Update dependency firebase-admin to v10 - autoclosed

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
firebase-admin (source)	dependencies	major	^8.9.0 -> ^10.0.0

By merging this PR, the issue #20 will be automatically resolved and closed:

Severity	CVSS Score	CVE
High	7.5	CVE-2020-26289
High	7.5	CVE-2020-7662
High	7.5	CVE-2022-24771
High	7.5	CVE-2022-24772
High	7.5	WS-2020-0219
High	7.3	CVE-2020-7720
Medium	6.6	WS-2022-0008
Medium	6.1	CVE-2022-0122
Medium	5.3	CVE-2020-7765
Medium	5.3	CVE-2022-24773

---

Release Notes

firebase/firebase-admin-node

v10.0.2: Firebase Admin Node.js SDK v10.0.2

Compare Source

Miscellaneous

• [chore] Release 10.0.2 (#​1558)
• Revert TS4 and Firestore 5.x updates (#​1557)
• Revert "[chore] Release 10.1.0 (#​1553)" (#​1555)
• [chore] Release 10.1.0 (#​1553)
• (fix): Add new Firestore types to the firestore module (#​1554)
• build(deps): bump @​google-cloud/storage from 5.17.0 to 5.18.0 (#​1551)
• build(deps-dev): bump @​firebase/auth-types from 0.10.3 to 0.11.0 (#​1550)
• build(deps-dev): bump @​firebase/app-compat from 0.1.13 to 0.1.14 (#​1549)
• build(deps): bump @​types/node from 17.0.8 to 17.0.10 (#​1548)
• build(deps): bump @​google-cloud/firestore from 5.0.1 to 5.0.2 (#​1545)
• build(deps-dev): bump @​typescript-eslint/parser from 5.9.1 to 5.10.0 (#​1544)
• build(deps-dev): bump @​typescript-eslint/eslint-plugin (#​1543)
• version update @​google-cloud/firestore to 5.x (#​1525)
• chore: Update Typescript to 4.x (#​1541)
• chore: Update ESLint and @​typescript-eslint dependencies (#​1540)
• build(deps-dev): bump @​microsoft/api-extractor from 7.19.3 to 7.19.4 (#​1539)
• build(deps-dev): bump nock from 13.1.3 to 13.2.1 (#​1538)
• build(deps-dev): bump mocha from 9.1.2 to 9.1.3 (#​1537)
• build(deps-dev): bump @​firebase/app-compat from 0.1.3 to 0.1.13 (#​1535)
• build(deps-dev): bump @​firebase/auth-compat from 0.1.4 to 0.2.5 (#​1534)
• build(deps): bump @​google-cloud/storage from 5.14.4 to 5.16.1 (#​1528)
• build(deps): bump node-forge from 0.10.0 to 1.0.0 (#​1533)
• build(deps): bump @​firebase/database-types from 0.7.3 to 0.9.3 (#​1500)
• build(deps): bump @​firebase/database-compat from 0.1.1 to 0.1.4 (#​1499)
• Remove delayed response message for holidays (#​1527)
• build(deps-dev): bump @​microsoft/api-extractor from 7.18.11 to 7.19.3 (#​1526)
• Fix the delayed response message
• Add delayed response message for holidays (#​1521)

v10.0.1: Firebase Admin Node.js SDK v10.0.1

Compare Source

Bug Fixes

• fix(firestore): Expose more types from gcp firestore
• fix(auth): Add user disabled error code. (#​1506)
• fix(auth): Remove request body for deleteTenant (#​1461)

Miscellaneous

• [chore] Release 10.0.1 (#​1520)
• Add new Firestore types exposed from the admin firestore module (#​1519)
• Update base-auth.ts (#​1501)
• Update multi-tenancy integration tests to run against auth emulator (#​1453)
• build(deps-dev): bump mocha from 8.4.0 to 9.1.2 (#​1440)
• build(deps): bump @​types/node from 16.10.2 to 16.11.0 (#​1464)
• build(deps-dev): bump @​types/mocha from 8.2.2 to 9.0.0 (#​1397)

v10.0.0: Firebase Admin Node.js SDK v10.0.0

Compare Source

Breaking Changes

• change: Dropped support for Node.js 10. Developers should use Node.js 12 or up when deploying the Admin SDK (#​1445).

New Features

• Admin SDK now offers a series of ES module entry points (e.g. firebase-admin/app, firebase-admin/auth etc)
• New module entry points can be used in native ESM runtimes.
• Developers are recommended to use the new entry points, and migrate out of the namespaced API.

