Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: firebase/firebase-admin-node
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 0efb21f
Choose a base ref
...
head repository: firebase/firebase-admin-node
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: e0a2177
Choose a head ref
  • 8 commits
  • 16 files changed
  • 4 contributors

Commits on May 12, 2026

  1. build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#3135)

    Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.
    - [Release notes](https://github.com/fastify/fast-uri/releases)
    - [Commits](fastify/fast-uri@v3.1.0...v3.1.2)
    
    ---
    updated-dependencies:
    - dependency-name: fast-uri
      dependency-version: 3.1.2
      dependency-type: indirect
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored May 12, 2026
    Configuration menu
    Copy the full SHA
    6c81c7e View commit details
    Browse the repository at this point in the history

Commits on May 13, 2026

  1. fix: Replace node-forge with native crypto for private key validation (

    …#3051)
    
    * chore(EHZ-19661): replace node-forge with native crypto for private key validation
    
    Replaces node-forge dependency with Node.js native crypto module for
    validating PEM-formatted private keys in ServiceAccount credential.
    
    ## Motivation
    
    1. **License concerns**: node-forge contains code sourced from StackOverflow
       which is licensed under CC-BY-SA 4.0, causing issues with license scanners.
       See: digitalbazaar/forge#1001
    
    2. **Security**: Native crypto is maintained by Node.js core team and uses
       OpenSSL's battle-tested C++ implementation.
    
    3. **Performance**: Native crypto is significantly faster than the pure
       JavaScript implementation in node-forge.
    
    4. **Bundle size**: Removes ~500KB dependency from the package.
    
    ## Changes
    
    - Replace `forge.pki.privateKeyFromPem()` with `crypto.createPrivateKey()`
    - Remove `node-forge` from dependencies
    - Both functions throw on invalid PEM format, maintaining equivalent behavior
    
    * chore: trigger CLA re-check
    
    ---------
    
    Co-authored-by: Lahiru Maramba <llahiru@gmail.com>
    ido-seraphic and lahirumaramba authored May 13, 2026
    Configuration menu
    Copy the full SHA
    16e6c33 View commit details
    Browse the repository at this point in the history
  2. build(deps): bump protobufjs from 7.5.5 to 7.5.8 (#3141)

    Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 7.5.5 to 7.5.8.
    - [Release notes](https://github.com/protobufjs/protobuf.js/releases)
    - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.5.8/CHANGELOG.md)
    - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.5...protobufjs-v7.5.8)
    
    ---
    updated-dependencies:
    - dependency-name: protobufjs
      dependency-version: 7.5.8
      dependency-type: indirect
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored May 13, 2026
    Configuration menu
    Copy the full SHA
    48d5212 View commit details
    Browse the repository at this point in the history
  3. feat(appcheck): Add support for minting limited-use tokens and custom…

    … JTI (#3027)
    
    * feat(appcheck): Add support for minting limited use tokens
    
    * fix docs
    
    * clean up imports in unit tests
    
    * feat(app-check): validate limitedUse parameter in exchangeToken()
    
    * feat(app-check): add support for custom jti in limited-use tokens
    
    * chore: update api-extractor reports for app check jti parameter addition
    
    * chore: fix lint in app-check.spec.ts
    
    * fix typo in tests
    
    * omitted undefined fields and exapnded test coverage
    
    * fix(app-check): require limitedUse to be true when jti is defined
    lahirumaramba authored May 13, 2026
    Configuration menu
    Copy the full SHA
    fcedf6b View commit details
    Browse the repository at this point in the history
  4. build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 (#3134)

    Bumps [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder) from 1.1.5 to 1.2.0.
    - [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md)
    - [Commits](NaturalIntelligence/fast-xml-builder@v1.1.5...v1.2.0)
    
    ---
    updated-dependencies:
    - dependency-name: fast-xml-builder
      dependency-version: 1.2.0
      dependency-type: indirect
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Lahiru Maramba <llahiru@gmail.com>
    dependabot[bot] and lahirumaramba authored May 13, 2026
    Configuration menu
    Copy the full SHA
    da2141a View commit details
    Browse the repository at this point in the history

Commits on May 14, 2026

  1. chore: remove uuid dependency (#3130)

    * chore: remove `uuid` dependency
    
    * fix: add import
    
    * refactor: use node:crypto prefix and named imports
    
    * resolve merge conflicts
    
    ---------
    
    Co-authored-by: Lahiru Maramba <llahiru@gmail.com>
    gameroman and lahirumaramba authored May 14, 2026
    Configuration menu
    Copy the full SHA
    2c8d215 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    67d6d82 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    e0a2177 View commit details
    Browse the repository at this point in the history
Loading