[Snyk] Security upgrade firebase-tools from 11.30.0 to 13.6.1

[naiba4]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/adapter-firebase/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	416/1000 Why? Recently disclosed, Has a fix available, CVSS 2.6	Cross-Site Request Forgery (CSRF) SNYK-JS-FIREBASETOOLS-6808836	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: firebase-tools

The new version differs by 250 commits.

• 61eec81 13.6.1
• 0b770fe initial ([next-auth][error][CLIENT_FETCH_ERROR] https://next-auth.js.org/errors#client_fetch_error Unexpected end of JSON input  nextauthjs/next-auth#6951)
• 4743344 Move some of dialog to log rather than prompt to unbold (How to use nextAuth's [...nextauth] dynamic route in the new version next js 13.2 app dir api route? nextauthjs/next-auth#6950)
• fbbffd7 Finally wrap up the secrets:set command 🎉 (The step by step guide link with costume backend not working nextauthjs/next-auth#6947)
• 068a2b0 Block web browser requests to export endpoint (withAuth middleware pass context locale nextauthjs/next-auth#6944)
• dbb8573 Add support for apphosting:secrets:describe, alias for functions:secrets:get to align with gcloud (I built a cloudflare D1 adapter, should the docs be for authjs or next-auth? nextauthjs/next-auth#6948)
• ed46b01 Reconcile existing secrets management code. (withAuth middleware pass context locale nextauthjs/next-auth#6946)
• ee68b28 Move FAH files from init directory to common library as there is no init command (Directus Adapters nextauthjs/next-auth#6945)
• db7dd17 Add FAH config library (Callback payload returned in FormData rather than in Query format nextauthjs/next-auth#6941)
• 25673ea FAH ensure secret (When you enter same session to different adapter its not creating user on mongo db nextauthjs/next-auth#6940)
• 9a5534f Chose service accounts dialog (chore(ci): disable node cache to speed up ci nextauthjs/next-auth#6939)
• b82594f Onboard users to App Hosting using Developer Connect (TypeScript questions regarding type augmentation in NX project and problems with added session properties nextauthjs/next-auth#6915)
• cecf08b Add support for grantaccess (Error thrown by client-side signIn(... ,{ redirect: false }) call using EmailProvider with isAllowedToLogin check in signIn callback nextauthjs/next-auth#6899)
• 77d5f0a Support pagination in listBackends (announcementBar announcement close button invisible.  nextauthjs/next-auth#6935)
• c152767 Actually use the correct method for calculating deprecation warning window (SvelteKitAuth: Unexpected navigation when user re-login after successful logout nextauthjs/next-auth#6929)
• 3fb3240 Stop trying to clean up AR cache on function deletion. (feat: token provider nextauthjs/next-auth#6927)
• 1a3b885 Strengthen typing of Runtimes+Langauges and their support timelines. (Any version of the Credential Provider will not work with any adapter? nextauthjs/next-auth#6866)
• ed9e2d6 [firebase-release] Removed change log and reset repo after 13.6.0 release
• f6b7d05 13.6.0
• a26c3d0 Ignore quota project in GCF source uploads (Auth.js Documentation - Session, SignIn and SignOut nextauthjs/next-auth#6917)
• 476bd33 Update to PubSub emulator 0.8.2 (Authenticating social media after user created in discord nextauthjs/next-auth#6916)
• ccab9b7 Add Service Usage Consumer role to GitHub Actions service account (TypeScript questions regarding type augmentation in NX project and problems with added session properties  nextauthjs/next-auth#6895)
• 4c1bd42 Switching a few more places to getters (SvelteKit extending User type does not save the extended values into session nextauthjs/next-auth#6914)
• 6950829 Fix "could not assert Secret Manager permissions" Cloud Build error (Email nextauthjs/next-auth#6904)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-Site Request Forgery (CSRF)

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@actions/[email protected]	environment, filesystem Transitive: network	+1	141 kB	thboop
npm/@aws-sdk/[email protected]	Transitive: environment, filesystem, network, shell	+61	6.35 MB	aws-sdk-bot
npm/@babel/[email protected]	None	0	36.4 kB	nicolo-ribaudo
npm/@babel/[email protected]	environment, filesystem, unsafe	+5	464 kB	nicolo-ribaudo
npm/[email protected]	environment, network	0	390 kB	balazsorban
npm/[email protected]	environment, filesystem, network, shell	0	503 kB	andris

🚮 Removed packages: npm/@actions/[email protected], npm/@actions/[email protected], npm/@rollup/[email protected], npm/@sveltejs/[email protected], npm/@sveltejs/[email protected], npm/@sveltejs/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@typescript-eslint/[email protected], npm/@typescript-eslint/[email protected], npm/@vercel/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source
Environment variable access	npm/[email protected]	Env Vars: NO_PROXY Location: Package overview	orphan: npm/[email protected]
Environment variable access	npm/[email protected]	Env Vars: no_proxy Location: Package overview	orphan: npm/[email protected]
Network access	npm/[email protected]	Module: http Location: Package overview	orphan: npm/[email protected]
Network access	npm/[email protected]	Module: https Location: Package overview	orphan: npm/[email protected]
Environment variable access	npm/[email protected]	Env Vars: proxyEnv Location: Package overview	orphan: npm/[email protected]
Environment variable access	npm/[email protected]	Env Vars: Location: Package overview	orphan: npm/[email protected]
Trivial Package	npm/[email protected]	Location: Package overview	orphan: npm/[email protected]
Network access	npm/@apidevtools/[email protected]	Module: https Location: Package overview	orphan: npm/@apidevtools/[email protected]
Filesystem access	npm/@apidevtools/[email protected]	Module: fs Location: Package overview	orphan: npm/@apidevtools/[email protected]
Network access	npm/@apidevtools/[email protected]	Module: http Location: Package overview	orphan: npm/@apidevtools/[email protected]
Debug access	npm/@graphql-codegen/[email protected]	Module: module Location: Package overview	orphan: npm/@graphql-codegen/[email protected]
Debug access	npm/@graphql-codegen/[email protected]	Module: module Location: Package overview	orphan: npm/@graphql-codegen/[email protected]
Debug access	npm/@babel/[email protected]	Module: v8 Location: Package overview	packages/next-auth/package.json pnpm-lock.yaml
Dynamic require	npm/@babel/[email protected]	Location: Package overview	packages/next-auth/package.json pnpm-lock.yaml
New author	npm/@aws-crypto/[email protected]	New Author: aws-crypto-tools-ci-bot Previous Author: lavaleri	packages/adapter-dynamodb/package.json pnpm-lock.yaml
New author	npm/@aws-crypto/[email protected]	New Author: aws-crypto-tools-ci-bot Previous Author: lavaleri	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_EXPIRATION Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_SESSION Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_SECRET Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_KEY Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Network access	npm/@aws-sdk/[email protected]	Module: http Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_CMDS_RELATIVE_URI Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_CMDS_AUTH_TOKEN Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_CMDS_FULL_URI Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Shell access	npm/@aws-sdk/[email protected]	Module: child_process Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_TOKEN_FILE Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_ROLE_ARN Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_ROLE_SESSION_NAME Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Filesystem access	npm/@aws-sdk/[email protected]	Module: fs Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Network access	npm/@aws-sdk/[email protected]	Module: globalThis["fetch"] Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_LAMBDA_FUNCTION_NAME Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_TRACE_ID Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Filesystem access	npm/@aws-sdk/[email protected]	Module: fs Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_CONFIG_PATH Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: ENV_CREDENTIALS_PATH Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Filesystem access	npm/@aws-sdk/[email protected]	Module: fs Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: AWS_DEFAULT_REGION_ENV Location: Package overview	packages/adapter-dynamodb/package.json pnpm-lock.yaml
Environment variable access	npm/@aws-sdk/[email protected]	Env Vars: AWS_REGION_ENV Location: Package overview	pack