
    • Revert "Remove request body for deleteTenant (#1452)" (#1456)
    • Remove request body for deleteTenant (#1452)
  • 9.100.0-alpha.1 - 2021-06-25
  • 9.100.0-alpha.0 - 2021-04-12
  • 9.12.0 - 2021-09-28

    New Features

    • feat(rc): Add Remote Config Parameter Value Type Support (#1424)

    Bug Fixes

    • fix(fac): Verify Token: Change the jwks cache duration from 1 day to 6 hours (#1439)
    • fix(rtdb): Changed admin.database to use database-compat package (#1437)

    Miscellaneous

    • [chore] Release 9.12.0 (#1442)
    • Pin @ types/jsonwebtoken to 8.5.1 (#1438)
    • build(deps): bump tar from 6.1.3 to 6.1.11 (#1430)
    • build(deps-dev): bump @ types/lodash from 4.14.171 to 4.14.173 (#1435)
    • build(deps-dev): bump @ microsoft/api-extractor from 7.18.4 to 7.18.7 (#1423)
    • fix typo (#1420)
  • 9.11.1 - 2021-08-19
    Read more
  • 9.11.0 - 2021-07-15
    Read more
from firebase-admin GitHub release notes
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/aporia/project/e325e2e0-2f76-484e-9926-f5229e0dd505?utm_source=github&utm_medium=referral&page=upgrade-pr) 👩‍💻 [Set who automatically gets assigned](https://app.snyk.io/org/aporia/project/e325e2e0-2f76-484e-9926-f5229e0dd505/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr/) 🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/aporia/project/e325e2e0-2f76-484e-9926-f5229e0dd505/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr) 🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/aporia/project/e325e2e0-2f76-484e-9926-f5229e0dd505/settings/integration?pkg=firebase-admin&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)