chore(deps): update dependency kreait/firebase-php to v7

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
kreait/firebase-php	require-dev	major	^5.20 -> ^7.0

---

Release Notes

kreait/firebase-php

v7.3.0

Compare Source

Added

• It is now possible to add config options and middlewares to the Guzzle HTTP Client performing the HTTP Requests
  to the Firebase APIs through the HttpClientOptions class.
  (Documentation)

v7.2.1

Compare Source

Fixed

• Fixed a user's MFA information not being correctly parsed
  (#​783)

v7.2.0

Compare Source

Added

• Added support for the Firebase Auth Emulator when using lcobucci/jwt 5.*

v7.1.0

Compare Source

Added

• Added support for lcobucci/jwt 5.*

v7.0.3

Compare Source

Fixed

• Restored support for using a JSON string in the GOOGLE_APPLICATION_CREDENTIALS environment variable.
  (#​767)

v7.0.2

Compare Source

Fixed

• Cloud Messaging: The APNS content-available payload field was not set correctly when a message contained
  message data at the root level, but not at the APNS config level.
  (#​762)

v7.0.1

Compare Source

Fixed

• When trying to work with unknown FCM tokens, errors returned from the Messaging REST API were not passed to
  the NotFound exception, which prevented the inspection of further details.
  (#​760)

v7.0.0

Compare Source

The most notable change is that you need PHP 8.1/8.2 to use the new version. The language migration of
the SDK introduces breaking changes concerning the strictness of parameter types almost everywhere in
the SDK - however, this should not affect your project in most cases (unless you have used internal classes
directly or by extension).

This release adds many more PHPDoc annotations to support the usage of Static Analysis Tools like PHPStan
and Psalm and moves away from doing runtime checks. It is strongly recommended to use a Static Analysis
Tool and ensure that input values are validated before handing them over to the SDK.

Added features

• Added support for verifying Firebase App Check Tokens. (#​747)

Notable changes

• The ability to disable credentials auto-discovery has been removed. If you don't want a service account to be
  auto-discovered, provide it by using the withServiceAccount() method of the Factory or by setting the
  GOOGLE_APPLICATION_CREDENTIALS environment variable. Depending on the environment in which the SDK is running,
  credentials could be auto-discovered otherwise, for example on GCP or GCE.

See UPGRADE-7.0 for more details on the changes between 6.x and 7.0.

v6.9.5

Compare Source

Fixed

Cloud Messaging: The APNS apns-push-type header and content-available payload field were not set correctly when a message contained message data at the root level, but not at the APNS config level. (#​762)

v6.9.4

Compare Source

Fixed

• When trying to work with unknown FCM tokens, errors returned from the Messaging REST API were not passed to the NotFound exception, which prevented the inspection of further details. (backported from #​760)

v6.9.3

Compare Source

Fixed

When no Service Account was provided, custom token were generated with a direct call to the Google Identity Toolkit, which could create invalid token signatures depending on the environment (e.g. GCE). Now, the provided credentials are used to sign custom tokens via the Kreait\Firebase\Auth\CustomTokenViaGoogleCredentials class. This is an internal class and should not be used directly. (#​745)

Deprecated

Kreait\Firebase\Auth\CustomTokenViaGoogleIam (internal)

v6.9.2

Compare Source

Fixed

Removed "replace": {"symfony/polyfill-mbstring": "*"} from composer.json because it made SDK updates uninstallable in projects that require other libraries needing it. (#​742)

v6.9.1

Compare Source

Added

• Added Kreait\Firebase\RemoteConfig\Template::conditionNames() to return a list of condition names of a Remote Config template
• Added Kreait\Firebase\RemoteConfig\Template::withRemovedCondition(string $name) to remove a condition from a Remote Config template by name

Fixed

• HTTP Proxy settings were not applied to the Auth Token Handler. Because of this, outgoing, proxied requests couldn't be authenticated, effectively breaking the SDK. (#​735)

v6.9.0

Compare Source

Added

• Added support for Remote Config Personalization (#​731/#​733)
  • Note: Personalization (currently) can not be added programmatically. The values can only be read and removed from a Remote Config Template. To add Personalization, use the Firebase Web Console.
• Added Kreait\Firebase\RemoteConfig\Template::withRemovedParameter(string $name) to remove an existing parameter from a Remote Config Template
• Added method Kreait\Firebase\RemoteConfig\Template::withRemovedParameterGroup(string $name) to remove an existing parameter group from a Remote Config Template
• Added Kreait\Firebase\RemoteConfig\DefaultValue::useInAppDefault()

Deprecated

• Kreait\Firebase\RemoteConfig\DefaultValue::IN_APP_DEFAULT_VALUE
• Kreait\Firebase\RemoteConfig\DefaultValue::none()
• Kreait\Firebase\RemoteConfig\DefaultValue::value()

v6.8.0

Compare Source

Added

Added Auth::queryUsers() to process subsets of users with more parameters than Auth::listUsers(). listUsers() is a fast and memory-efficient way to process a large list of users. queryUsers() provides sorting and filtering by given fields and pagination. (#​727/#​728) (Documentation)

v6.7.1

Compare Source

Fixed

• Limits and filters were not applied to Realtime Database Queries (#​725)

v6.7.0

Compare Source

Added

• Added support for the Firebase Auth Emulator. (#​722) (Documentation)

Changed

• The default HTTP Client options have been updated (#​723)
  • Connect Timeout from ∞ to 15 seconds
  • Timeout from ∞ to 30 seconds

v6.6.1

Compare Source

Fixed

• The WebPushConfig class is now more lenient with TTL values, and urgencies are checked if they are valid (#​716)
• The AndroidConfig didn't allow the TTL to be null) (#​719)

v6.6.0

Compare Source

Fixed

• The AndroidConfig class is now more lenient with TTL values (#​713

Added

• The maximum amount of messages that can be sent in batches can be accessed with Kreait\Firebase\Contract\Messaging::BATCH_MESSAGE_LIMIT

v6.5.1

Compare Source

Keys in the data payload of an FCM message were always lower-cased, although they shouldn't have been. (#​709)

v6.5.0

Compare Source

Added

• Problems while fetching Dynamic Link statistics now result in more helpful exception messages. (#​707)

Changed

• Raised minimum version of Guzzle to address CVE-2022-31090 and CVE-2022-31091

v6.4.1

Compare Source

Fixed

• Updating a Realtime Database Ruleset converted lists to objects with numeric keys. (#​707)

v6.4.0

Compare Source

Added

• If not already set, APNs configs are enriched with the necessary headers and fields to ensure the delivery of iOS background messages and alerts.
  • The apns-push-type header is set to background or alert
  • The content-available field is set to 1 in case of a background message
• FCM Messages are now annotated for better PHPStan/Psalm resolution
• Added methods
  • \Kreait\Firebase\Messaging\AndroidConfig::withMinimalNotificationPriority()
  • \Kreait\Firebase\Messaging\AndroidConfig::withLowNotificationPriority()
  • \Kreait\Firebase\Messaging\AndroidConfig::withDefaultNotificationPriority()
  • \Kreait\Firebase\Messaging\AndroidConfig::withHighNotificationPriority()
  • \Kreait\Firebase\Messaging\AndroidConfig::withMaximalNotificationPriority()
  • \Kreait\Firebase\Messaging\AndroidConfig::withNotificationPriority()
  • \Kreait\Firebase\Messaging\AndroidConfig::withUnspecifiedNotificationPriority()
  • \Kreait\Firebase\Messaging\AndroidConfig::withPrivateNotificationVisibility()
  • \Kreait\Firebase\Messaging\AndroidConfig::withPublicNotificationVisibility()
  • \Kreait\Firebase\Messaging\AndroidConfig::withSecretNotificationVisibility()
  • \Kreait\Firebase\Messaging\AndroidConfig::withNotificationVisibility()
  • \Kreait\Firebase\Messaging\ApnsConfig::data()
  • \Kreait\Firebase\Messaging\ApnsConfig::hasHeader()
  • \Kreait\Firebase\Messaging\ApnsConfig::isAlert()
  • \Kreait\Firebase\Messaging\ApnsConfig::toArray()
  • \Kreait\Firebase\Messaging\ApnsConfig::withApsField()
  • \Kreait\Firebase\Messaging\ApnsConfig::withDataField()
  • \Kreait\Firebase\Messaging\ApnsConfig::withHeader()

Changed

• FCM notifications (Kreait\Firebase\Messaging\Notification) can now be created with null values. If a notification has only null values, the notification payload will be removed on serialization as if it wasn't provided at all.
• Deprecations
  • \Kreait\Firebase\Messaging\AndroidConfig::withHighPriority(), use \Kreait\Firebase\Messaging\AndroidConfig::withHighMessagePriority() instead
  • \Kreait\Firebase\Messaging\AndroidConfig::withNormalPriority(), use \Kreait\Firebase\Messaging\AndroidConfig::withNormalMessagePriority() instead
  • \Kreait\Firebase\Messaging\AndroidConfig::withPriority(), use \Kreait\Firebase\Messaging\AndroidConfig::withMessagePriority() instead

v6.3.1

Compare Source

Fixed

• Nested lists in custom user claims were not correctly encoded. (#​699)

---

If you or your team rely on this project and me maintaining it, please consider becoming a Sponsor 🙏

v6.3.0

Compare Source

Added

• Added support for the Firebase Auth Emulator. (#​692) (Documentation)
• Tenant aware session cookie handling is now officially supported.

---

If you or your team rely on this project and me maintaining it, please consider becoming a Sponsor 🙏

v6.2.0

Compare Source

Added

• Cloud Messaging: Added support for APNS subtitles (supported by iOS 9+, silently ignored for others) (#​692)
• Auth: In Auth::listUsers(), if the specified batch size exceeds the specified maximum number of to be returned users, the batch size will be reduced from the default 1000. As an example: previously, Auth::listUsers(2) would have downloaded 1000 accounts (the default batch size), but return only the first two. After the change, only two accounts will be downloaded.
• Added methods
  • Kreait\Firebase\Messaging\ApnsConfig::withSubtitle()

Changed

• Replaced internal JSON helper class with beste/json
• Deprecated classes
  • Kreait\Firebase\Util\JSON

v6.1.0

Compare Source

Added

• Added convenience method to bulk-remove multiple children of an RTDB Reference (#​686)
• Added support for Session Cookie Verification.
  • Tenants don't seem to be supported at the moment (creating or verifying a Session Cookie with a tenant-enabled Firebase project yields an UNSUPPORTED_TENANT_OPERATION error), but once it is supported, the SDK will need no or just minimal updates. Integration tests are in place to checking for this error so that we know early on when it starts working.
• Added methods:
  • Kreait\Firebase\Auth::verifySessionCookie()
  • Kreait\Firebase\Database\Reference::removeChildren()

Changed

• Tenant-aware auth methods are now tested the same way as tenant-unaware methods. In order to achieve this, some internal implementations had to be changed, warranting this minor version bump. Please note that the tests uncovered that creating session tokens is currently not possible when working with tenants. (GitHub issue / Google Issue Tracker issue))
• Deprecated classes
  • Kreait\Firebase\Auth\CreateActionLink\ApiRequest
  • Kreait\Firebase\Auth\CreateSessionCookie\ApiRequest
  • Kreait\Firebase\Auth\SendActionLink\ApiRequest

---

If you or your team rely on this project and me maintaining it, please consider becoming a Sponsor 🙏

v6.0.1

Compare Source

Fixed

• When signing in with IdP credentials a user's Firebase UID is retrieved from the returned localId field, if present

---

If you or your team rely on this project and me maintaining it, please consider becoming a Sponsor 🙏

v6.0.0

Compare Source

This is a release with breaking changes.

Please review the Changelog and adapt your application where needed.

---

If you or your team rely on this project and me maintaining it, please consider becoming a Sponsor 🙏

I will assist Sponsors (in a tier with access to my private Slack) hands-on with upgrading their codebase and will be available for individual questions as long as their sponsorship is active 🤗.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[bshaffer]

We do not want to do this.

[forking-renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 7.x releases. But if you manually upgrade to 7.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.