Skip to content

Conversation

@renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Sep 26, 2024

This PR contains the following updates:

Package Change Age Confidence
@google-cloud/firestore ^5.0.0^8.0.0 age confidence

GitHub Vulnerability Alerts

CVE-2023-6460

A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._settings would be logging the firestore key as well potentially exposing it to anyone with logs read access. We recommend upgrading to version 6.1.0 to avoid this issue


Release Notes

googleapis/nodejs-firestore (@​google-cloud/firestore)

v8.0.0

Compare Source

⚠ BREAKING CHANGES
  • Update WithFieldData and PartialWithFieldData to ignore methods on types (#​2294)
  • migrate to Node 18 (#​2399)
Features
Bug Fixes
  • Update WithFieldData and PartialWithFieldData to ignore methods on types (#​2294) (481430f)
Miscellaneous Chores

v7.11.6

Compare Source

Bug Fixes
  • Pool.ts: add even more logging (c508d1b)

v7.11.5

Compare Source

Bug Fixes
  • Pool.ts: add more detailed logging for client garbage collection (#​2420) (1bbca46)

v7.11.4

Compare Source

Bug Fixes
  • Improve debug logging for the internal client pool. Added client IDs to debug log statements for client management. (99918f1)

v7.11.3

Compare Source

Bug Fixes
  • Improve performance of the UTF-8 string comparison logic (#​2380) (bc6a03e)

v7.11.2

Compare Source

Bug Fixes

v7.11.1

Compare Source

Bug Fixes

v7.11.0

Compare Source

Features
  • [proto] add Database.CmekConfig and Database.cmek_config (information about CMEK enablement) (2779896)
  • [proto] add Database.delete_time (the time a database was deleted, if it ever was) (2779896)
  • [proto] add Database.previous_id (if a database was deleted, what ID it was using beforehand) (2779896)
  • [proto] add Database.SourceInfo and Database.source_info (information about database provenance, specifically for restored databases) (2779896)
  • [proto] allow specifying an encryption_config when restoring a database (2779896)
  • Enable tracing via OpenTelemetry. (#​2218) (1ddb62e)
  • Support fire-admin tag for Admin Node SDK (#​2238) (#​2252) (1339dc2)
Bug Fixes
  • Use correct limit when retrying a limit query stream with a cursor (#​2203) (ab94092)

v7.10.0

Compare Source

Features
  • Expose proto changes for the bulk delete api (23ce891)
  • Expose the proto changes to support FindNearest.distance_result_field parameter and the FindNearest.distance_threshold parameter (23ce891)
  • Return computed distance and set distance thresholds on VectorQueries (#​2090) (b5ca84f)

v7.9.0

Compare Source

Features
  • Update FirebaseFirestore.v1 and FirebaseFirestore.v1beta1 auto-gen types (6732d4d)

v7.8.0

Compare Source

Features
  • Query profiling for VectorQuery (d406f14)
  • Update Nodejs generator to send API versions in headers for GAPICs (#​2041) (6dbe4b0)

v7.7.0

Compare Source

Features
  • Add several fields to manage state of database encryption update (5811492)
  • Lazy-started transactions (#​2017) (2c726a1)
Bug Fixes

v7.6.0

Compare Source

Features

v7.5.0

Compare Source

Features

v7.4.0

Compare Source

Features
  • A new message Backup is added (#​2021) (6bced86)
  • A new message BackupSchedule is added (6bced86)
  • A new message CreateBackupScheduleRequest is added (6bced86)
  • A new message DailyRecurrence is added (6bced86)
  • A new message DeleteBackupRequest is added (6bced86)
  • A new message DeleteBackupScheduleRequest is added (6bced86)
  • A new message GetBackupRequest is added (6bced86)
  • A new message GetBackupScheduleRequest is added (6bced86)
  • A new message ListBackupSchedulesRequest is added (6bced86)
  • A new message ListBackupSchedulesResponse is added (6bced86)
  • A new message ListBackupsRequest is added (6bced86)
  • A new message ListBackupsResponse is added (6bced86)
  • A new message RestoreDatabaseMetadata is added (6bced86)
  • A new message RestoreDatabaseRequest is added (6bced86)
  • A new message UpdateBackupScheduleRequest is added (6bced86)
  • A new message WeeklyRecurrence is added (6bced86)
  • A new method CreateBackupSchedule is added to service FirestoreAdmin (6bced86)
  • A new method DeleteBackup is added to service FirestoreAdmin (6bced86)
  • A new method DeleteBackupSchedule is added to service FirestoreAdmin (6bced86)
  • A new method GetBackup is added to service FirestoreAdmin (6bced86)
  • A new method GetBackupSchedule is added to service FirestoreAdmin (6bced86)
  • A new method ListBackups is added to service FirestoreAdmin (6bced86)
  • A new method ListBackupSchedules is added to service FirestoreAdmin (6bced86)
  • A new method RestoreDatabase is added to service FirestoreAdmin (6bced86)
  • A new method UpdateBackupSchedule is added to service FirestoreAdmin (6bced86)
  • A new resource_definition firestore.googleapis.com/Backup is added (6bced86)
  • A new resource_definition firestore.googleapis.com/BackupSchedule is added (6bced86)
  • Add new types ExplainOptions, ExplainMetrics, PlanSummary, ExecutionStats (#​2013) (e598b9d)
Bug Fixes