Bug Fixes

• fix: Using Node 12 for nightly builds (#​1460)

Miscellaneous

• [chore] Release 10.0.0 (#​1462)
• chore: Enabled tsdoc error checking (#​1459)
• Revert "Remove request body for deleteTenant (#​1452)" (#​1456)
• Remove request body for deleteTenant (#​1452)

v9.12.0: Firebase Admin Node.js SDK v9.12.0

Compare Source

New Features

• feat(rc): Add Remote Config Parameter Value Type Support (#​1424)

Bug Fixes

• fix(fac): Verify Token: Change the jwks cache duration from 1 day to 6 hours (#​1439)
• fix(rtdb): Changed admin.database to use database-compat package (#​1437)

Miscellaneous

• [chore] Release 9.12.0 (#​1442)
• Pin @​types/jsonwebtoken to 8.5.1 (#​1438)
• build(deps): bump tar from 6.1.3 to 6.1.11 (#​1430)
• build(deps-dev): bump @​types/lodash from 4.14.171 to 4.14.173 (#​1435)
• build(deps-dev): bump @​microsoft/api-extractor from 7.18.4 to 7.18.7 (#​1423)
• fix typo (#​1420)

v9.11.1: Firebase Admin Node.js SDK v9.11.1

Compare Source

Bug Fixes

• fix: Update comments in index files (#​1414)
• fix: Throw error on user disabled and check revoked set true (#​1401)

Miscellaneous

• [chore] Release 9.11.1 (#​1415)
• build(deps): bump path-parse from 1.0.6 to 1.0.7 (#​1413)
• build(deps-dev): bump yargs from 17.0.1 to 17.1.1 (#​1412)
• chore: Add emulator tests to nightlies (#​1409)
• build(deps-dev): bump ts-node from 9.0.0 to 10.2.0 (#​1402)
• build(deps): bump tar from 6.1.0 to 6.1.3 (#​1399)
• build(deps-dev): bump @​microsoft/api-extractor from 7.15.2 to 7.18.4 (#​1379)
• build(deps): bump jwks-rsa from 2.0.3 to 2.0.4 (#​1393)
• build(deps-dev): bump @​types/minimist from 1.2.1 to 1.2.2 (#​1388)
• build(deps-dev): bump @​types/request from 2.48.5 to 2.48.6 (#​1387)
• build(deps-dev): bump @​types/lodash from 4.14.157 to 4.14.171 (#​1386)
• build(deps): bump @​firebase/database from 0.10.6 to 0.10.7 (#​1385)
• build(deps-dev): bump @​types/bcrypt from 2.0.0 to 5.0.0 (#​1384)
• build(deps-dev): bump nock from 13.1.0 to 13.1.1 (#​1370)

v9.11.0: Firebase Admin Node.js SDK v9.11.0

Compare Source

New Features

• feat(fac): Add custom TTL options for App Check (#​1363)

Miscellaneous

• [chore] Release 9.11.0 (#​1376)
• Fix typo and formatting in docs (#​1378)
• Add AppCheckTokenOptions type to ToC (#​1375)
• Reduce App Check custom token exp to 5 mins (#​1372)
• build(deps): bump @​google-cloud/firestore from 4.12.2 to 4.13.1 (#​1369)
• Update index.ts (#​1367)
• build(deps-dev): bump @​types/chai from 4.2.11 to 4.2.21 (#​1365)
• build(deps-dev): bump yargs from 16.1.0 to 17.0.1 (#​1357)
• build(deps): bump jwks-rsa from 2.0.2 to 2.0.3 (#​1361)
• build(deps): bump @​firebase/database from 0.10.5 to 0.10.6 (#​1356)
• build(deps-dev): bump @​types/sinon from 9.0.4 to 10.0.2 (#​1326)
• build(deps-dev): bump @​types/nock from 9.3.1 to 11.1.0 (#​1351)
• build(deps): bump @​firebase/database from 0.10.4 to 0.10.5 (#​1350)
• build(deps-dev): bump @​types/request-promise from 4.1.46 to 4.1.47 (#​1338)

v9.10.0: Firebase Admin Node.js SDK v9.10.0

Compare Source

New Features

• feat(fis): Adding the admin.installations() API for deleting Firebase installation IDs (#​1187)

Bug Fixes

• fix: Updated TOC for new Auth type aliases (#​1342)
• fix(docs): replace all global.html -> admin.html (#​1341)
• fix(auth): Better type hierarchies for Auth API (#​1294)

Miscellaneous

• [chore] Release 9.10.0 (#​1345)
• build(deps-dev): bump @​types/minimist from 1.2.0 to 1.2.1 (#​1336)
• build(deps-dev): bump gulp-filter from 6.0.0 to 7.0.0 (#​1334)
• build(deps-dev): bump request-promise from 4.2.5 to 4.2.6 (#​1331)
• build(deps): bump @​firebase/database from 0.10.0 to 0.10.4 (#​1328)
• build(deps-dev): bump @​firebase/app from 0.6.21 to 0.6.26 (#​1329)
• build(deps-dev): bump @​types/mocha from 2.2.48 to 8.2.2 (#​1323)
• build(deps): bump @​google-cloud/firestore from 4.5.0 to 4.12.2 (#​1325)
• build(deps-dev): bump bcrypt from 5.0.0 to 5.0.1 (#​1324)
• build(deps-dev): bump @​types/sinon-chai from 3.2.4 to 3.2.5 (#​1316)
• build(deps-dev): bump nock from 13.0.11 to 13.1.0 (#​1313)
• build(deps-dev): bump @​types/jsonwebtoken from 8.5.0 to 8.5.1 (#​1315)
• build(deps-dev): bump del from 2.2.2 to 6.0.0 (#​1310)
• build(deps): bump ws from 7.3.1 to 7.4.6 (#​1309)
• build(deps-dev): bump nock from 13.0.5 to 13.0.11 (#​1311)
• Add OAuthResponseType to ToC (#​1303)
• Update OIDC reference docs (#​1305)

v9.9.0: Firebase Admin Node.js SDK v9.9.0

Compare Source

Breaking Changes

• change: The Admin SDK now requires Node.js 10.13.0 or higher. (#​1300)

New Features

• feat(auth): Added code flow support for OIDC flow. (#​1220)

Bug Fixes

• fix(auth): make MFA uid optional for updateUser operations (#​1278)
• fix: Revert regression introduced in #​1257 (#​1277)

Miscellaneous

• [chore] Release 9.9.0 (#​1302)
• Fixed integration test failure of skipped tests (#​1299)
• chore: Teporarily disabling sendToDeviceGroup integration test (#​1292)
• build(deps-dev): bump @​microsoft/api-extractor from 7.11.2 to 7.15.2 (#​1291)
• build(deps-dev): bump chalk from 1.1.3 to 4.1.1 (#​1288)
• build(deps-dev): bump nyc from 14.1.1 to 15.1.0 (#​1290)
• build(deps-dev): bump sinon from 9.0.2 to 9.2.4 (#​1289)
• build(deps-dev): bump run-sequence from 1.2.2 to 2.2.1 (#​1282)
• build(deps-dev): bump gulp-header from 1.8.12 to 2.0.9 (#​1283)
• chore: Remove gulp-replace dependency (#​1285)
• chore: Enabled dependabot (#​1279)
• build(deps): bump jose from 2.0.4 to 2.0.5 (#​1265)
• build(deps): bump handlebars from 4.7.6 to 4.7.7 (#​1253)

v9.8.0: Firebase Admin Node.js SDK v9.8.0

Compare Source

Bug Fixes

• fix: adds missing EMAIL_NOT_FOUND error code (#​1246)

Miscellaneous

• [chore] Release 9.8.0 (#​1266)
• Fix @​types/node conflict with grpc and port type (#​1258)
• build(deps): bump hosted-git-info from 2.8.8 to 2.8.9 (#​1260)
• feat: Add abuse reduction support (#​1264)
• Fix storage emulator env formatting (#​1257)
• build(deps): bump y18n from 3.2.1 to 3.2.2 (#​1208)
• chore: Upgraded RTDB and other @​firebase dependencies (#​1250)
• build(deps-dev): bump lodash from 4.17.19 to 4.17.21 (#​1255)

v9.7.0: Firebase Admin Node.js SDK v9.7.0

Compare Source

Bug Fixes

• fix(rtdb): Fixing a token refresh livelock in Cloud Functions (#​1234)

Miscellaneous

• [chore] Release 9.7.0 (#​1240)
• Revert "Disable one flaky tests in emulator. (#​1205)" (#​1227)
• Add support for FIREBASE_STORAGE_EMULATOR_HOST env var (#​1175)
• chore: Clean up nightly workflow trigger tests (#​1212)
• Change dispatch event name in nightly workflow (#​1216)
• chore: Fix bug in send-email action code (#​1214)
• chore: Add Mailgun send email action (#​1210)
• (chore): Add JWT Decoder and Signature Verifier (#​1204)

v9.6.0: Firebase Admin Node.js SDK v9.6.0

Compare Source

New Features

• feat(rtdb): Support emulator mode for rules management operations (#​1190)

Bug Fixes

• fix(rtdb): Fixing the RTDB token listener callback (#​1203)
• fix: Decoupled proactive token refresh from FirebaseApp (#​1194)

Miscellaneous

• [chore] Release 9.6.0 (#​1209)
• Disable one flaky tests in emulator. (#​1205)
• Add emulator-based integration tests. (#​1155)
• Update HOME.md (#​1181)
• chore: Updated doc generator for typedoc 0.19.0 (#​1166)

v9.5.0: Firebase Admin Node.js SDK v9.5.0

Compare Source

New Features

• feat(auth): Add ability to link a federated ID with the updateUser() method. (#​770)
• feat(auth): Implement getUserByProviderId (#​769)
• feat: Exporting all types of Messages so they can be used by consumers (#​1147)

Bug Fixes

• fix: Removing FirebaseServiceInterface and FirebaseServiceInternalsInterface (#​1128)

Miscellaneous

• [chore] Release 9.5.0 (#​1167)
• (chore): Export UserProvider type and add it to toc.yaml (#​1165)
• Allow enabling of anonymous provider via tenant configuration (#​802)
• Improve token verification logic with Auth Emulator. (#​1148)
• update typo in interface name (#​1138)
• Updating Google Cloud naming (#​1122)
• chore(core): Automate Daily Integration Tests (#​1130)
• chore(rc): Add more unit tests for timestamp validation (#​1092)
• Remove delayed response message for holidays (#​1125)
• build(deps): bump highlight.js from 10.4.0 to 10.5.0 (#​1127)
• build(deps): bump ini from 1.3.5 to 1.3.8 (#​1126)
• build(deps): bump date-and-time from 0.14.1 to 0.14.2 (#​1120)
• Adding delayed response message for holidays (#​1118)

v9.4.2: Firebase Admin Node.js SDK v9.4.2

Compare Source

Bug Fixes

• fix(fcm): Support arbitrary custom values in the ApnsPayload (#​1097)

Miscellaneous

• [chore] Release 9.4.2 (#​1111)
• chore: adds missing provider IDs for Auth (#​1106)
• Adds @​license JSDoc tag to license comments (#​1102)
• chore: Upgraded mocha, ts-node, typedoc and nock (#​1105)
• chore: Upgraded JS SDK dependencies (#​1104)

v9.4.1: Firebase Admin Node.js SDK v9.4.1

Compare Source

Bug Fixes

• fix(rc): Fix Version update time parsing failure (#​1089)

Miscellaneous

• [chore] Release 9.4.1 (#​1091)
• Reinstating tag that devsite needs present to supress machine translation. (#​1090)

v9.4.0: Firebase Admin Node.js SDK v9.4.0

Compare Source

New Features

• feat(firestore): Exposed more types from the admin.firestore namespace (#​1080)

Bug Fixes

• fix: Adding es2018 libraries to the build (#​1079)
• fix: Upgraded dev dependency on yargs (#​1073)

Miscellaneous

• [chore] Release 9.4.0 (#​1087)
• Use 'owner' token when communicating with Auth emulator (#​1085)
• Handle lookup returning empty array of users. (#​1082)
• chore: Configuring an API Extractor report for the repo (#​1081)
• chore: Auto-generating typings from the source (#​1072)

v9.3.0: Firebase Admin Node.js SDK v9.3.0

Compare Source

Miscellaneous

• [chore] Release 9.3.0 (#​1070)
• build(deps): bump @​actions/core in /.github/actions/send-tweet (#​1052)
• Add support for Auth Emulator (#​1044)
• Update default.hbs (#​1040)

v9.2.0: Firebase Admin Node.js SDK v9.2.0

Compare Source

New Features

• feat(ml): Adding Firebase ML support for AutoML models (#​1024)

Bug Fixes

• fix(storage): Support typing generation for the storage API (#​1019)

Miscellaneous

• [chore] Release 9.2.0 (#​1030)
• build(deps): bump node-forge from 0.9.1 to 0.10.0 (#​1028)
• Adding More ModelOptions to toc.yaml (#​1027)
• build(deps): bump node-fetch from 2.6.0 to 2.6.1 (#​1025)
• chore: Enabling max-len lint rule (#​1014)
• build(deps-dev): bump bcrypt from 3.0.8 to 5.0.0 (#​1002)
• Allow Credential to auto-generate typings, separate internal vs external APIs (#​1012)
• auth: Add credential service (#​1011)

v9.1.1: Firebase Admin Node.js SDK v9.1.1

Compare Source

Bug Fixes

• fix(auth): Address several auth typing inconsistencies (#​993)

Miscellaneous

• [chore] Release 9.1.1 (#​1003)
• Add missing class in RemoteConfig Namespace (#​996)

v9.1.0: Firebase Admin Node.js SDK v9.1.0

Compare Source

New Features

• feat(auth): Adds ability to enable MFA on a Google Cloud Identity Platform tenant (#​930)

Bug Fixes

• fix(auth): Make displayName optional for AuthProviderConfig typings (#​970)
• fix(auth): Fix several typing inconsistencies (#​966)
• fix: Use object instead of Object in typings (#​961)

Miscellaneous

• [chore] Release 9.1.0 (#​991)
• Firebase ML can gracefully accept unknown fields in ModelResponse (#​989)
• Allow RTDB to auto-generate typings, separate internal vs external APIs (#​963)
• Allow Firestore to auto-generate typings, separate internal vs external APIs (#​986)
• Allow RemoteConfig to auto-generate typings, separate internal vs external APIs (#​984)
• Allow FCM to auto-generate typings, separate internal vs external APIs (#​982)
• Allow security-rules to auto-generate typings, separate internal vs external APIs (#​974)
• chore: Adopt no-unused-vars-experimental for eslint to prevent incorrect linting errors (#​981)
• chore: Make instance-id use new modularization pattern (#​977)
• Allow project-management to auto-generate typings, separate internal vs external APIs (#​971)
• chore(rc): Move manual typings remote-config typings to separate folder (#​975)
• Allow instance-id to auto-generate typings, separate internal vs external APIs (#​969)
• Modify gulpfile to allow for autogenerated types per-service (#​967)
• Fix updateUser's typing jsdoc (delete => update) (#​964)
• Add null to customUserClaims (#​958)
• chore: Enable keyword-spacing ESLint rule (#​957)
• chore: Remove instances of XXX_SDK_VERSION_XXX by reading version from package.json (#​952)
• fix fragment (#​944)

v9.0.0: Firebase Admin Node.js SDK v9.0.0

Compare Source

Breaking Changes

• change: Dropped Node 8 support and upgraded Firestore/Storage dependencies

Bug Fixes

• fix: Upgraded Chai, Sinon and other test dependencies (#​938)

Miscellaneous

• [chore] Release 9.0.0 (#​946)
• File permissions updated (#​942)
• chore: update node-forge to ^0.9.1 (#​941)
• chore: Add ESLint rule for curly braces, apply fix (#​939)
• Adds scrypt support in node 12 (#​739)
• Add null to databaseAuthVariableOverride (#​926)

v8.13.0: Firebase Admin Node.js SDK v8.13.0

Compare Source

New Features

• feat(rc): Add Remote Config Version Management API (#​920)

Bug Fixes

• fix(auth): Migrated IAM sign endpoint to iamcredentials.googleapis.com (#​916)
• fix(auth): Fixing flaky deleteUsers() integration tests (#​917)
• fix: Upgraded node-forge and jsonwebtoken dependencies (#​912)
• fix(auth): Add interfaces for UserProviderRequest and Metadata used in UserImportRecord (#​909)
• fix: Fixed faulty metadata for the send-tweet Action (#​908)
• fix(auth): Properly parse the lastRefreshTime. (#​888)

Miscellaneous

• [chore] Release 8.13.0 (#​925)
• Add integration tests for RC manage version operations (#​914)
• Add another missing RC type to toc.yaml (#​924)
• Add new RC types in toc.yaml (#​923)
• Fixed a flaky auth integration test by retrying the GetUser() API call (#​907)
• Bump websocket-extensions from 0.1.3 to 0.1.4 (#​900)
• Fixing Firebase ML integration tests (#​899)
• fixing tests with unhandled promises (#​894)
• Rectified issues in comments for NotificationMessagePayload (#​879)
• chore: Running CI workflow on pull_request (#​886)

v8.12.1: Firebase Admin Node.js SDK v8.12.1

Compare Source

Miscellaneous

• [chore] Release 8.12.1 (#​883)
• Mark UserMetadata::lastRefreshTime as optional. (#​881)
• Remove type aliases from toc.yaml (#​877)

---

• If you want to rebase/retry this PR, check this box