Skip to content

Bump node-forge and firebase-tools - #49

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-308fcf24fd
Open

Bump node-forge and firebase-tools#49
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-308fcf24fd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 27, 2025

Copy link
Copy Markdown

Removes node-forge. It's no longer used after updating ancestor dependency firebase-tools. These dependencies need to be updated together.

Removes node-forge

Updates firebase-tools from 7.12.1 to 14.26.0

Release notes

Sourced from firebase-tools's releases.

v14.26.0

  • Add support for nodejs24 (beta) runtime for Cloud Functions for Firebase. (#9475)
  • Adds listServices and also defines trigger within runv2.ts (#9482)
  • Updates the firebase init functions template to use firebase-functions 7.0.0 (#9496)
  • Updated to v2.17.2 of the Data Connect emulator, which fixes a bug with handling of optional enum lists in generated Flutter SDKs. (#9391)

v14.25.1

  • Fixed an issue that was causing the MCP server to fail to start when run from directories with deeply nested children.

v14.25.0

  • Added Node 24 support.
  • Updated superstatic to v10.
  • Fixed a crash during parallel deployments when buildConfig is empty (#9455)
  • [Added] support for new google-genai plugin during init genkit (#8957)
  • Updated to v2.17.1 of the Data Connect emulator, which fixes an admin SDK bug for operation without argument #9449 (#9454).
  • Fixed "Precondition failed" error when updating GCFv2 functions in a FAILED state without code changes.

v14.24.2

  • Fixes MCP server issue where googleapis is not available. (#9443)

v14.24.1

  • Fixed issue where MCP server was blocked by console.log

v14.24.0

  • Adds 2nd gen Firebase Data Connect triggers to firebase deploy (#9394).
  • Upgrades @google-cloud/pubsub to v5 (#9428).
  • Updated to v2.17.0 of the Data Connect emulator, which includes internal improvements and now supports Generated Admin SDKs (#9430).

v14.23.0

  • Fix the __name__ normalization of vector indexes for Firestore standard edition databases.
  • Fixed an issue where the emulator would fail to start when using firebase-functions v7+ (#9401).
  • Added functions.list_functions as a MCP tool (#9369)
  • Added AI Logic to firebase init CLI command and firebase_init MCP tool. (#9185)
  • Improved error messages for Firebase AI Logic provisioning during 'firebase init' (#9377)
  • Fixed issue where 'init hosting' failed to prompt for the public directory and set up Hosting files (#9403)
  • Added appdistribution:testcases:export and appdistribution:testcases:import (#9397)
  • Updated to v2.16.0 of the Data Connect emulator, which includes internal improvements.
  • Data Connect now allows executing a valid query / operation even if the other operations are invalid. (This toleration provides convenience on a best-effort basis. Some errors like invalid syntax can still cause the whole request to be rejected.)
  • Fixed enum list deserialization in Data Connect generated Dart SDKs.
  • Added GraphQL __typename support in Data Connect.
  • Support enum values in Data Connect CEL expressions.
  • Support _id, a global ID field in Data Connect.
  • Updated to v0.8.17 of the Pub/Sub emulator, which includes vulnerability fixes.

v14.22.0

  • Added 'hosting' to the 'firebase_init' MCP tool (#9375)
  • Revert logic to abort function deploys in non-interactive mode when secrets are missing. (#9378)

v14.21.0

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [node-forge](https://github.com/digitalbazaar/forge). It's no longer used after updating ancestor dependency [firebase-tools](https://github.com/firebase/firebase-tools). These dependencies need to be updated together.


Removes `node-forge`

Updates `firebase-tools` from 7.12.1 to 14.26.0
- [Release notes](https://github.com/firebase/firebase-tools/releases)
- [Changelog](https://github.com/firebase/firebase-tools/blob/master/CHANGELOG.md)
- [Commits](firebase/firebase-tools@v7.12.1...v14.26.0)

---
updated-dependencies:
- dependency-name: node-forge
  dependency-version: 
  dependency-type: indirect
- dependency-name: firebase-tools
  dependency-version: 14.26.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants