[Snyk] Upgrade @firebase/app from 0.9.29 to 0.10.6 #105

tachibana-shin · 2024-08-03T08:31:19Z

Snyk has created this PR to upgrade @firebase/app from 0.9.29 to 0.10.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 121 versions ahead of your current version.
The recommended version was released on a month ago.

Release notes

Package name: @firebase/app

0.10.6 - 2024-07-03
0.10.6-canary.fd8bd4b02 - 2024-07-16
0.10.6-canary.f58d48cd4 - 2024-07-16
0.10.6-canary.d752e8096 - 2024-07-10
0.10.6-canary.9cd3c1eca - 2024-07-10
0.10.6-canary.84fe88079 - 2024-07-10
0.10.6-canary.52f8deb1d - 2024-07-03
0.10.6-canary.4b4db85ff - 2024-07-15
0.10.6-canary.1b9d95e5a - 2024-07-19
0.10.6-canary.025f2a103 - 2024-07-18
0.10.6-20240703135951 - 2024-07-03
0.10.6-20240702143745 - 2024-07-02
0.10.5 - 2024-05-27
0.10.5-eap-firestore-backfiller.87babf60c - 2024-06-25
0.10.5-canary.f01806221 - 2024-07-01
0.10.5-canary.ed1c99379 - 2024-06-28
0.10.5-canary.ecadbe380 - 2024-06-28
0.10.5-canary.e7260e23d - 2024-06-25
0.10.5-canary.ca4139101 - 2024-06-20
0.10.5-canary.c60aac1de - 2024-07-02
0.10.5-canary.b09a267ba - 2024-06-24
0.10.5-canary.a90255a27 - 2024-06-05
0.10.5-canary.92a39b5ba - 2024-06-04
0.10.5-canary.8360014ac - 2024-06-21
0.10.5-canary.7c256b420 - 2024-05-29
0.10.5-canary.766a53ea9 - 2024-07-02
0.10.5-canary.5e16ccfb3 - 2024-05-30
0.10.5-canary.5c75bec14 - 2024-07-01
0.10.5-canary.576c1b1f7 - 2024-06-18
0.10.5-canary.436331ac4 - 2024-06-04
0.10.5-canary.3df57edf0 - 2024-05-31
0.10.5-canary.226fe8aa5 - 2024-06-27
0.10.5-canary.192561b15 - 2024-06-28
0.10.5-canary.08a3a936c - 2024-05-27
0.10.4 - 2024-05-20
0.10.4-canary.aa060a7f6 - 2024-05-22
0.10.4-canary.7381f21a3 - 2024-05-20
0.10.4-canary.52d626655 - 2024-05-23
0.10.4-canary.4f157b486 - 2024-05-23
0.10.4-canary.3883133c3 - 2024-05-21
0.10.4-canary.370b6c8b7 - 2024-05-23
0.10.4-canary.0af23e02e - 2024-05-23
0.10.3 - 2024-05-13
0.10.3-dataconnect-preview.877f8b7d0 - 2024-05-13
0.10.3-dataconnect-preview.388b61c7e - 2024-05-13
0.10.3-canary.f66769cca - 2024-05-15
0.10.3-canary.9cbb1845e - 2024-05-14
0.10.3-canary.8fb372afb - 2024-05-13
0.10.3-canary.43a8d99d2 - 2024-05-16
0.10.3-canary.2ce95696f - 2024-05-14
0.10.3-20240509155850 - 2024-05-09
0.10.3-20240508224036 - 2024-05-08
0.10.3-20240508213348 - 2024-05-08
0.10.2 - 2024-04-25
0.10.2-dataconnect-preview.f2ddc3d7b - 2024-05-08
0.10.2-dataconnect-preview.f2a1a4bfb - 2024-05-08
0.10.2-dataconnect-preview.b8e015c81 - 2024-05-08
0.10.2-dataconnect-preview.81ee5169c - 2024-05-09
0.10.2-dataconnect-preview.4f89ef789 - 2024-05-08
0.10.2-dataconnect-preview.42eb5e521 - 2024-05-08
0.10.2-dataconnect-preview.323fdc1b8 - 2024-05-09
0.10.2-canary.f631553c3 - 2024-05-06
0.10.2-canary.f25b9e53e - 2024-05-02
0.10.2-canary.e80b80738 - 2024-05-08
0.10.2-canary.ab883d016 - 2024-05-09
0.10.2-canary.7709f1016 - 2024-04-25
0.10.2-canary.506b8a6ab - 2024-05-08
0.10.2-canary.4b49630c7 - 2024-05-01
0.10.2-canary.14f9da66f - 2024-05-02
0.10.1 - 2024-04-11
0.10.1-vertexai-preview.1aadc47ed - 2024-04-22
0.10.1-passkey-preview.103ead202 - 2024-05-20
0.10.1-canary.f24c9532a - 2024-04-22
0.10.1-canary.ef3039ba8 - 2024-04-14
0.10.1-canary.e1a7764cf - 2024-04-24
0.10.1-canary.db1ad5a82 - 2024-04-11
0.10.1-canary.d1eae3a10 - 2024-04-17
0.10.1-canary.c9a9babce - 2024-04-12
0.10.1-canary.be59b952a - 2024-04-12
0.10.1-canary.bd12e83cd - 2024-04-11
0.10.1-canary.b74d8a211 - 2024-04-20
0.10.1-canary.aa412d3b4 - 2024-04-15
0.10.1-canary.84f9ff008 - 2024-04-18
0.10.1-canary.826b57130 - 2024-04-11
0.10.1-canary.7db2e04c6 - 2024-04-11
0.10.1-canary.71ab2f536 - 2024-04-19
0.10.1-canary.6333607fe - 2024-04-18
0.10.1-canary.62a20ff98 - 2024-04-22
0.10.1-canary.55fef6d62 - 2024-04-18
0.10.1-canary.55435c9f3 - 2024-04-15
0.10.1-canary.4be78a3d2 - 2024-04-15
0.10.1-canary.4a8faddbf - 2024-04-11
0.10.1-canary.44a66b91d - 2024-04-18
0.10.1-canary.399ae5ab9 - 2024-04-18
0.10.1-canary.36b283f3f - 2024-04-23
0.10.1-canary.07b2dc7df - 2024-04-15
0.10.1-canary.02b4ea928 - 2024-04-19
0.10.1-canary.337638470 - 2024-04-17
0.10.1-canary.224419457 - 2024-04-18
0.10.1-20240410213044 - 2024-04-10
0.10.1-20240409134135 - 2024-04-09
0.10.0 - 2024-03-28
0.10.0-vertexai-preview.f25ccbbaf - 2024-04-08
0.10.0-vertexai-preview.cdcc49eb9 - 2024-04-04
0.10.0-vertexai-preview.597bf4fbd - 2024-04-04
0.10.0-vertexai-preview.3d11ecc97 - 2024-04-10
0.10.0-vertex-preview.8b70fc586 - 2024-04-04
0.10.0-canary.fe09d8338 - 2024-04-08
0.10.0-canary.f1a57d00d - 2024-04-08
0.10.0-canary.b64b947b8 - 2024-04-03
0.10.0-canary.ad8d5470d - 2024-04-10
0.10.0-canary.a6fa54417 - 2024-04-09
0.10.0-canary.9297ef398 - 2024-04-09
0.10.0-canary.6d31930b3 - 2024-04-02
0.10.0-canary.666dddae0 - 2024-03-29
0.10.0-canary.6393c9592 - 2024-04-10
0.10.0-canary.42fcdfe4c - 2024-03-28
0.10.0-canary.36b261c65 - 2024-04-10
0.10.0-canary.13ddddf52 - 2024-04-10
0.10.0-canary.0068ed5ab - 2024-04-09
0.10.0-20240326182825 - 2024-03-26
0.9.29 - 2024-03-14

from @firebase/app GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @firebase/app from 0.9.29 to 0.10.6. See this package in npm: @firebase/app See this project in Snyk: https://app.snyk.io/org/tachibana-shin/project/fc75aa5c-072c-48bf-8fbb-6429386c87c4?utm_source=github&utm_medium=referral&page=upgrade-pr

stackblitz · 2024-08-03T08:31:22Z

Run & review this pull request in StackBlitz Codeflow.

codesandbox · 2024-08-03T08:31:22Z

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

socket-security · 2024-08-03T08:33:33Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@firebase/[email protected]	Transitive: environment	`+5`	2.12 MB	google-wombot
npm/[email protected]	None	`+8`	108 kB	doowb
npm/[email protected]	network, shell, unsafe	`+3`	8.81 MB	davidortner
npm/[email protected]	None	`0`	20.2 MB	hlsjs-ci
npm/[email protected]	Transitive: network	`+5`	955 kB	feedic
npm/[email protected]	None	`0`	53.8 kB	jaffathecake
npm/[email protected]	None	`0`	120 kB	meikidd
npm/[email protected]	None	`0`	38.6 kB	dankogai
npm/[email protected]	None	`0`	26.2 kB	carhartl
npm/[email protected]	eval, filesystem, network, shell, unsafe Transitive: environment	`+45`	8.27 MB	domenic
npm/[email protected]	None	`0`	262 kB	nguyenthanh1995
npm/[email protected]	None	`0`	176 kB	pieroxy
npm/[email protected]	None	`0`	20.4 kB	tachibana-shin
npm/[email protected]	None	`0`	8.23 kB	sindresorhus
npm/[email protected]	None	`0`	54.3 kB	goto-bus-stop
npm/[email protected]	None	`0`	37.1 kB	iendeavor
npm/[email protected]	None	`0`	18.1 kB	prazdevs
npm/[email protected]	environment Transitive: filesystem	`+1`	418 kB	posva
npm/[email protected]	environment, filesystem, unsafe	`0`	11.2 MB	prettier-bot
npm/[email protected]	None	`0`	524 kB	danimoh
npm/[email protected]	filesystem Transitive: environment	`+6`	552 kB	soldair
npm/[email protected]	None	`0`	10.7 MB	rstoenescu
npm/[email protected]	network	`0`	21 kB	soda
npm/[email protected]	network	`+3`	2.4 MB	bobby-brennan
npm/[email protected]	filesystem, unsafe Transitive: environment	`+15`	5.89 MB	sassbot
npm/[email protected]	None	`0`	16 kB	nfriedly
npm/[email protected]	None	`0`	7.76 kB	jprichardson
npm/[email protected]	None	`0`	43.2 kB	75lb
npm/[email protected]	environment, filesystem, network	`+6`	574 kB	kiwicopple
npm/[email protected]	None	`0`	4.66 MB	nolimits4web
npm/[email protected]	None	`0`	165 kB	yuion
npm/[email protected]	None	`0`	90.8 kB	franckldx
npm/[email protected]	Transitive: environment, filesystem, network, shell	`+26`	241 MB	hirokiosame
npm/[email protected]	None	`0`	21.9 MB	typescript-bot
npm/[email protected]	None	`0`	113 kB	faisalman
npm/[email protected]	filesystem Transitive: environment	`+20`	1.09 MB	antfu
npm/[email protected]	Transitive: environment	`+3`	191 kB	antfu
npm/[email protected]	environment, filesystem	`+33`	1.81 MB	antfu
npm/[email protected]	None	`0`	123 kB	ctavan
npm/[email protected]	None	`0`	2.37 MB	heshang521
npm/[email protected]	None	`+1`	14.6 kB	alphatr
npm/[email protected]	filesystem Transitive: environment	`+3`	133 kB	antfu
npm/[email protected]	environment, eval, filesystem, network, shell, unsafe	`+32`	247 MB	vitebot
npm/[email protected]	environment, eval Transitive: filesystem, unsafe	`+9`	2.92 MB	oreanno
npm/[email protected]	None	`0`	18 kB	hoaitx
npm/[email protected]	environment	`+1`	1.67 MB	kazupon
npm/[email protected]	Transitive: filesystem	`+1`	156 kB	john60676
npm/[email protected]	environment	`0`	826 kB	posva
npm/[email protected]	None	`0`	4.85 kB	johnsoncodehk
npm/[email protected]	None	`0`	2.21 MB	posva, soda, yyx990803
npm/[email protected]	None	`0`	2.29 MB	voorjaar
npm/[email protected]	filesystem Transitive: environment, eval, shell	`+39`	6.87 MB	tropicadri
npm/[email protected]	environment	`0`	77.7 kB	tropicadri
npm/[email protected]	environment	`0`	290 kB	tropicadri
npm/[email protected]	environment	`+1`	326 kB	tropicadri
npm/[email protected]	environment	`0`	354 kB	tropicadri
npm/[email protected]	environment	`0`	259 kB	tropicadri
npm/[email protected]	environment, network	`0`	377 kB	tropicadri

🚮 Removed packages: npm/@firebase/[email protected]

View full report↗︎

socket-security · 2024-08-03T08:33:41Z

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source	CI
Install scripts	npm/[email protected]	Install script: postinstall Source: `node -e "try{require('./postinstall')}catch(e){}"`	`package.json`	🚫
Install scripts	npm/[email protected]	Install script: postinstall Source: `node lib/install.js`	`package.json`	🚫
Install scripts	npm/[email protected]	Install script: postinstall Source: `node scripts/postinstall`	`package.json`	🚫
Install scripts	npm/[email protected]	Install script: postinstall Source: `node -e "try{require('./scripts/postinstall.js')}catch(e){}"`	`package.json`	🚫
Install scripts	npm/[email protected]	Install script: postinstall Source: `node scripts/postinstall.js`	`package.json`	🚫

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@SocketSecurity ignore npm/[email protected]
@SocketSecurity ignore npm/[email protected]
@SocketSecurity ignore npm/[email protected]
@SocketSecurity ignore npm/[email protected]
@SocketSecurity ignore npm/[email protected]

tachibana-shin merged commit 74ce898 into main Aug 5, 2024
14 of 15 checks passed

tachibana-shin deleted the snyk-upgrade-7ed860c9e1b2b1d6a82cf28a3f36346a branch August 5, 2024 09:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade @firebase/app from 0.9.29 to 0.10.6 #105

[Snyk] Upgrade @firebase/app from 0.9.29 to 0.10.6 #105

tachibana-shin commented Aug 3, 2024

stackblitz bot commented Aug 3, 2024

codesandbox bot commented Aug 3, 2024

socket-security bot commented Aug 3, 2024

socket-security bot commented Aug 3, 2024

[Snyk] Upgrade @firebase/app from 0.9.29 to 0.10.6 #105

[Snyk] Upgrade @firebase/app from 0.9.29 to 0.10.6 #105

Conversation

tachibana-shin commented Aug 3, 2024

Snyk has created this PR to upgrade @firebase/app from 0.9.29 to 0.10.6.

stackblitz bot commented Aug 3, 2024

codesandbox bot commented Aug 3, 2024

Review or Edit in CodeSandbox

socket-security bot commented Aug 3, 2024

socket-security bot commented Aug 3, 2024

Next steps