[Snyk] Upgrade firebase-functions from 3.11.0 to 3.24.1

[NOUIY]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade firebase-functions from 3.11.0 to 3.24.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 31 versions ahead of your current version.
• The recommended version was released a year ago, on 2022-09-30.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-NODEFORGE-598677	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Prototype Poisoning SNYK-JS-QS-3153490	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Open Redirect SNYK-JS-EXPRESS-6474509	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-FIREBASEUTIL-1038324	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: firebase-functions

• 3.24.1 - 2022-09-30
• 3.24.0 - 2022-09-21
• 3.23.0 - 2022-08-31
• 3.22.0 - 2022-06-29
• 3.21.2 - 2022-05-17
• 3.21.1 - 2022-05-11
• 3.21.0 - 2022-05-05
• 3.20.1 - 2022-04-14
• 3.20.0 - 2022-04-04
• 3.19.0 - 2022-03-16
• 3.18.1 - 2022-02-18
• 3.18.0 - 2022-02-11
• 3.17.2 - 2022-02-07
• 3.17.1 - 2022-02-04
• 3.17.0 - 2022-02-03
• 3.16.0 - 2021-10-28
• 3.15.7 - 2021-09-20
• 3.15.6 - 2021-09-15
• 3.15.5 - 2021-09-01
• 3.15.4 - 2021-08-16
• 3.15.3 - 2021-08-13
• 3.15.2 - 2021-08-12
• 3.15.1 - 2021-08-11
• 3.15.0 - 2021-08-11
• 3.14.1 - 2021-05-17
• 3.14.0 - 2021-05-12
• 3.13.3 - 2021-05-17
• 3.13.2 - 2021-02-22
• 3.13.1 - 2021-01-15
• 3.13.0 - 2020-12-07
• 3.12.0 - 2020-11-30
• 3.11.0 - 2020-08-21

from firebase-functions GitHub release notes

Commit messages

Package name: firebase-functions

• e4bda7d 3.24.1
• 3c5392d Hide documentation for in-app feedback (Remove RelativeLayout from Firestore quickstart firebase/quickstart-android#1245)
• cc6e28e Fix bug where function configuration with null couldn't be deployed. (refactor(auth, analytics): remove RelativeLayout from xml files firebase/quickstart-android#1246)
• cf27ac6 Adding required --project flag to v2 docgen script. (why the in app message appears only when the button is pressed first time firebase/quickstart-android#1239)
• 1ac04ad fix tsdoc comments (ปัญหาเกี่ยวกับรหัสเริ่มต้นอย่างรวดเร็ว firebase/quickstart-android#1240)
• bd0fcbc [firebase-release] Removed change log and reset repo after 3.24.0 release
• e191af7 3.24.0
• b93e397 Don't delete fields on a non-breaking change release (Create || is short-circuiting; isAdmin called only if isAuthor: Juan D Chavez == … firebase/quickstart-android#1238)
• 65e66a2 Converting alert type and app id to camel case in the CloudEvent (chore(deps): bump date-and-time from 0.14.1 to 0.14.2 in /functions/functions firebase/quickstart-android#1236)
• c18e832 Adds performance monitoring triggers to v2 alerts (Auto-update dependencies. firebase/quickstart-android#1223)
• 7783ae6 [firebase-release] Removed change log and reset repo after 3.23.0 release
• 941704d 3.23.0
• d592847 Insert Expression and Field types into GlobalOptions and inheriting types (Auto-update dependencies. firebase/quickstart-android#1171)
• 7057c4d fix comment (Auto-update dependencies. firebase/quickstart-android#1211)
• eed7d59 Add v2 Schedule Triggers (Auto-update dependencies. firebase/quickstart-android#1177)
• c0e0361 Change payload based on API council feedback: (FATAL EXCEPTION: Firebase-Messaging-Intent-Handle firebase/quickstart-android#1209)
• f9ecee4 Fixes a bug that disallowed setting customClaims and/or sessionClaims in blocking functions (Auto-update dependencies. firebase/quickstart-android#1199)
• f751f5c Update `InAppFeedbackPayload` (Readme-edits firebase/quickstart-android#1187)
• 0e4ffb6 Make `screenshotUris` non-optional. (Quickstart updates firebase/quickstart-android#1188)
• d22ff20 Export Auth types to have them show up in the reference docs. (suggested change firebase/quickstart-android#1186)
• 6edbb95 Automatically run integration test on PR merge (Auto-update dependencies. firebase/quickstart-android#1182)
• 1877e98 Fix integration tests (Remove setCurrentScreen() calls firebase/quickstart-android#1179)
• 9b6da2d Fixing path I should have noticed in review. (refactor(admob, analytics): replace deprecated methods firebase/quickstart-android#1176)
• 733e900 Update api-documenter to the latest version supporting new project (chore: test modular android action firebase/quickstart-android#1175)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs