[Snyk] Upgrade firebase-admin from 8.8.0 to 8.13.0

[ismaelgansonre]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade firebase-admin from 8.8.0 to 8.13.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.

• The recommended version was released on 4 years ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WEBSOCKETEXTENSIONS-570623	517	Proof of Concept
	Prototype Pollution SNYK-JS-GRPCGRPCJS-1038818	517	Proof of Concept

Release notes

Package name: firebase-admin

• 8.13.0 - 2020-06-29
  

  New Features

  • feat(rc): Add Remote Config Version Management API (#920)

  Bug Fixes

  • fix(auth): Migrated IAM sign endpoint to iamcredentials.googleapis.com (#916)
  • fix(auth): Fixing flaky deleteUsers() integration tests (#917)
  • fix: Upgraded node-forge and jsonwebtoken dependencies (#912)
  • fix(auth): Add interfaces for UserProviderRequest and Metadata used in UserImportRecord (#909)
  • fix: Fixed faulty metadata for the send-tweet Action (#908)
  • fix(auth): Properly parse the lastRefreshTime. (#888)

  Miscellaneous

  • [chore] Release 8.13.0 (#925)
  • Add integration tests for RC manage version operations (#914)
  • Add another missing RC type to toc.yaml (#924)
  • Add new RC types in toc.yaml (#923)
  • Fixed a flaky auth integration test by retrying the GetUser() API call (#907)
  • Bump websocket-extensions from 0.1.3 to 0.1.4 (#900)
  • Fixing Firebase ML integration tests (#899)
  • fixing tests with unhandled promises (#894)
  • Rectified issues in comments for NotificationMessagePayload (#879)
  • chore: Running CI workflow on pull_request (#886)
• 8.12.1 - 2020-05-08
  

  Miscellaneous

  • [chore] Release 8.12.1 (#883)
  • Mark UserMetadata::lastRefreshTime as optional. (#881)
  • Remove type aliases from toc.yaml (#877)
• 8.12.0 - 2020-05-06
  

  New Features

  • feat(auth): Add bulk get/delete methods (#726)

  Miscellaneous

  • [chore] Release 8.12.0 (#878)
  • Bump jquery from 3.4.1 to 3.5.0 (#873)
  • Fixed lint (#868)
  • Refines UserRecord.customClaims type. (#866)
  • Generate camelcase doc paths for machineLearning module (#863)
  • Fix typo in release.yml (#862)
• 8.11.0 - 2020-04-22
  

  New Features

  • feat: Remote Config Management API (#845)
  • feat(machine-learning): Adding Firebase ML management APIs (#850)

  Bug Fixes

  • fix(rtdb): Upgraded @ firebase/database dependency to latest available (#859)
  • fix(auth): Defines missing DecodedIdToken types. (#852)
  • fix(auth): Fixing UserImportRecord typings declaration (#835)

  Miscellaneous

  • [chore] Release 8.11.0 (#861)
  • Update toc.yaml (#860)
  • Update Database types (#830)
  • Bump minimist from 1.2.0 to 1.2.3 (#839)
  • chore: Cleaning up package verification scripts (#822)
  • chore: Splitting the index.d.ts file into smaller files (#751)
  • Fixing Android notification options descriptions (#820)
  • Bump acorn from 6.1.1 to 6.4.1 (#815)
• 8.10.0 - 2020-03-12
  

  New Features

  • feat(auth): Multi-factor Auth support with SMS for Google Cloud Identity Platform (#804)

  Miscellaneous

  • [chore] Release 8.10.0 (take 2) (#812)
  • [chore] Release 8.10.0 (#811)
  • chore: Adding a .npmrc file to the root of the repo (#810)
  • Defines MultiFactor{Create|Update}Settings interfaces. (#809)
  • Removes special char from index.d.ts. (#808)
  • Defines new MFA types in toc.yaml. (#807)
  • Fix revokeRefreshTokens to round consistently with the other platforms. (#801)
  • Build integration tests during CI (and release) (#800)
  • Fix compilation error in integration tests (#798)
  • chore: Enabling more ESLint checks and fixing errors (#797)
  • Enabling additional ESLint checks (#794)
  • chore: Migrated to ESlint (#790)
  • chore: Experimental release flow based on Actions (#780)
  • Improve customClaims Typing (#768)
  • Custom Action for sending Tweets (#784)
• 8.9.2 - 2020-01-23
  
  • Fixed a credential loading issue that prevented some functions from being deployed via the Firebase CLI.
• 8.9.1 - 2020-01-15
  

  Authentication

  • [Fixed] Fixed the inability to discover the project ID when running on GCP managed environments.
• 8.9.0 - 2019-12-19
  
  • Fixed a bug in the admin.instanceId().deleteInstanceId() API that caused errors even when the operation completed successfully in the backend.
  • Upgraded the @ google-cloud/firestore dependency to v3.0.0. See Firestore release notes for more details.

  Cloud Messaging

  • The sendMulticast() API now correctly copies the fcmOptions when sending a message to multiple recipients.

  Realtime Database

  • Upgraded the @ firebase/database dependency to v0.5.17.
• 8.8.0 - 2019-11-19
  

  Cloud Firestore

  • [Feature] Upgraded @ google-cloud/firestore dependency version to 2.6.0.
    Thanks arjunyel for the contribution.

  Cloud Storage

  • [Changed] Upgraded @ google-cloud/storage dependency version to 4.1.2. This version contains some minor breaking changes. Check the release notes of the dependency for more information. Thanks arjunyel for the contribution.

  Authentication

  • [Fixed] The verifyIdToken() method now correctly uses the http.Agent configured during SDK initialization.

  Cloud Messaging

  • [Fixed] Batch messaging APIs sendAll() and sendMulticast() now support sending up to 500 messages in a single call.

from firebase-admin GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs