fix(deps): update dependency firebase-functions to v7

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
firebase-functions	^5.1.1 → ^7.4.0

---

Release Notes

firebase/firebase-functions (firebase-functions)

v7.4.0

Compare Source

• Promoted 2nd gen Firebase Authentication triggers (onUserCreated and onUserDeleted) to general availability. (#​1959)
• Restore backwards compatibility for declared parameters when mixing SDK versions in nested dependencies (#​1957)
• Unify global manifest on globalThis for forward-compatible manifest extraction across duplicate module installations (#​1955)
• Refactor WebhookOptions, Gemini, and Vertex AI provider types in v2/ai (#​1952)
• remove unused fields from FAL functions (#​1952)
• fix(v2): re-export the express Response type from firebase-functions/v2/https (#​1798)
• Fix malformed annotations and add missing JSDoc comments for AI provider reference docs (#​1950)
• Exported ai provider from firebase-functions/v2 and fixed reference doc generation. (#​1949)
• Fixed an issue where firebase-functions/logger/compat added synthetic Error stack traces to string console.error calls and Node.js runtime warnings. (#​1948)
• fix(firestore): fallback to valid resource path in createSnapshotFromJson (#​1922)

v7.3.2

Compare Source

• chore: update dependencies to close CVEs (#​1936)
• Fix an issue with npm labeling in the deployment pipeline. (#​1937)
• chore: improve release script (#​1932)

v7.3.0

Compare Source

• Bringing in lifecycle triggers into docgen. (#​1931)
• fix: Remove false warning when using Expression in cors option (#​1802)
• feat: Add requiresRole developer API for declarative security support and automatic Manifest extraction (#​1908)
• Validate literal timeoutSeconds values per v2 trigger type (0-540s for events, 0-3600s for HTTPS/callable, 0-1800s for task queues, 0-7s for identity functions) so misconfigured values fail at function-definition or manifest-extraction time instead of at deploy time. (#​1877)
• feat: Add requiresAPI function to allow declaring Google Cloud API dependencies in code. (#​1900)
• fix(v1): Call onInit for schedule.onRun functions (#​1801)
• feat: Add support to declare lifecycle hooks in functions. (#​1915)
• fix(cors): Fix issue using Params to set CORS allowed hosts (#​1903)
• fix(v2): Fix event data unpacking for auth event triggers (#​1923)
• feat: Add "v2/lifecycle" and "lifecycle" import paths for lifecycle hooks (#​1926)
• chore: revamp deploy pipeline to be stateless. Changes must now include relnotes (#​1929)
• chore: move the last encrypted keys into Google Cloud Secrets Manager (#​1929)

v7.2.5

Compare Source

Internal fixes

v7.2.4

Compare Source

-Internal Improvements #​1864

v7.2.3

Compare Source

• Accept BooleanParams in CallableOptions (#​1854)
• rotate the npmrc key to robot account (#​1857)

v7.2.2

Compare Source

• Allow v2 auth blocking functions to use run.app or cloudfunctions.net URLs (#​1831)

v7.2.1

Compare Source

• Fix issue where v1 firestore paths would not handle literals with leading or trailing slashes (#​1829)
• transformed string exprssions (currenlty an internal tool) now propagate across interpolated strings (#​1829)

v7.2.0

Compare Source

• All V1 configuration (e.g. pubsub topics) can be set with params. (#​1820)
• String expressions can now be used in string interpolation with the expr tag. (#​1820) E.g.

  const schedule = expr`every ${intervalParam} minutes`;

• Secret params now support a label and/or description. (#​1820)
• Add support for VPC direct connect (network interfaces) (#​1823)
• Realtime database events in the v2 SDK now provide auth context (#​1770)

v7.1.1

Compare Source

-Internal Docgen improvements

v7.1.0

Compare Source

• Add an onGraphRequest method. (#​1784, #​1818)

v7.0.6

Compare Source

Internal improvements (#​1814)

v7.0.5

Compare Source

• Fixed issue with missing dependency on graphql. (#​1795)
• Internal improvements (#​1800)

v7.0.4

Compare Source

v7.0.3

Compare Source

• Internal improvements.

v7.0.2

Compare Source

• Export param types (SecretParam, StringParam, etc.) from firebase-functions/params for type annotations. (#​1789)
• Remove attemptDeadlineSeconds in v2 scheduled functions. (#​1776)
• Allow JsonSecretParam in function secrets option arrays. (#​1788)

v7.0.1

Compare Source

• Fix "Dual-Package Hazard" for parameterized configuration in ESM projects. (#​1780)

v7.0.0

Compare Source

• BREAKING: Drop support for Node.js 16. Minimum supported version is now Node.js 18. (#​1747)
• BREAKING: Remove deprecated functions.config() API. Use params module for environment variables instead. (#​1748)
• BREAKING: Upgrade to TypeScript v5 and target ES2022. (#​1746)
• BREAKING: Unhandled errors in async onRequest handlers in the Emulator now return a 500 error immediately. (#​1755)
• Add support for ESM (ECMAScript Modules) alongside CommonJS. (#​1750)
• Add onMutationExecuted() trigger for Firebase Data Connect. (#​1727)
• BREAKING: Rename v1 Event to LegacyEvent to avoid api-extractor conflict. (#​1767)

v6.6.0

Compare Source

• Add defineJsonSecret API for storing structured JSON objects in Cloud Secret Manager. (#​1745)
• Enhance validation against incomplete/invalid app_remove events to avoid runtime crashes. (#​1738)

v6.5.0

Compare Source

• Add LLM guidance (#​1736)
• Fix issue calling DataSnapshot methods with null data (#​1661)
• Adds auth.rawToken to context to allow access to the underlying token. (#​1678)
• Fix logger runtime exceptions #(1704)

v6.4.0

Compare Source

• Add @​deprecated annotation to callable functions's auth policy (#​1675)
• Allows CORS to be a parameter. (#​1688)
• Make traceContext accessible (#​1696)

v6.3.2

Compare Source

v6.3.1

Compare Source

• Fix bug where sse response hangs if handler threw an error. (#​1668)

v6.3.0

Compare Source

• Add onCallGenkit (#​1655)

v6.2.0

Compare Source

• Add an authPolicy callback to CallableOptions for reusable auth middleware as well as helper auth policies (#​1650)
• Handle ESM functions codebases containing top-level awaits, which would break in node 22.12+ (#​1651)
• Multiple breaking changes to the not-yet-announced streaming feature for Callable Functions (#​1652)

v6.1.2

Compare Source

• Update callable function to better support long running requests (#​1635)

v6.1.1

Compare Source

• Fix bug where wrapInit wasn't called on v2 callable functions. (#​1634)
• Add support for callable function to return streaming response (#​1629)
• Add support for firebase-admin@​13 (#​1641)

v6.1.0

Compare Source

• Bump express version to 4.19.2 (#​1624)
• Add support for beforeSmsSent auth blocking triggers. (#​1589)

v6.0.1

Compare Source

• Fix bug where v1 functions can't be emulated (#​1615)

v6.0.0

Compare Source

• Breaking: Change default entrypoint of the firebase-functions package to v2 instead of v1 (#​1594)
• Add @​deprecated annotation on functions.config() API (#​1604)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 6am and before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.