Skip to content

Update dependency firebase-tools to ^12.4.8 #26

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Mar 31, 2025

This PR contains the following updates:

Package Type Update Change
firebase-tools dependencies minor ^12.3.1 -> ^12.4.8

By merging this PR, the issue #14 will be automatically resolved and closed:

Severity CVSS Score Vulnerability
Critical Critical 9.8 CVE-2023-42282
Critical Critical 9.8 CVE-2023-42282
High High 7.5 CVE-2024-37890
High High 7.5 CVE-2024-45296
Medium Medium 5.3 CVE-2024-47178

Release Notes

firebase/firebase-tools (firebase-tools)

v12.4.8

Compare Source

  • Increased functions emulator HTTPS body size limit to 32mb to match production. (#​6201)
  • Fixed Astro web framework bug when loading configuration for version 2.9.7 and above. (#​6213)
  • Increase Next.js config bundle timeout to 60 seconds. (#​6214)

v12.4.7

Compare Source

  • Improve error message raised when firebase init hosting:github fails due to max number of keys limit for a service account. (#​6145)
  • Fixed bug where functions:secrets:\* family of commands did not work when Firebase CLI is authenticated via GOOGLE_APPLICATION_CREDENTIALS (#​6190)
  • Fixed bug where some extension instance updates would default to the wrong location.

v12.4.6

Compare Source

  • Fixed an issue where extension instances could not be deployed when authenticated as a service account (#​6060).
  • Fixed glob usage in Next.js utility function to detect images in app directory (#​6166)
  • Send experiments activated with firebase experiments:enable to the emulator suite UI (#​6169)

v12.4.5

Compare Source

  • Fixed bug where functions:secrets:set didn't remove stale versions of a secret. (#​6080)
  • Fixed bug where firebase deploy --only firestore:named-db didn't update rules. (#​6129)
  • Fixed issue where Flutter Web is not detected as a web framework. (#​6085)
  • Added better messages for API permissions failures that direct the user to the URL to enable the API. (#​6130)
  • Fixed issue caused by adding type checks in #​5906.
  • Fixed next/image component in app directory for Next.js > 13.4.9. (#​6143)
  • Fixed bug where Next.js Image Optimization in the app directory was not requiring a Cloud Function. (#​6143)
  • Fixed a transitive dependency on a vulnerable version of vm2. (#​6150)

v12.4.4

Compare Source

  • Disables KeepAlive timeout when debugger is attached to the functions emulator. (#​6069)
  • Fixed an issue where database:list would have inaccurate results. (#​6063)

v12.4.3

Compare Source

  • Fixed incorrect links in firebase open hosting and firebase open crash. (#​6073)
  • Released Firebase Emulator UI v1.11.7, which includes preview support for multiple Firestore databases. (#​6079)

v12.4.2

Compare Source

  • Run lifecycle hooks for specific functions. (#​6023)
  • Increased extension instance create poll timeout to 1h to match backend (#​5969).
  • Refactored ext:install to use the latest extension metadata. (#​5997)
  • Added descriptive error when repo is private or not found during ext:dev:upload. (#​6052)
  • Fixed issue where missing trigger warnings would be wrongly displayed when emulating extensions with HTTPS triggers. (#​6055)
  • Normalized extension root path before usage in ext:dev:upload. (#​6054)

v12.4.1

Compare Source

  • Release Firestore emulator 1.18.1 which addes a emulator configuration to start with experimental mode (#​5942).
  • Run lifecycle hooks for specific codebases. (#​6011)
  • Fixed issue causing firebase emulators:start to crash in Next.js apps (#​6005)

v12.4.0

Compare Source

  • Added appdistribution:group:create and appdistribution:group:delete. (#​5978)
  • Added --group-alias option to appdistribution:testers:add and appdistribution:testers:remove. (#​5978)
  • Fixed an issue where Storage rules could not be deployed to projects without a billing plan. (#​5955)

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Mar 31, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants