Skip to content

chore(deps): bump @grpc/grpc-js, firebase-admin, firebase-functions and firebase-functions-test in /functions - #718

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/functions/multi-b28be50865
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/functions/multi-b28be50865

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor

Bumps @grpc/grpc-js to 1.14.5 and updates ancestor dependencies @grpc/grpc-js, firebase-admin, firebase-functions and firebase-functions-test. These dependencies need to be updated together.

Updates @grpc/grpc-js from 1.8.21 to 1.14.5

Release notes

Sourced from @​grpc/grpc-js's releases.

@​grpc/grpc-js 1.14.5

  • Fix a bug that caused clients to automatically transmit excessive error details to clients by default (advisory GHSA-f596-whhp-79r4)
  • Fix a bug that caused getAuthContext to return unverified certificates as though they were verified in some configurations (advisory GHSA-m9gg-hp2v-232j)
  • Fix a bug that could cause stale call data to accumulate if a channel failed to connect for a long period of time (#3078)
  • Fix a bug that could cause call status to be reported with expected fields missing (#3079)
  • Avoid redundant end() calls on completed HTTP/2 streams (#3082 contributed by @​olavloite)
  • Unify call numbers and avoid disabled trace allocations (#3084 contributed by @​olavloite)

@​grpc/grpc-js 1.14.4

@​grpc/grpc-js 1.14.3

  • Send halfClose immediately after messages to prevent late halfClose issues with Envoy (#3031 contributed by @​serkanerip)

@​grpc/grpc-js 1.14.2

@​grpc/grpc-js 1.14.1

  • Fix a regression of the settings used internally for HTTP/2 sessions (#3023)

@​grpc/grpc-js-xds 1.14.1

@​grpc/grpc-js-xds 1.14.0

  • Implement RBAC support (gRFC A41) (#2939, #2945)
  • Add weighted_round_robin to LB policy registry (#3001) (currently experimental, enabled by the environment variable GRPC_EXPERIMENTAL_XDS_WRR_LB)
  • Add wrr_locality to LB policy registry (#3003)

@​grpc/grpc-js 1.14.0

Changelog

  • Add getAuthContext method to client and server call classes (more details can be found in gRFC L35) (#2920)
  • Implement custom backend metrics support (gRFC A51) (#2978, #2983, #2985, #2986, #2999)
  • Add getConnectionInfo method to the ServerInterceptingCall class (#2922)
  • Implement the weighted_round_robin load balancing policy (#2998)
  • Fix jitter behavior for client retries (#2960 contributed by @​ekscentrysytet)
  • Start connecting from a random index in the round_robin LB policy (#2979)
  • Send connection-level WINDOW_UPDATE at session start (#2971 contributed by @​KoenRijpstra)

Experimental API Changes

Added:

  • CHANNEL_ARGS_CONFIG_SELECTOR_KEY
  • StatusOr<T>
  • CallStream
  • statusOrFromValue
  • statusOrFromError

... (truncated)

Commits
  • 56567d9 Merge pull request #3086 from murgatroid99/grpc-js_1.14.5
  • 748ae86 Merge pull request #3088 from murgatroid99/grpc-js_perf_improvement_backport
  • 526702d test(grpc-js): fix type errors in client stream lifecycle tests
  • 26a8d3d fix(grpc-js): avoid redundant end() calls on completed HTTP/2 streams
  • 152eebd chore(grpc-js): unify call numbers and avoid disabled trace allocations
  • c5ae750 grpc-js(-xds): Increment version numbers (1.14.x)
  • 735a09a Merge commit from fork
  • af9b140 Merge commit from fork
  • 45ac33e Merge commit from fork
  • 9df49e3 Merge pull request #3081 from murgatroid99/grpc-js-xds_weighted_target_fix_ba...
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates firebase-admin from 11.11.1 to 14.5.0

Release notes

Sourced from firebase-admin's releases.

Firebase Admin Node.js SDK v14.5.0

New Features

  • feat(fcm): migrate topic subscriptions to FCM v1 API (#3211)

Miscellaneous

  • [chore] Release 14.5.0 (#3260)
  • build(deps-dev): bump sinon and @​types/sinon (#3254)
  • build(deps): bump google-auth-library from 10.9.0 to 11.1.0 (#3255)
  • build(deps): bump jwks-rsa from 4.0.1 to 4.1.0 (#3259)

Firebase Admin Node.js SDK v14.4.0

New Features

  • feat(ml): deprecate Machine Learning APIs (#3245)

Miscellaneous

  • [chore] Release 14.4.0 (#3252)
  • build(deps-dev): bump @​types/lodash from 4.17.24 to 4.17.25 (#3256)
  • upgrade @​google-cloud/storage and @​google-cloud/firestore to the most recent version (#3253)
  • build(deps): bump fast-uri from 3.1.5 to 3.1.7 (#3249)
  • build(deps-dev): bump browserslist from 4.28.4 to 4.28.9 (#3250)
  • build(deps-dev): bump nock from 14.0.16 to 14.0.17 (#3248)
  • build(deps): bump @​fastify/busboy from 3.2.0 to 3.2.2 (#3246)
  • chore(docs): add custom @excludeFromDocs tag to filter generated docs (#3206)
  • build(deps): bump @​firebase/database-compat from 2.1.4 to 2.1.7 (#3242)
  • build(deps-dev): bump @​firebase/app-compat from 0.5.15 to 0.5.17 (#3243)
  • build(deps-dev): bump @​firebase/auth-types from 0.13.1 to 0.13.2 (#3244)
  • chore(ml): Skip flaky ML tests blocking nightly builds (#3241)
  • build(deps): bump brace-expansion (#3240)
  • build(deps-dev): bump @​firebase/auth-compat from 0.6.8 to 0.6.9 (#3238)

Firebase Admin Node.js SDK v14.3.0

New Features

  • feat(dataconnect): update "X-Client-Version" header value to match the Node/Admin/{version} convention (#3230)
  • feat(dataconnect): add "X-Firebase-Sqlconnect-Affinity" header for GSLB soft stickiness (#3227)
  • feat(dataconnect): add "X-Client-Version" header for cloud monitoring (#3222)

Miscellaneous

  • [chore] Release 14.3.0 (#3237)
  • chore(deps): upgrade @google-cloud and typescript-eslint dependencies (#3236)
  • build(deps-dev): bump @​types/node from 26.1.1 to 26.2.0 (#3231)
  • build(deps-dev): bump @​microsoft/api-extractor from 7.58.9 to 7.58.12 (#3224)
  • build(deps): bump fast-uri from 3.1.4 to 3.1.5 (#3228)

... (truncated)

Commits
  • 50ab250 [chore] Release 14.5.0 (#3260)
  • f95737b feat(fcm): migrate topic subscriptions to FCM v1 API (#3211)
  • 1163924 build(deps-dev): bump sinon and @​types/sinon (#3254)
  • df9a148 build(deps): bump google-auth-library from 10.9.0 to 11.1.0 (#3255)
  • 7505a1c build(deps): bump jwks-rsa from 4.0.1 to 4.1.0 (#3259)
  • 7cf116b [chore] Release 14.4.0 (#3252)
  • 72994c4 build(deps-dev): bump @​types/lodash from 4.17.24 to 4.17.25 (#3256)
  • c151174 upgrade @​google-cloud/storage and @​google-cloud/firestore to the most recent...
  • cda2de9 build(deps): bump fast-uri from 3.1.5 to 3.1.7 (#3249)
  • cb89261 build(deps-dev): bump browserslist from 4.28.4 to 4.28.9 (#3250)
  • Additional commits viewable in compare view

Updates firebase-functions from 4.4.0 to 4.9.0

Release notes

Sourced from firebase-functions's releases.

v4.9.0

  • Add new 2nd gen Firestore auth context triggers. (#1519)

v4.8.2

Fix bug with CORS options for an array of one string (#1544)

v4.8.1

Fix bug where 1st gen functions eventually fail with stack too deep (#1540) Make simple CORS options static for improved debugability (#1536)

v4.8.0

Add onInit callback function for global variable initialization (#1531)

v4.7.0

  • Fixes access on deeply nested, nonexistent property. (#1432)
  • Add IteratedDataSnapshot interface to match with firebase admin v12 (#1517).
  • Make bucket parameterizeable in storage functions (#1518)
  • Introduce helper library for select and multi-select input (#1518)

v4.6.0

  • Wrap 2nd gen onCall functions with trace context. (#1491)
  • Bump peer depdencies for firebase-admin to support 12.0.0. (#1509)

v4.5.0

  • Remove HTTP server shutdown message. (#1457)
  • Add features to task queue functions. (#1423)
  • Add traces to V2 Firestore trigger logs. (#1440)
  • Fix incorrectly parsed timestamps in auth blocking functions. (#1472)
  • Add recaptcha verdict support for auth blocking functions (#1458)

v4.4.1

  • Update list of supported regions for 2nd Gen Functions. (#1402)
  • Fix bug where log message on structured log was being overwritten (#1416)
  • Fix bug where exists() should return true for falsy values like 0, "" (#1410)
Commits

Updates firebase-functions-test from 3.1.0 to 3.5.0

Release notes

Sourced from firebase-functions-test's releases.

v3.5.0

  • feat: add SecretManager mocking (#265)

v3.4.1

  • Support FIRESTORE_EMULATOR_HOST env var for Firestore triggers (#184)

v3.4.0

  • Explicitly import from the v1 namespace to unbreak firebase-functions 6.x (#243).
  • Explciitly import from the v2 namespace so that #243 doesn't break firebase-functions versions below 6.x (#252)
  • Also adds firebase-admin 13.x as a supported version in peer-deps (#252)

v3.3.0

  • Add support for v2 callable functions (#229).

v3.2.0

  • Add support for testing Firestore 2nd gen Auth Context triggers. (#227)

v3.1.1

  • Extend support for firebase-admin@12 (#220)
Commits
  • 0309bed 3.5.0
  • cd75dd1 updates npm publish token (#306)
  • b5f9c93 using github token in clone URL in Pubish Script (#305)
  • 762a4ac chore: use Secret Manager for cloning and add changelog for v3.5.0 (#303)
  • 4208282 chore: update release scripts and rotate npmrc to match firebase-func… (#302)
  • fb6cd5c feat: add SecretManager mocking (#265)
  • c38afad chore: run npm audit fix (#267)
  • d5634c5 fix(workflows): update actions/cache to v4 as v1 obsolete (#262)
  • a4d2de0 [firebase-release] Removed change log and reset repo after 3.4.1 release
  • 12dd9cf 3.4.1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…nd firebase-functions-test

Bumps [@grpc/grpc-js](https://github.com/grpc/grpc-node) to 1.14.5 and updates ancestor dependencies [@grpc/grpc-js](https://github.com/grpc/grpc-node), [firebase-admin](https://github.com/firebase/firebase-admin-node), [firebase-functions](https://github.com/firebase/firebase-functions) and [firebase-functions-test](https://github.com/firebase/firebase-functions-test). These dependencies need to be updated together.


Updates `@grpc/grpc-js` from 1.8.21 to 1.14.5
- [Release notes](https://github.com/grpc/grpc-node/releases)
- [Commits](https://github.com/grpc/grpc-node/compare/@grpc/grpc-js@1.8.21...@grpc/grpc-js@1.14.5)

Updates `firebase-admin` from 11.11.1 to 14.5.0
- [Release notes](https://github.com/firebase/firebase-admin-node/releases)
- [Changelog](https://github.com/firebase/firebase-admin-node/blob/main/CHANGELOG.md)
- [Commits](firebase/firebase-admin-node@v11.11.1...v14.5.0)

Updates `firebase-functions` from 4.4.0 to 4.9.0
- [Release notes](https://github.com/firebase/firebase-functions/releases)
- [Commits](firebase/firebase-functions@v4.4.0...v4.9.0)

Updates `firebase-functions-test` from 3.1.0 to 3.5.0
- [Release notes](https://github.com/firebase/firebase-functions-test/releases)
- [Changelog](https://github.com/firebase/firebase-functions-test/blob/master/CHANGELOG.md)
- [Commits](firebase/firebase-functions-test@v3.1.0...v3.5.0)

---
updated-dependencies:
- dependency-name: "@grpc/grpc-js"
  dependency-version: 1.14.5
  dependency-type: indirect
- dependency-name: firebase-admin
  dependency-version: 14.5.0
  dependency-type: direct:production
- dependency-name: firebase-functions
  dependency-version: 4.9.0
  dependency-type: direct:production
- dependency-name: firebase-functions-test
  dependency-version: 3.5.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants