chore(deps): update firebase-functions to v7

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
firebase-functions	6.6.0 → 7.3.2

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

firebase/firebase-functions (firebase-functions)

v7.3.2

Compare Source

• chore: update dependencies to close CVEs (#​1936)
• Fix an issue with npm labeling in the deployment pipeline. (#​1937)
• chore: improve release script (#​1932)

v7.3.0

Compare Source

• Bringing in lifecycle triggers into docgen. (#​1931)
• fix: Remove false warning when using Expression in cors option (#​1802)
• feat: Add requiresRole developer API for declarative security support and automatic Manifest extraction (#​1908)
• Validate literal timeoutSeconds values per v2 trigger type (0-540s for events, 0-3600s for HTTPS/callable, 0-1800s for task queues, 0-7s for identity functions) so misconfigured values fail at function-definition or manifest-extraction time instead of at deploy time. (#​1877)
• feat: Add requiresAPI function to allow declaring Google Cloud API dependencies in code. (#​1900)
• fix(v1): Call onInit for schedule.onRun functions (#​1801)
• feat: Add support to declare lifecycle hooks in functions. (#​1915)
• fix(cors): Fix issue using Params to set CORS allowed hosts (#​1903)
• fix(v2): Fix event data unpacking for auth event triggers (#​1923)
• feat: Add "v2/lifecycle" and "lifecycle" import paths for lifecycle hooks (#​1926)
• chore: revamp deploy pipeline to be stateless. Changes must now include relnotes (#​1929)
• chore: move the last encrypted keys into Google Cloud Secrets Manager (#​1929)

v7.2.5

Compare Source

Internal fixes

v7.2.4

Compare Source

-Internal Improvements #​1864

v7.2.3

Compare Source

• Accept BooleanParams in CallableOptions (#​1854)
• rotate the npmrc key to robot account (#​1857)

v7.2.2

Compare Source

• Allow v2 auth blocking functions to use run.app or cloudfunctions.net URLs (#​1831)

v7.2.1

Compare Source

• Fix issue where v1 firestore paths would not handle literals with leading or trailing slashes (#​1829)
• transformed string exprssions (currenlty an internal tool) now propagate across interpolated strings (#​1829)

v7.2.0

Compare Source

• All V1 configuration (e.g. pubsub topics) can be set with params. (#​1820)
• String expressions can now be used in string interpolation with the expr tag. (#​1820) E.g.

  const schedule = expr`every ${intervalParam} minutes`;

• Secret params now support a label and/or description. (#​1820)
• Add support for VPC direct connect (network interfaces) (#​1823)
• Realtime database events in the v2 SDK now provide auth context (#​1770)

v7.1.1

Compare Source

-Internal Docgen improvements

v7.1.0

Compare Source

• Add an onGraphRequest method. (#​1784, #​1818)

v7.0.6

Compare Source

Internal improvements (#​1814)

v7.0.5

Compare Source

• Fixed issue with missing dependency on graphql. (#​1795)
• Internal improvements (#​1800)

v7.0.4

Compare Source

v7.0.3

Compare Source

• Internal improvements.

v7.0.2

Compare Source

• Export param types (SecretParam, StringParam, etc.) from firebase-functions/params for type annotations. (#​1789)
• Remove attemptDeadlineSeconds in v2 scheduled functions. (#​1776)
• Allow JsonSecretParam in function secrets option arrays. (#​1788)

v7.0.1

Compare Source

• Fix "Dual-Package Hazard" for parameterized configuration in ESM projects. (#​1780)

v7.0.0

Compare Source

• BREAKING: Drop support for Node.js 16. Minimum supported version is now Node.js 18. (#​1747)
• BREAKING: Remove deprecated functions.config() API. Use params module for environment variables instead. (#​1748)
• BREAKING: Upgrade to TypeScript v5 and target ES2022. (#​1746)
• BREAKING: Unhandled errors in async onRequest handlers in the Emulator now return a 500 error immediately. (#​1755)
• Add support for ESM (ECMAScript Modules) alongside CommonJS. (#​1750)
• Add onMutationExecuted() trigger for Firebase Data Connect. (#​1727)
• BREAKING: Rename v1 Event to LegacyEvent to avoid api-extractor conflict. (#​1767)

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • Between 12:00 PM and 12:59 PM (* 12 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 37.85%. Comparing base (75268a5) to head (033641d).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #679   +/-   ##
=======================================
  Coverage   37.85%   37.85%           
=======================================
  Files         194      194           
  Lines        7412     7412           
=======================================
  Hits         2806     2806           
  Misses       4606     4606           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.