New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency @google-cloud/firestore to v6 [SECURITY] #88

Open

renovate wants to merge 1 commit into master from renovate/npm-@google-cloud/firestore-vulnerability

renovate bot commented Jun 17, 2024 •

edited

Loading

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@google-cloud/firestore	`0.21.0` -> `6.2.0`

GitHub Vulnerability Alerts

CVE-2023-6460

A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._settings would be logging the firestore key as well potentially exposing it to anyone with logs read access. We recommend upgrading to version 6.1.0 to avoid this issue

Release Notes

googleapis/nodejs-firestore (@google-cloud/firestore)

`v6.2.0`

Features

Use REST (#1698) (d85b0e9)

Bug Fixes

Minify proto JSON files (#1771) (6393fe7)
Remove hack in update.sh, and replace with existing pattern for protobuf dependencies. (#1769) (6ba6751)

`v6.0.0`

⚠ BREAKING CHANGES

update library to use Node 12 (#1725)

Features

Enable RunQueryResponse.done (#1712) (0cc549c)
Support Logical Termination on RunQueryResponse (#1741) (07de28a)
support regapic LRO (#1729) (b9d8fef)
update client libraries to support Database operations (#1676) (533aade)

Bug Fixes

change REST binding for ListDocuments to support root collection (#1695) (6185f13)
deps: update dependency protobufjs to v7 (#1747) (4e8d33c)
split v1 and v1beta1 protos to improve startup time (#1664) (f3729cf)

Build System

update library to use Node 12 (#1725) (0abbd21)

5.0.2 (2022-01-07)

Bug Fixes

remove serializer check from Query.isEqual() (#1654) (f13da18)

5.0.1 (2021-12-02)

Bug Fixes

save negative zero as doubleValue (#1639) (a6ba5cc)

`v5.0.2`

`v5.0.1`

`v4.15.1`

`v4.15.0`

Features

turns on self-signed JWT feature flag (#1593) (feee8cc)

Bug Fixes

Handles identical document ids from different collections. (#1599) (745b608)

4.14.2 (2021-08-17)

Bug Fixes

deps: google-gax v2.24.1 (#1588) (56150b6)

4.14.1 (2021-08-02)

Bug Fixes

avoid destructuring undefined timestamps (#1575) (a61a24a)

`v4.14.2`

`v4.14.1`

`v4.14.0`

Features

add "NON_EMPTY_DEFAULT" FieldBehavior (#1554) (8d9c503)
allow UnhandledPromiseRejection errors in BulkWriter if no error handler is specified (#1572) (e862ac8)

4.13.2 (2021-07-14)

Bug Fixes

deps: google-gax v2.17.1 (#1557) (866bd25)
lower batch size on BulkWriter retry to stay under throughput limits (#1556) (f17a36e)

4.13.1 (2021-07-01)

Bug Fixes

lower batch size on BulkWriter retry (#1549) (26d480b)

`v4.13.2`

`v4.13.1`

`v4.13.0`

Features

add read-only transactions (#1541) (ca4241e)
retry BatchGetDocuments RPCs that fail with errors (#1544) (b39dd3c)

Bug Fixes

deps: google-gax v2.17.0 with mTLS (#1546) (a322345)
make request optional in all cases (#1536) (f6edfc1)

4.12.3 (2021-06-16)

Bug Fixes

bulkWriter: ensure buffered batches are sent after flush (#1535) (115a134)
GoogleAdsError missing using generator version after 1.3.0 (#1526) (adfe68e)

4.12.2 (2021-05-27)

Bug Fixes

do not leak credentials in Firestore.toJSON() (#1522) (791310f)

4.12.1 (2021-05-27)

Bug Fixes

do not load google-gax at client startup (#1517) (2141b08)
recursive delete: backporting changes from Java (#1514) (92ea651)
return results from getPartitions() in order (#1521) (c8168a8)

`v4.12.3`

`v4.12.2`

`v4.12.1`

`v4.12.0`

Features

add gcf-owl-bot[bot] to ignoreAuthors (#1506) (6fa1d4d)
add Precondition.exists to delete() (#1505) (28d645b)

4.11.1 (2021-05-13)

