-
Notifications
You must be signed in to change notification settings - Fork 416
Comparing changes
Open a pull request
base repository: firebase/firebase-admin-node
base: v13.9.0
head repository: firebase/firebase-admin-node
compare: v13.10.0
- 8 commits
- 16 files changed
- 4 contributors
Commits on May 12, 2026
-
build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#3135)
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.2) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 6c81c7e - Browse repository at this point
Copy the full SHA 6c81c7eView commit details
Commits on May 13, 2026
-
fix: Replace node-forge with native crypto for private key validation (…
…#3051) * chore(EHZ-19661): replace node-forge with native crypto for private key validation Replaces node-forge dependency with Node.js native crypto module for validating PEM-formatted private keys in ServiceAccount credential. ## Motivation 1. **License concerns**: node-forge contains code sourced from StackOverflow which is licensed under CC-BY-SA 4.0, causing issues with license scanners. See: digitalbazaar/forge#1001 2. **Security**: Native crypto is maintained by Node.js core team and uses OpenSSL's battle-tested C++ implementation. 3. **Performance**: Native crypto is significantly faster than the pure JavaScript implementation in node-forge. 4. **Bundle size**: Removes ~500KB dependency from the package. ## Changes - Replace `forge.pki.privateKeyFromPem()` with `crypto.createPrivateKey()` - Remove `node-forge` from dependencies - Both functions throw on invalid PEM format, maintaining equivalent behavior * chore: trigger CLA re-check --------- Co-authored-by: Lahiru Maramba <llahiru@gmail.com>
Configuration menu - View commit details
-
Copy full SHA for 16e6c33 - Browse repository at this point
Copy the full SHA 16e6c33View commit details -
build(deps): bump protobufjs from 7.5.5 to 7.5.8 (#3141)
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 7.5.5 to 7.5.8. - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.5.8/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.5...protobufjs-v7.5.8) --- updated-dependencies: - dependency-name: protobufjs dependency-version: 7.5.8 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 48d5212 - Browse repository at this point
Copy the full SHA 48d5212View commit details -
feat(appcheck): Add support for minting limited-use tokens and custom…
… JTI (#3027) * feat(appcheck): Add support for minting limited use tokens * fix docs * clean up imports in unit tests * feat(app-check): validate limitedUse parameter in exchangeToken() * feat(app-check): add support for custom jti in limited-use tokens * chore: update api-extractor reports for app check jti parameter addition * chore: fix lint in app-check.spec.ts * fix typo in tests * omitted undefined fields and exapnded test coverage * fix(app-check): require limitedUse to be true when jti is defined
Configuration menu - View commit details
-
Copy full SHA for fcedf6b - Browse repository at this point
Copy the full SHA fcedf6bView commit details -
build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 (#3134)
Bumps [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder) from 1.1.5 to 1.2.0. - [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-builder@v1.1.5...v1.2.0) --- updated-dependencies: - dependency-name: fast-xml-builder dependency-version: 1.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Lahiru Maramba <llahiru@gmail.com>
Configuration menu - View commit details
-
Copy full SHA for da2141a - Browse repository at this point
Copy the full SHA da2141aView commit details
Commits on May 14, 2026
-
chore: remove
uuiddependency (#3130)* chore: remove `uuid` dependency * fix: add import * refactor: use node:crypto prefix and named imports * resolve merge conflicts --------- Co-authored-by: Lahiru Maramba <llahiru@gmail.com>
Configuration menu - View commit details
-
Copy full SHA for 2c8d215 - Browse repository at this point
Copy the full SHA 2c8d215View commit details -
Configuration menu - View commit details
-
Copy full SHA for 67d6d82 - Browse repository at this point
Copy the full SHA 67d6d82View commit details -
Configuration menu - View commit details
-
Copy full SHA for e0a2177 - Browse repository at this point
Copy the full SHA e0a2177View commit details
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v13.9.0...v13.10.0