v7.3.1

Compare Source

Bug Fixes

v7.3.0

Compare Source

Features
  • Expose the undeliverable_first_gen_event.proto (b4f7d60)
Bug Fixes
  • Allow an explicit MustExist precondition for update (#​1985) (99d60a6)
  • Fix redaction of credentials in Firestore settings (#​1989) (98e668b)
  • Improve retry logic for streaming API calls (b4f7d60)
  • Removed unsupported QueryMode, QueryPlan, and ResultSetStats protos (b4f7d60)

v7.2.0

Compare Source

Features
Bug Fixes

v7.1.0

Compare Source

Features

v7.0.0

Compare Source

⚠ BREAKING CHANGES
  • upgrade to Node 14 (#​1900)
  • Fix the UpdateData incorrect parameter type issue (#​1887)
Features
Bug Fixes
Miscellaneous Chores

v6.8.0

Compare Source

Features
Bug Fixes

v6.7.0

Compare Source

Features
Bug Fixes

v6.6.1

Compare Source

Bug Fixes
  • Updated logging in the client pool and client factory to log information about the required transport and actual transport used. (#​1853) (fe03d02)

v6.6.0

Compare Source

Features
  • Add ApiScope and COLLECTION_RECURSIVE query_scope for Firestore index (#​1849) (b671452)
  • Add bloom filter related proto fields (#​1843) (b64e0c1)
  • Add support for environment variable FIRESTORE_PREFER_REST (#​1848) (96b1d2a)

v6.5.0

Compare Source

Features
Bug Fixes

v6.4.3

Compare Source

Bug Fixes
  • deps: Use google-gax v3.5.3 (#​1818) (88981ad)
  • Emulator support for system tests. Run system tests against the emulator using: yarn system-test:grpc:emulator or yarn system-test:rest:emulator (8aedc63)
  • Update the depth validation used when writing documents, so that it matches the validation of the Firestore backend. (789d9eb)

v6.4.2

Compare Source

Bug Fixes
  • deps: Use google-gax v3.5.2 (#​1794) (b1a0313)
  • Ensure that the client pool consistently uses gRPC clients after transitioning from REST (3068361)
  • Fix duplicates in Query.stream() with back pressure (#​1806) (a5b680d)

v6.4.1

Compare Source

Bug Fixes
  • Force use of http by the GAX module when using the GAX fallback and connecting to the emulator (#​1788) (50747ad)

v6.4.0

Compare Source

Features
Bug Fixes

v6.3.0

Compare Source

Features
Bug Fixes
  • Tests will now verify asynchronous termination of underlying steam, and fix related bug. (#​1772) (a1717ff)

v6.2.0

Compare Source

Features
Bug Fixes
  • Minify proto JSON files (#​1771) (6393fe7)
  • Remove hack in update.sh, and replace with existing pattern for protobuf dependencies. (#​1769) (6ba6751)

v6.0.0

Compare Source

⚠ BREAKING CHANGES
  • update library to use Node 12 (#​1725)
Features
Bug Fixes
Build System
5.0.2 (2022-01-07)
Bug Fixes
5.0.1 (2021-12-02)
Bug Fixes

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@dpebot
Copy link
Collaborator

dpebot commented Sep 26, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from ce182b1 to 5993fd1 Compare October 9, 2024 09:25
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v6 [security] fix(deps): update dependency @google-cloud/firestore to v7 [security] Oct 9, 2024
@dpebot
Copy link
Collaborator

dpebot commented Oct 9, 2024

/gcbrun

@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v7 [security] fix(deps): update dependency @google-cloud/firestore to v6 [security] Oct 9, 2024
@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from 5993fd1 to bbccf4c Compare October 9, 2024 13:17
@dpebot
Copy link
Collaborator

dpebot commented Oct 9, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from bbccf4c to 47d70a3 Compare October 28, 2024 14:10
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v6 [security] fix(deps): update dependency @google-cloud/firestore to v7 [security] Oct 28, 2024
@dpebot
Copy link
Collaborator

dpebot commented Oct 28, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from 47d70a3 to d4cffa4 Compare October 28, 2024 15:40
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v7 [security] fix(deps): update dependency @google-cloud/firestore to v6 [security] Oct 28, 2024
@dpebot
Copy link
Collaborator

dpebot commented Oct 28, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from d4cffa4 to 923b55e Compare November 17, 2024 15:05
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v6 [security] fix(deps): update dependency @google-cloud/firestore to v7 [security] Nov 17, 2024
@dpebot
Copy link
Collaborator

dpebot commented Nov 17, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from 923b55e to b244b09 Compare November 17, 2024 19:17
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v7 [security] fix(deps): update dependency @google-cloud/firestore to v6 [security] Nov 17, 2024
@dpebot
Copy link
Collaborator

dpebot commented Nov 17, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from b244b09 to 09beae6 Compare December 2, 2024 12:27
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v6 [security] fix(deps): update dependency @google-cloud/firestore to v7 [security] Dec 2, 2024
@dpebot
Copy link
Collaborator

dpebot commented Dec 2, 2024

/gcbrun

@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v7 [security] fix(deps): update dependency @google-cloud/firestore to v6 [security] Dec 2, 2024
@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from 09beae6 to b220b93 Compare December 2, 2024 16:31
@dpebot
Copy link
Collaborator

dpebot commented Dec 2, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from b220b93 to edba82e Compare December 17, 2024 21:08
@dpebot
Copy link
Collaborator

dpebot commented Dec 17, 2024

/gcbrun

@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v6 [security] fix(deps): update dependency @google-cloud/firestore to v7 [security] Dec 17, 2024
@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from edba82e to 291484f Compare December 18, 2024 00:09
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v8 [security] fix(deps): update dependency @google-cloud/firestore to v6 [security] Nov 11, 2025
@dpebot
Copy link
Collaborator

dpebot commented Nov 11, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from 439819f to 9166cbe Compare November 18, 2025 13:47
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v6 [security] fix(deps): update dependency @google-cloud/firestore to v8 [security] Nov 18, 2025
@dpebot
Copy link
Collaborator

dpebot commented Nov 18, 2025

/gcbrun

@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v8 [security] fix(deps): update dependency @google-cloud/firestore to v6 [security] Nov 19, 2025
@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from 9166cbe to 643a4b2 Compare November 19, 2025 01:43
@dpebot
Copy link
Collaborator

dpebot commented Nov 19, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from 643a4b2 to c99ab05 Compare December 3, 2025 16:36
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v6 [security] fix(deps): update dependency @google-cloud/firestore to v8 [security] Dec 3, 2025
@dpebot
Copy link
Collaborator

dpebot commented Dec 3, 2025

/gcbrun

@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v8 [security] fix(deps): update dependency @google-cloud/firestore to v6 [security] Dec 3, 2025
@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from c99ab05 to 46e6afc Compare December 3, 2025 22:36
@dpebot
Copy link
Collaborator

dpebot commented Dec 3, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from 46e6afc to f4e7565 Compare December 10, 2025 12:13
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v6 [security] fix(deps): update dependency @google-cloud/firestore to v8 [security] Dec 10, 2025
@dpebot
Copy link
Collaborator

dpebot commented Dec 10, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from f4e7565 to 72cd74e Compare December 10, 2025 16:50
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v8 [security] fix(deps): update dependency @google-cloud/firestore to v6 [security] Dec 10, 2025
@dpebot
Copy link
Collaborator

dpebot commented Dec 10, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from 72cd74e to fd6d764 Compare December 30, 2025 16:06
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v6 [security] fix(deps): update dependency @google-cloud/firestore to v8 [security] Dec 30, 2025
@dpebot
Copy link
Collaborator

dpebot commented Dec 30, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from fd6d764 to 487d091 Compare December 30, 2025 19:38
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v8 [security] fix(deps): update dependency @google-cloud/firestore to v6 [security] Dec 30, 2025
@dpebot
Copy link
Collaborator

dpebot commented Dec 30, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/npm-google-cloud-firestore-vulnerability branch from 487d091 to e2a6161 Compare December 31, 2025 11:33
@renovate-bot renovate-bot changed the title fix(deps): update dependency @google-cloud/firestore to v6 [security] fix(deps): update dependency @google-cloud/firestore to v8 [security] Dec 31, 2025
@dpebot
Copy link
Collaborator

dpebot commented Dec 31, 2025

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants