[Snyk] Upgrade firebase-functions from 3.6.0 to 3.14.1 #1

snyk-bot · 2021-07-31T23:39:02Z

Snyk has created this PR to upgrade firebase-functions from 3.6.0 to 3.14.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 15 versions ahead of your current version.
The recommended version was released 2 months ago, on 2021-05-17.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Prototype Pollution SNYK-JS-LODASH-590103	490/1000 Why? CVSS 9.8	No Known Exploit
Command Injection SNYK-JS-LODASH-1040724	490/1000 Why? CVSS 9.8	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	490/1000 Why? CVSS 9.8	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: firebase-functions

3.14.1 - 2021-05-17
- Fixes a bug where typescript would fail to compile with old (but supported) versions of firebase-admin
- Replaces 3.13.3 which was an inappropriately numbered version
3.14.0 - 2021-05-12
- Functions may now be deployed with 8GB RAM
- Functions may now be deployed to europe-central2 (Warsaw)
- Add support for validating App Check tokens for Callable Functions
3.13.3 - 2021-05-17
- Fixes a bug where typescript would fail to compile with old (but supported) versions of firebase-admin
3.13.2 - 2021-02-22
- Fixes issue where DATABASE_URL and STORAGE_BUCKET_URL could not be set to undefined. (#829)
- Fixes a bug where ingressSettings could not be set. (#827)
3.13.1 - 2021-01-15
- Fixes a bug that prevented Functions from being deployed with availableMemoryMb set to 4GB.
- Fixes bug where functions.logger.log crashes function if circular dependencies are passed in
3.13.0 - 2020-12-07
- Adds serviceAccount option to runtimeOptions to specify which service account Cloud Function should use at runtime. For example:
test-sa@project.iam.gserviceaccount.com'
// OR
// serviceAcount: 'test-sa@"
// OR
// serviceAccount: 'default'
})

">
```
const functions = require('firebase-functions');
exports.myFunction = functions.runWith({

serviceAccount: 'test-sa@project.iam.gserviceaccount.com'

// OR

// serviceAcount: 'test-sa@"

// OR

// serviceAccount: 'default'

})
```
Requires firebase-tools@8.18.0 or later. Thanks @ egor-miasnikov!
- Upgrades highlight.js to 10.4.1 to fix a vulnerability.
3.12.0 - 2020-11-30
- Adds 4GB as a memory option for runWith().
- Adds support for choosing ingressSettings via runWith().
3.11.0 - 2020-08-21
- Adds support for vpcConnector and vpcConnectorEgressSettings fields in functions.runWith(). Must be used in conjunction with firebase-tools v8.9.0 or higher. Thanks @ pcboy! (#752)
3.10.0 - 2020-08-20
- Adds support for functions failure policies (#482)
3.9.1 - 2020-08-12
- Updates firebase-admin dependency to support ^9.0.0 in addition to ^8.0.0. Note that firebase-admin no longer supports Node.js 8.x as of 9.0.0.
- Fixes logging of unexpected errors in https.onCall() functions.
3.9.0 - 2020-07-31
3.8.0 - 2020-07-14
3.7.0 - 2020-06-09
3.6.2 - 2020-05-28
3.6.1 - 2020-04-24
3.6.0 - 2020-03-31