Bump @grpc/grpc-js, firebase-admin, firebase-functions and firebase-functions-test in /reactfire-start/functions

[dependabot]

Bumps @grpc/grpc-js to 1.14.4 and updates ancestor dependencies @grpc/grpc-js, firebase-admin, firebase-functions and firebase-functions-test. These dependencies need to be updated together.

Updates @grpc/grpc-js from 1.8.14 to 1.14.4

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.4

• Fix a bug that could cause servers to crash when handling malformed requests (advisory GHSA-5375-pq7m-f5r2)
• Fix a bug that could cause clients and servers to crash when handling malformed compressed messages (advisory GHSA-99f4-grh7-6pcq)

@​grpc/grpc-js 1.14.3

• Send halfClose immediately after messages to prevent late halfClose issues with Envoy (#3031 contributed by @​serkanerip)

@​grpc/grpc-js 1.14.2

• Fix server keep alive timeout not properly destroying connections (#3022 contributed by @​mattias-wiberg)

@​grpc/grpc-js 1.14.1

• Fix a regression of the settings used internally for HTTP/2 sessions (#3023)

@​grpc/grpc-js-xds 1.14.0

• Implement RBAC support (gRFC A41) (#2939, #2945)
• Add weighted_round_robin to LB policy registry (#3001) (currently experimental, enabled by the environment variable GRPC_EXPERIMENTAL_XDS_WRR_LB)
• Add wrr_locality to LB policy registry (#3003)

@​grpc/grpc-js 1.14.0

Changelog

• Add getAuthContext method to client and server call classes (more details can be found in gRFC L35) (#2920)
• Implement custom backend metrics support (gRFC A51) (#2978, #2983, #2985, #2986, #2999)
• Add getConnectionInfo method to the ServerInterceptingCall class (#2922)
• Implement the weighted_round_robin load balancing policy (#2998)
• Fix jitter behavior for client retries (#2960 contributed by @​ekscentrysytet)
• Start connecting from a random index in the round_robin LB policy (#2979)
• Send connection-level WINDOW_UPDATE at session start (#2971 contributed by @​KoenRijpstra)

Experimental API Changes

Added:

• CHANNEL_ARGS_CONFIG_SELECTOR_KEY
• StatusOr<T>
• CallStream
• statusOrFromValue
• statusOrFromError

Modified:

• ResolverListener#onSuccessfulResolution now has the signature (endpointList: StatusOr<Endpoint[]>, attributes: { [key: string]: unknown }, serviceConfig: StatusOr<ServiceConfig> | null, resolutionNote: string): boolean
• LoadBalancer#updateAddressList now has the signature `updateAddressList(endpointList: StatusOr<Endpoint[]>,lbConfig: TypedLoadBalancingConfig, channelOptions: ChannelOptions, resolutionNote: string): boolean

@​grpc/grpc-js 1.13.5

• Fix a bug that could cause servers to crash when handling malformed requests (advisory GHSA-5375-pq7m-f5r2)
• Fix a bug that could cause clients and servers to crash when handling malformed compressed messages (advisory GHSA-99f4-grh7-6pcq)

@​grpc/grpc-js 1.13.4

• Fix ability to set SNI with ssl_target_name_override option (#2956)

... (truncated)

Commits

• a380735 Merge pull request #3052 from murgatroid99/grpc-js_1.14.4
• 5b8d37b Merge commit from fork
• 6a97456 Merge commit from fork
• e5e0b1d grpc-js: Bump version to 1.14.4
• 5029a26 Make compression error a static string
• 2fe55fd Fix crashes when receiving malformed compressed data
• 234f917 Fix server crash when handling invalid requests
• acef8d4 Merge pull request #3043 from murgatroid99/rbac_types_change_fix_1.14
• 4f3c58f grpc-js-xds: Update RBAC code to handle Node type change, pin @​types/node
• ccd29b2 Merge pull request #3032 from murgatroid99/grpc-js_retry_half_close_1.14
• Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates firebase-admin from 11.9.0 to 14.0.0

Release notes

Sourced from firebase-admin's releases.

Firebase Admin Node.js SDK v14.0.0

Breaking Changes

• change(instance-id): Remove deprecated Instance ID service (#3166)
• change: Remove Deprecated Legacy Namespace Support (#3164)
• change(fcm): Drop legacy messaging types (#3157)
• change: Drop support for Node.js 18 and 20 (v14) (#3138)

New Features

• feat(auth): Enhance emulator support across authentication classes (#3080)
• feat(core): Error Handling Revamp (v14) (#3140)

Bug Fixes

• fix(functions): store CLOUD_TASKS_EMULATOR_HOST at construction time (#3167)
• fix(auth): Decouple CreateRequest interface from UpdateRequest (#3165)
• fix(auth): skip project config name assertion when using the Auth emulator (#3142)
• fix(api-request): replace deprecated url.parse() with WHATWG URL (#3124)
• fix: resolve failing getApplicationDefault unit tests in gcloud SDK environment (#3163)
• fix(fcm): Map topic subscription RESOURCE_EXHAUSTED server code to new TOPICS_SUBSCRIPTION_RATE_EXCEEDED SDK error code (#3148)

Miscellaneous

• [chore] Release 14.0.0 (#3171)
• build: upgrade compilation target and lib to ES2021 (#3172)
• build(deps): bump @​tootallnate/once from 2.0.0 to 2.0.1 (#3160)
• build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#3168)
• build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 (#3169)
• chore: fixed api docs typos and omissions (#3170)
• build(deps-dev): bump eslint from 10.3.0 to 10.4.1 (#3155)
• Merge pull request #3162 from firebase/v14
• chore(deps): bump jwks-rsa to 4.0.1 (#3125)
• fix package.json
• chore: Drop send-tweet and upgrade GitHub Actions (#3158)
• chore: upgrade nock to v14 and fix api-request unit tests (#3153)
• chore: bump eslint to 10.3.0 and migrate to flat config (#3150)
• build(deps-dev): bump sinon from 18.0.1 to 22.0.0 (#3149)
• chore(deps): bump jwks-rsa to 4.0.1 (#3125)
• chore: Upgrade dependencies for v14 (#3137)

Firebase Admin Node.js SDK v13.10.0

New Features

• feat(appcheck): Add support for minting limited-use tokens and custom JTI (#3027)

Bug Fixes

... (truncated)

Commits

• 4754a2f [chore] Release 14.0.0 (#3171)
• 25285ee build: upgrade compilation target and lib to ES2021 (#3172)
• d96319e build(deps): bump @​tootallnate/once from 2.0.0 to 2.0.1 (#3160)
• 0c34e89 build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#3168)
• 52d02f7 build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 (#3169)
• dc788b2 chore: fixed api docs typos and omissions (#3170)
• a39e897 build(deps-dev): bump eslint from 10.3.0 to 10.4.1 (#3155)
• ce6c4dc Merge pull request #3162 from firebase/v14
• fe71c55 fix(functions): store CLOUD_TASKS_EMULATOR_HOST at construction time (#3167)
• 659c056 change(instance-id): Remove deprecated Instance ID service (#3166)
• Additional commits viewable in compare view

Updates firebase-functions from 4.4.0 to 4.9.0

Release notes

Sourced from firebase-functions's releases.

v4.9.0

• Add new 2nd gen Firestore auth context triggers. (#1519)

v4.8.2

Fix bug with CORS options for an array of one string (#1544)

v4.8.1

Fix bug where 1st gen functions eventually fail with stack too deep (#1540) Make simple CORS options static for improved debugability (#1536)

v4.8.0

Add onInit callback function for global variable initialization (#1531)

v4.7.0

• Fixes access on deeply nested, nonexistent property. (#1432)
• Add IteratedDataSnapshot interface to match with firebase admin v12 (#1517).
• Make bucket parameterizeable in storage functions (#1518)
• Introduce helper library for select and multi-select input (#1518)

v4.6.0

• Wrap 2nd gen onCall functions with trace context. (#1491)
• Bump peer depdencies for firebase-admin to support 12.0.0. (#1509)

v4.5.0

• Remove HTTP server shutdown message. (#1457)
• Add features to task queue functions. (#1423)
• Add traces to V2 Firestore trigger logs. (#1440)
• Fix incorrectly parsed timestamps in auth blocking functions. (#1472)
• Add recaptcha verdict support for auth blocking functions (#1458)

v4.4.1

• Update list of supported regions for 2nd Gen Functions. (#1402)
• Fix bug where log message on structured log was being overwritten (#1416)
• Fix bug where exists() should return true for falsy values like 0, "" (#1410)

Commits

• 482529a 4.9.0
• 53f7204 Add new 2nd gen Firestore auth context triggers (#1519)
• 0f1e8f3 [firebase-release] Removed change log and reset repo after 4.8.2 release
• 010ee52 4.8.2
• b71fea9 Fix regresssion in v1 functions with only context. (#1545)
• 23510f7 Remove unnecessary strict dep on node-fetch (#1543)
• f13360a Fix bug introduced in #1536 (#1544)
• 5cc6fdd [firebase-release] Removed change log and reset repo after 4.8.1 release
• 536f8de 4.8.1
• ad6cd43 Remove infinite wrapping of withInit (#1540)
• Additional commits viewable in compare view

Updates firebase-functions-test from 3.1.0 to 3.5.0

Release notes

Sourced from firebase-functions-test's releases.

v3.5.0

• feat: add SecretManager mocking (#265)

v3.4.1

• Support FIRESTORE_EMULATOR_HOST env var for Firestore triggers (#184)

v3.4.0

• Explicitly import from the v1 namespace to unbreak firebase-functions 6.x (#243).
• Explciitly import from the v2 namespace so that #243 doesn't break firebase-functions versions below 6.x (#252)
• Also adds firebase-admin 13.x as a supported version in peer-deps (#252)

v3.3.0

• Add support for v2 callable functions (#229).

v3.2.0

• Add support for testing Firestore 2nd gen Auth Context triggers. (#227)

v3.1.1

• Extend support for firebase-admin@12 (#220)

Commits

• 0309bed 3.5.0
• cd75dd1 updates npm publish token (#306)
• b5f9c93 using github token in clone URL in Pubish Script (#305)
• 762a4ac chore: use Secret Manager for cloning and add changelog for v3.5.0 (#303)
• 4208282 chore: update release scripts and rotate npmrc to match firebase-func… (#302)
• fb6cd5c feat: add SecretManager mocking (#265)
• c38afad chore: run npm audit fix (#267)
• d5634c5 fix(workflows): update actions/cache to v4 as v1 obsolete (#262)
• a4d2de0 [firebase-release] Removed change log and reset repo after 3.4.1 release
• 12dd9cf 3.4.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.