Bug Fixes

deps: require google-gax v2.12.0 (#1497) (a8d5f0b)

`v4.11.1`

`v4.11.0`

Features

add recursive delete to Firestore class (#1494) (6f1e304)

4.10.1 (2021-04-28)

Bug Fixes

type of QuerySnapshot.docChanges() should be generic (#1484) (3ed1929)

`v4.10.1`

`v4.10.0`

Features

add buffering layer to BulkWriter (#1470) (9cc9548)

Bug Fixes

use BigInt when calculating nanos in Timestamp.fromMillis() (#1468) (cf1949f)

4.9.9 (2021-04-07)

Bug Fixes

BulkWriter: apply rate limiter before sending batch (#1451) (3a50f8b)
remove floating point rounding error in Timestamp.fromMillis() (#1464) (97e7281)

4.9.8 (2021-03-15)

Bug Fixes

BulkWriter: add backoff on retries (#1447) (f483083)

4.9.7 (2021-03-09)

Bug Fixes

export v1 and v1beta1 client class types correctly (#1445) (6c9319e)
retry BulkWriter deletes that fail with RST_STREAM error (#1442) (cccf48d)

4.9.6 (2021-03-03)

Bug Fixes

set default max ratelimiter throughput to 10k for BulkWriter (#1439) (c06fb3c)

4.9.5 (2021-03-02)

Bug Fixes

add typings to v1 and v1beta in firestore.d.ts (#1433) (47238a9)

4.9.4 (2021-02-15)

Bug Fixes

update "protobufjs" to be a dependency (#1425) (d960fbb)

4.9.3 (2021-02-09)

Bug Fixes

use Array.isArray instead of an instanceof check (#1417) (4a8c3cf)

4.9.2 (2021-02-05)

Bug Fixes

support byte values in Bundles (#1395) (8cf53a9)

4.9.1 (2021-01-26)

Bug Fixes

handle ignoreUndefinedProperties in set(merge: true) (#1396) (d870c9d)

`v4.9.9`

`v4.9.8`

`v4.9.7`

`v4.9.6`

`v4.9.5`

`v4.9.4`

`v4.9.3`

`v4.9.2`

`v4.9.1`

`v4.8.1`

`v4.8.0`

Features

Add support to build Firestore bundles (#1365) (bae82dd)

Bug Fixes

stop using GRPC channels after RST_STREAM (#1373) (504bb5f)

4.7.2 (2020-11-25)

Bug Fixes

browser: check for fetch on window (#1368) (3cd29d2)

4.7.1 (2020-11-10)

Bug Fixes

do not modify options object, use defaultScopes (#1360) (bd40d3a)
ignore 'undefined' in update() with UpdateMap (#1363) (9bad804)
remove unneeded async signature from BulkWriter.sendBatch() (#1361) (b5cf449)

`v4.7.2`

`v4.7.1`

`v4.7.0`

Features

add ability to specify custom headers for individual RPC types (#1355) (0900379)

4.6.1 (2020-11-03)

Bug Fixes

create new batch for writes to the same doc (#1352) (bd5adc3)

`v4.6.1`

`v4.6.0`

Features

add onWriteError() and onWriteResult() handlers to BulkWriter (#1315) (a173f4d)

Bug Fixes

retry transactions that fail with expired transaction IDs (#1347) (a18ab50)

`v4.5.0`

Features

add implicit ordering for startAt(DocumentReference) calls (#1328) (e9afa38)
add support for Partition API (#1320) (51961c3)

Bug Fixes

retry PartitionQuery for INTERNAL and DEADLINE_EXCEEDED (#1336) (fdf5462)
simplify BulkWriter logic (#1321) (b493baf)
speed up listDocuments pagination (#1344) (498301d)
Update getAll example in documentation (#1326) (721fce0)
update required field to implement NodeJS.Timeout (#1338) (6b7371b)
firestore/v1: give PartitionQuery retry/timeout config (#1334) (39a30c2)

`v4.4.0`

Features

add starting/max rates to BulkWriterOptions (#1305) (57dcf1c)

`v4.2.0`

Features

allow Settings.host to be used when Settings.servicePath is set (#1275) (34d6728)

4.1.2 (2020-07-24)

Bug Fixes

add Firestore.bulkWriter to firestore.d.ts (#1272) (5e7e627)

4.1.1 (2020-07-09)

Bug Fixes

typeo in nodejs .gitattribute (#1257) (2664878)

`v4.1.2`

`v4.1.1`

`v4.1.0`

Features

Added Firestore.bulkWriter(), which performs large scale writes in parallel. By default, BulkWriter throttles writes according to the "500/50/5" rule and retries writes that fail due to contention. (#1252) (d0c6c4b)

`v4.0.0`

⚠ BREAKING CHANGES

drop Node 8 support (#1006)
FirestoreDataConverter.fromFirestore() is now called with a QueryDocumentSnapshot instead of DocumentData (#965)

Features

add support for serialization to BigInt (via settings({useBigInt: true}) (#1016)
add support for set() with SetOptions when using FirestoreDataConverter (#1087)
retry CommitRequests that fail with UNAVAILABLE (#1235)

Bug Fix

remove fallback code that periodically invoked CommitRequests inside Transactions on GCF (#1112)
fixes an error that prevented Firestore from connecting to the Emulator if multiple versions of @grpc/grpc-js are installed (#1233)

3.8.6 (2020-06-19)

Bug Fixes

reject all promises with errors (#1224) (9118521)
restart onSnapshot() listeners that stop receiving updates (#1220) (49ca641)

3.8.5 (2020-06-10)

Bug Fixes

fix flaky BulkWriter test (#1115) (9a24cc0)
retry ABORTED for non-transactional commits (#1111) (f175236)
retry Query streams (#1116) (d7574ea)

3.8.4 (2020-06-01)

Bug Fixes

send Authentication header with every emulator request (#1105) (83f617c)

3.8.3 (2020-05-31)

Bug Fixes

return null for 'parent' call on root collection (#1099) (c5c0b15)

3.8.2 (2020-05-30)

Bug Fixes

authenticate as admin user when ssl:false is set (#1095) (a178556), closes /github.com/firebase/firebase-js-sdk/issues/3105#issuecomment-635541894

3.8.1 (2020-05-27)

Bug Fixes

Add tests to check fields used in whereIn should be equality filters (#1081) (3153dd2)
capture error stacks across async calls (#1088) (7acdd7e)

`v3.8.6`

`v3.8.5`

`v3.8.4`

`v3.8.3`

`v3.8.2`

`v3.8.1`

`v3.8.0`

Features

add ignoreUndefinedProperties option (#1062) (de733c8)

Bug Fixes

prepare sources for BulkWriter (#1051) (8c52d47)
allow running source with ts-node (#1074) (f66a089)
remove type dependency on Moment (#1063) (30008b0)

3.7.5 (2020-04-25)

Bug Fixes

return errors from Query.stream() (#1046) (4b65fca)

3.7.4 (2020-04-09)

Bug Fixes

validate nested arrays in FieldValue (#1003) (3497691)

3.7.3 (2020-03-31)

Bug Fixes

support array of references for IN queries (#993) (a6d8fe0)

3.7.2 (2020-03-25)

Bug Fixes

fix flaky contention test (#979) (f294998)
fix: use Random Number from crypto to generate AutoId (05b3363)

3.7.1 (2020-03-16)

Bug Fixes

support Query.stream() as first client operation (#971) (a48017c)

`v3.7.5`

`v3.7.4`

`v3.7.3`

`v3.7.2`

`v3.7.1`

`v3.7.0`

Features

deps: update to TypeScript 3.8 (#962) (12982cd)
add support for Query.limitToLast() (#954) (c89546f)

`v3.6.0`

Features

base transaction retries on error codes (#953) (4a30820)
deferred client initialization (#956) (301a7e2)
implement Timestamp.valueOf() (#947) (24a96c6), closes #944

3.5.1 (2020-02-19)

Bug Fixes

collectionReference.add() validation (#925) (19c2c75)
pass x-goog-request-params header for streaming calls (#920) (cfbe19e)
propagate converter in QueryOptions.with() (#931) (e35a098)
wait for operations to complete before deleting clients (#915) (1e5d63f)

`v3.5.1`

`v3.5.0`

Features

add google-gax status to exports (#912) (7d97384)

Bug Fixes

add missing generics on query (#917) (c5b9442)
better parameter naming in path template helpers (aac02f4)
retry streaming methods if initial write errored (#897) (2ec0489)

3.4.1 (2020-01-22)

Bug Fixes

do not assume all custom objects have constructors (#893) (f668e8e)

`v3.4.1`

`v3.4.0`

Features

support serialization of custom objects (#828) (94ddc89)
support serialization of Moment.js types (#879) (9169fae)
allow logging to be disabled (#880) (36d75f6)

Bug Fixes

don't format log message if logging is disabled (#874) (b7b5fc9)
disable non-transactional retries for Code ABORTED (#881) (82273ec)
manually retry ABORTED reads in transactions (#883) (7562033)
remove ticks from code comments (#885) (b2740ed)

3.3.4 (2020-01-12)

Bug Fixes

do not release client before retry (#870) (47f7ab5)
proper routing headers (43472f6)
remove redundant log line (#868) (af3196f)

3.3.3 (2020-01-08)

Bug Fixes

support Objects created with Object.create({}) (#842) (a85f0c3)
use rejected Promise for terminate() (#845) (f2c4d91)

3.3.2 (2020-01-06)

Bug Fixes

add quotes to field name to avoid ambiguity (#860) (8caee71)

3.3.1 (2020-01-06)

Bug Fixes

don't recreate instances when client is idle (0aa2a8b)

`v3.3.4`

`v3.3.3`

`v3.3.2`

`v3.3.1`

`v3.3.0`

Features

add Symbol.asyncInterator to Query.stream() (#843) (68795c4)
use GAX retry config for streams (#847) (218a4c6)

Bug Fixes

increase test timeout (#846) (b94c367)
retry writes that fail with status code ABORTED (#854) (96f085f)

`v3.2.0`

Features

allow specifying how many idle GRPC channels to keep (#837) (37e93da)

Bug Fixes

reduce overhead for listDocuments()/listCollections() (#838) (5c870e6)

`v3.1.0`

Features

add ability to close channels (#824) (9ef582a)

Bug Fixes

deps: update dependency deep-equal to v2 (#821) (25472e1)

`v3.0.0`

⚠ BREAKING CHANGES

convert Gapic client to TypeScript (#805)
remove deprecated timestampInSnapshots setting (#808)

Features

convert Gapic client to TypeScript (#805) (5000b2d)
remove deprecated timestampInSnapshots setting (#808) (f37fffc)

Bug Fixes

close GRPC channel when we dispose of clients (#779) (22ef0d0)

2.6.1 (2019-12-05)

Bug Fixes

deps: pin TypeScript below 3.7.0 (0d4e558)
docs: snippets are now replaced in jsdoc comments (#795) (396bebb)

`v2.6.1`

`v2.6.0`

Features

add IN queries support (#715) (00bdf8f)

`v2.5.0`

Features

introduces ARRAY_CONTAINS_ANY and IN to operator enum (2c8869d)

Bug Fixes

deps: bump google-gax to 1.7.5 (#786) (e5763ba)

`v2.4.0`

Bug Fixes

provide custom error for FieldValue subclasses (#771) (29c3e9b)
use compatible version of google-gax (b0c89c5)

Features

ability to specify the Collection Group query scope in the V1 Admin API (#762) (b16cd40)

`v2.3.0`

Features

load protos from JSON, grpc-fallback support (#749) (6cb9d68)

2.2.9 (2019-08-30)

Bug Fixes

retrying 13 INTERNAL RPC errors (#742) (431edcb)

2.2.8 (2019-08-22)

Bug Fixes

serialization does not work with null objects (#736) (870d6a7)

2.2.7 (2019-08-16)

Bug Fixes

deps: use the latest extend (#728) (425bf3d)
add logging to client pool (#733) (a4efa09)

2.2.6 (2019-08-02)

Bug Fixes

allow calls with no request, add JSON proto (#725) (8b0624b)

2.2.5 (2019-08-02)

B

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


          Update dependency @google-cloud/firestore to v6 [SECURITY]

18e054a

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet