[Snyk] Upgrade firebase-admin from 9.1.1 to 9.12.0

[NOUIY]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade firebase-admin from 9.1.1 to 9.12.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 14 versions ahead of your current version.
• The recommended version was released 2 years ago, on 2021-09-28.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-NODEFORGE-598677	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-FIREBASEUTIL-1038324	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: firebase-admin

• 9.12.0 - 2021-09-28
  

  New Features

  • feat(rc): Add Remote Config Parameter Value Type Support (#1424)

  Bug Fixes

  • fix(fac): Verify Token: Change the jwks cache duration from 1 day to 6 hours (#1439)
  • fix(rtdb): Changed admin.database to use database-compat package (#1437)

  Miscellaneous

  • [chore] Release 9.12.0 (#1442)
  • Pin @ types/jsonwebtoken to 8.5.1 (#1438)
  • build(deps): bump tar from 6.1.3 to 6.1.11 (#1430)
  • build(deps-dev): bump @ types/lodash from 4.14.171 to 4.14.173 (#1435)
  • build(deps-dev): bump @ microsoft/api-extractor from 7.18.4 to 7.18.7 (#1423)
  • fix typo (#1420)
• 9.11.1 - 2021-08-19
  

  Bug Fixes

  • fix: Update comments in index files (#1414)
  • fix: Throw error on user disabled and check revoked set true (#1401)

  Miscellaneous

  • [chore] Release 9.11.1 (#1415)
  • build(deps): bump path-parse from 1.0.6 to 1.0.7 (#1413)
  • build(deps-dev): bump yargs from 17.0.1 to 17.1.1 (#1412)
  • chore: Add emulator tests to nightlies (#1409)
  • build(deps-dev): bump ts-node from 9.0.0 to 10.2.0 (#1402)
  • build(deps): bump tar from 6.1.0 to 6.1.3 (#1399)
  • build(deps-dev): bump @ microsoft/api-extractor from 7.15.2 to 7.18.4 (#1379)
  • build(deps): bump jwks-rsa from 2.0.3 to 2.0.4 (#1393)
  • build(deps-dev): bump @ types/minimist from 1.2.1 to 1.2.2 (#1388)
  • build(deps-dev): bump @ types/request from 2.48.5 to 2.48.6 (#1387)
  • build(deps-dev): bump @ types/lodash from 4.14.157 to 4.14.171 (#1386)
  • build(deps): bump @ firebase/database from 0.10.6 to 0.10.7 (#1385)
  • build(deps-dev): bump @ types/bcrypt from 2.0.0 to 5.0.0 (#1384)
  • build(deps-dev): bump nock from 13.1.0 to 13.1.1 (#1370)
• 9.11.0 - 2021-07-15
  

  New Features

  • feat(fac): Add custom TTL options for App Check (#1363)

  Miscellaneous

  • [chore] Release 9.11.0 (#1376)
  • Fix typo and formatting in docs (#1378)
  • Add AppCheckTokenOptions type to ToC (#1375)
  • Reduce App Check custom token exp to 5 mins (#1372)
  • build(deps): bump @ google-cloud/firestore from 4.12.2 to 4.13.1 (#1369)
  • Update index.ts (#1367)
  • build(deps-dev): bump @ types/chai from 4.2.11 to 4.2.21 (#1365)
  • build(deps-dev): bump yargs from 16.1.0 to 17.0.1 (#1357)
  • build(deps): bump jwks-rsa from 2.0.2 to 2.0.3 (#1361)
  • build(deps): bump @ firebase/database from 0.10.5 to 0.10.6 (#1356)
  • build(deps-dev): bump @ types/sinon from 9.0.4 to 10.0.2 (#1326)
  • build(deps-dev): bump @ types/nock from 9.3.1 to 11.1.0 (#1351)
  • build(deps): bump @ firebase/database from 0.10.4 to 0.10.5 (#1350)
  • build(deps-dev): bump @ types/request-promise from 4.1.46 to 4.1.47 (#1338)
• 9.10.0 - 2021-06-24
  Read more
• 9.9.0 - 2021-05-26
  Read more
• 9.8.0 - 2021-05-10
  

  Bug Fixes

  • fix: adds missing EMAIL_NOT_FOUND error code (#1246)

  Miscellaneous

  • [chore] Release 9.8.0 (#1266)
  • Fix @ types/node conflict with grpc and port type (#1258)
  • build(deps): bump hosted-git-info from 2.8.8 to 2.8.9 (#1260)
  • feat: Add abuse reduction support (#1264)
  • Fix storage emulator env formatting (#1257)
  • build(deps): bump y18n from 3.2.1 to 3.2.2 (#1208)
  • chore: Upgraded RTDB and other @ firebase dependencies (#1250)
  • build(deps-dev): bump lodash from 4.17.19 to 4.17.21 (#1255)
• 9.7.0 - 2021-04-27
  Read more
• 9.6.0 - 2021-03-29
  Read more
• 9.5.0 - 2021-02-10
  Read more
• 9.4.2 - 2020-12-09
  Read more
• 9.4.1 - 2020-11-13
• 9.4.0 - 2020-11-12
• 9.3.0 - 2020-10-22
• 9.2.0 - 2020-09-15
• 9.1.1 - 2020-08-20

from firebase-admin GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs