[Snyk] Upgrade firebase-admin from 12.0.0 to 12.1.0

[IvanCastroDev]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade firebase-admin from 12.0.0 to 12.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.

• The recommended version was released on 2 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	519	Proof of Concept
	Open Redirect SNYK-JS-EXPRESS-6474509	519	No Known Exploit
	Server-Side Request Forgery (SSRF) SNYK-JS-IP-7148531	519	Proof of Concept
	Resource Exhaustion SNYK-JS-JOSE-6419224	519	No Known Exploit
	Information Exposure SNYK-JS-MONGODB-5871303	519	No Known Exploit
	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	519	Proof of Concept

Release notes

Package name: firebase-admin

• 12.1.0 - 2024-04-16
  

  New Features

  • feat(rc): Add server side Remote Config support (#2529)

  Miscellaneous

  • [chore] Release 12.1.0 (#2532)
  • Fix minor typo (#2533)
  • chore: Excluding certain event_types from processing uid (#2370)
  • build(deps-dev): bump gulp from 4.0.2 to 5.0.0 (#2526)
  • build(deps-dev): bump @ firebase/app-compat from 0.2.29 to 0.2.30 (#2527)
  • build(deps): bump @ google-cloud/firestore from 7.5.0 to 7.6.0 (#2528)
  • build(deps): bump undici in /.github/actions/send-email (#2521)
  • build(deps-dev): bump @ firebase/auth-types from 0.12.0 to 0.12.1 (#2514)
  • build(deps-dev): bump mocha from 10.3.0 to 10.4.0 (#2513)
  • build(deps): bump @ types/node from 20.11.30 to 20.12.2 (#2516)
  • build(deps): bump @ google-cloud/firestore from 7.4.0 to 7.5.0 (#2517)
  • build(deps-dev): bump @ firebase/app-compat from 0.2.28 to 0.2.29 (#2510)
  • build(deps): bump @ google-cloud/storage from 7.7.0 to 7.9.0 (#2509)
  • build(deps-dev): bump @ microsoft/api-extractor from 7.42.3 to 7.43.0 (#2511)
  • build(deps): bump @ types/node from 20.11.24 to 20.11.30 (#2508)
  • [chore] Fixed links to rtdb api docs (#2501)
  • issue 2467: add async to send each loop to prevent local validation from throwing in an unknown state (#2469)
  • build(deps): bump @ fastify/busboy from 2.1.0 to 2.1.1 (#2491)
  • build(deps): bump follow-redirects in /.github/actions/send-email (#2497)
  • build(deps): bump @ google-cloud/firestore from 7.3.0 to 7.4.0 (#2499)
  • build(deps): bump jose from 4.15.4 to 4.15.5 (#2489)
  • build(deps-dev): bump @ microsoft/api-extractor from 7.42.0 to 7.42.3 (#2485)
  • build(deps): bump @ types/node from 20.11.19 to 20.11.24 (#2484)
  • build(deps-dev): bump @ firebase/app-compat from 0.2.27 to 0.2.28 (#2483)
  • build(deps-dev): bump @ microsoft/api-extractor from 7.40.3 to 7.42.0 (#2480)
  • build(deps-dev): bump eslint from 8.56.0 to 8.57.0 (#2473)
  • build(deps-dev): bump nock from 13.5.3 to 13.5.4 (#2475)
  • build(deps-dev): bump @ microsoft/api-extractor from 7.40.1 to 7.40.3 (#2465)
  • build(deps-dev): bump nock from 13.5.1 to 13.5.3 (#2463)
  • build(deps): bump @ types/node from 20.11.17 to 20.11.19 (#2464)
  • build(deps): bump undici in /.github/actions/send-email (#2459)
  • build(deps): bump @ types/node from 20.11.5 to 20.11.17 (#2455)
  • build(deps-dev): bump mocha from 10.2.0 to 10.3.0 (#2454)
  • build(deps-dev): bump @ microsoft/api-extractor from 7.39.4 to 7.40.1 (#2452)
  • [chore] Update Github action workflows to fix node version and set-output deprecation warnings (#2431)
  • [chore] Bump mailgun.js to v10.1.0 (#2451)
  • build(deps): bump @ google-cloud/firestore from 7.1.0 to 7.3.0 (#2446)
  • build(deps-dev): bump @ types/uuid from 9.0.7 to 9.0.8 (#2445)
  • build(deps-dev): bump @ firebase/app-compat from 0.2.25 to 0.2.27 (#2443)
  • build(deps-dev): bump @ types/sinon from 17.0.2 to 17.0.3 (#2442)
  • [chore] Bump @ actions/core to ^1.10.1 to remove set-output warning and set action to use Node 20 (#2432)
  • build(deps-dev): bump ts-node from 10.9.1 to 10.9.2 (#2435)
  • build(deps-dev): bump @ firebase/api-documenter from 0.3.0 to 0.4.0 (#2433)
  • build(deps-dev): bump nock from 13.4.0 to 13.5.1 (#2434)
  • build(deps-dev): bump @ microsoft/api-extractor from 7.39.0 to 7.39.4 (#2436)
  • build(deps-dev): bump eslint from 8.55.0 to 8.56.0 (#2422)
  • build(deps-dev): bump chai from 4.3.10 to 4.4.1 (#2424)
  • build(deps): bump @ types/node from 20.10.6 to 20.11.5 (#2428)
  • build(deps-dev): bump @ microsoft/api-extractor from 7.38.4 to 7.39.0 (#2416)
  • build(deps): bump @ fastify/busboy from 1.2.1 to 2.1.0 (#2406)
  • build(deps): bump @ types/node from 20.10.3 to 20.10.6 (#2417)
  • chore: Update Firebase integration test project setup instructions. (#2395)
• 12.0.0 - 2023-12-07
  

  • Breaking change: Upgraded the @ google-cloud/firestore package to v7. This is a breaking change. Refer to the Cloud Firestore release notes for more details.

  • Breaking change: Upgraded the @ google-cloud/storage package to v7. This is a breaking change. Refer to the Cloud Storage release notes for more details.

  • Breaking change: Upgraded TypeScript to v5.1.6.

  • Deprecated support for Node.js 14. Instead use Node.js 16 or higher when deploying the Admin SDK. Node.js 14 support will be dropped in the next major version.

  • Upgraded the google-cloud/firestore dependency to v7.1.0 to support sum() and `average() aggregation functions.

  • Upgraded the @ firebase/database-compat package to v1.

  • Dropped AutoML model support (#1974)

  Bug Fixes

  • fix(firestore): Export new aggregate types (#2396)

  Miscellaneous

  • [chore] Release 12.0.0 (#2404)
  • chore: Deprecate Node.js 14 (#2397)
  • build(deps): Bump typescript, database-compat (#2403)
  • build(deps-dev): bump @ types/firebase-token-generator (#2399)
  • build(deps-dev): bump sinon and @ types/sinon (#2398)
  • build(deps-dev): bump @ types/mocha from 10.0.1 to 10.0.6 (#2400)
  • build(deps-dev): bump @ types/minimist from 1.2.2 to 1.2.5 (#2389)
  • build(deps-dev): bump @ types/request from 2.48.8 to 2.48.12 (#2390)
  • chore(deps): bump google-cloud/firestore and google-cloud/storage

from firebase-admin GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs