Skip to content

Bump form-data and firebase-admin in /functions - #38

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/functions/multi-34e92f6e8c
Open

Bump form-data and firebase-admin in /functions#38
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/functions/multi-34e92f6e8c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 21, 2026

Copy link
Copy Markdown

Bumps form-data to 2.5.6 and updates ancestor dependency firebase-admin. These dependencies need to be updated together.

Updates form-data from 2.3.2 to 2.5.6

Changelog

Sourced from form-data's changelog.

v2.5.6 - 2026-06-12

Commits

  • [Fix] escape CR, LF, and " in field names and filenames b620316
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape 12be578
  • [Dev Deps] update js-randomness-predictor 46cfd23
  • [Tests] use safe-buffer so the header-injection test runs on node < 4 633044a
  • [Deps] update hasown e3b96ee

v2.5.5 - 2025-07-18

Commits

  • [meta] actually ensure the readme backup isn’t published 10626c0
  • [Fix] use proper dependency 026abe5

v2.5.4 - 2025-07-17

Fixed

Commits

  • [eslint] update linting config 8bf2492
  • [meta] add auto-changelog b5101ad
  • [Tests] handle predict-v8-randomness failures in node < 17 and node > 23 0e93122
  • [Fix] Switch to using crypto random for boundary values b88316c
  • [Fix] validate boundary type in setBoundary() method 131ae5e
  • [Tests] Switch to newer v8 prediction library; enable node 24 testing c97cfbe
  • [Refactor] use hasown 97ac9c2
  • [meta] remove local commit hooks be99d4e
  • [Dev Deps] remove unused deps ddbc89b
  • [meta] fix scripts to use prepublishOnly e351a97
  • [Dev Deps] remove unused script 8f23366
  • [Dev Deps] add missing peer dep 02ff026
  • [meta] fix readme capitalization 2fd5f61

v2.5.3 - 2025-02-14

Merged

Fixed

Commits

... (truncated)

Commits
  • c713349 v2.5.6
  • 46cfd23 [Dev Deps] update js-randomness-predictor
  • 633044a [Tests] use safe-buffer so the header-injection test runs on node < 4
  • e3b96ee [Deps] update hasown
  • 12be578 [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, tape
  • b620316 [Fix] escape CR, LF, and " in field names and filenames
  • 40de5a7 v2.5.5
  • 026abe5 [Fix] use proper dependency
  • 10626c0 [meta] actually ensure the readme backup isn’t published
  • efe6c26 v2.5.4
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for form-data since your current version.

Install script changes

This version modifies prepublish script that runs during installation. Review the package contents before updating.


Updates firebase-admin from 5.12.1 to 14.0.0

Release notes

Sourced from firebase-admin's releases.

Firebase Admin Node.js SDK v14.0.0

Breaking Changes

  • change(instance-id): Remove deprecated Instance ID service (#3166)
  • change: Remove Deprecated Legacy Namespace Support (#3164)
  • change(fcm): Drop legacy messaging types (#3157)
  • change: Drop support for Node.js 18 and 20 (v14) (#3138)

New Features

  • feat(auth): Enhance emulator support across authentication classes (#3080)
  • feat(core): Error Handling Revamp (v14) (#3140)

Bug Fixes

  • fix(functions): store CLOUD_TASKS_EMULATOR_HOST at construction time (#3167)
  • fix(auth): Decouple CreateRequest interface from UpdateRequest (#3165)
  • fix(auth): skip project config name assertion when using the Auth emulator (#3142)
  • fix(api-request): replace deprecated url.parse() with WHATWG URL (#3124)
  • fix: resolve failing getApplicationDefault unit tests in gcloud SDK environment (#3163)
  • fix(fcm): Map topic subscription RESOURCE_EXHAUSTED server code to new TOPICS_SUBSCRIPTION_RATE_EXCEEDED SDK error code (#3148)

Miscellaneous

  • [chore] Release 14.0.0 (#3171)
  • build: upgrade compilation target and lib to ES2021 (#3172)
  • build(deps): bump @​tootallnate/once from 2.0.0 to 2.0.1 (#3160)
  • build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#3168)
  • build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 (#3169)
  • chore: fixed api docs typos and omissions (#3170)
  • build(deps-dev): bump eslint from 10.3.0 to 10.4.1 (#3155)
  • Merge pull request #3162 from firebase/v14
  • chore(deps): bump jwks-rsa to 4.0.1 (#3125)
  • fix package.json
  • chore: Drop send-tweet and upgrade GitHub Actions (#3158)
  • chore: upgrade nock to v14 and fix api-request unit tests (#3153)
  • chore: bump eslint to 10.3.0 and migrate to flat config (#3150)
  • build(deps-dev): bump sinon from 18.0.1 to 22.0.0 (#3149)
  • chore(deps): bump jwks-rsa to 4.0.1 (#3125)
  • chore: Upgrade dependencies for v14 (#3137)

Firebase Admin Node.js SDK v13.10.0

New Features

  • feat(appcheck): Add support for minting limited-use tokens and custom JTI (#3027)

Bug Fixes

... (truncated)

Commits
  • 4754a2f [chore] Release 14.0.0 (#3171)
  • 25285ee build: upgrade compilation target and lib to ES2021 (#3172)
  • d96319e build(deps): bump @​tootallnate/once from 2.0.0 to 2.0.1 (#3160)
  • 0c34e89 build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#3168)
  • 52d02f7 build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 (#3169)
  • dc788b2 chore: fixed api docs typos and omissions (#3170)
  • a39e897 build(deps-dev): bump eslint from 10.3.0 to 10.4.1 (#3155)
  • ce6c4dc Merge pull request #3162 from firebase/v14
  • fe71c55 fix(functions): store CLOUD_TASKS_EMULATOR_HOST at construction time (#3167)
  • 659c056 change(instance-id): Remove deprecated Instance ID service (#3166)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for firebase-admin since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [form-data](https://github.com/form-data/form-data) to 2.5.6 and updates ancestor dependency [firebase-admin](https://github.com/firebase/firebase-admin-node). These dependencies need to be updated together.


Updates `form-data` from 2.3.2 to 2.5.6
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v2.3.2...v2.5.6)

Updates `firebase-admin` from 5.12.1 to 14.0.0
- [Release notes](https://github.com/firebase/firebase-admin-node/releases)
- [Changelog](https://github.com/firebase/firebase-admin-node/blob/main/CHANGELOG.md)
- [Commits](firebase/firebase-admin-node@v5.12.1...v14.0.0)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 2.5.6
  dependency-type: indirect
- dependency-name: firebase-admin
  dependency-version: 14.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants