[Snyk] Upgrade firebase-admin from 7.0.0 to 7.4.0

[snyk-bot]

Snyk has created this PR to upgrade firebase-admin from 7.0.0 to 7.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released 10 months ago, on 2019-05-21.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Prototype Pollution SNYK-JS-LODASHMERGE-173732	No Known Exploit
	Prototype Pollution SNYK-JS-LODASHMERGE-173733	No Known Exploit
	Man-in-the-Middle (MitM) SNYK-JS-HTTPSPROXYAGENT-469131	Proof of Concept

Release notes

Package name: firebase-admin

• 7.4.0 - 2019-05-21
  
  • Support for Node 6 is now deprecated. Developers are recommended to use Node 8 or higher when deploying the Admin SDK. An upcoming release will completely drop Node 6 support.

  Cloud Firestore

  • Upgraded the Cloud Firestore client dependency to v1.3.0. This upgrade comes with a new API for executing collection group queries.

  Realtime Database

  • Updated typings of the admin.database.ThenableReference type to extend from the built-in Promise type.
• 7.3.0 - 2019-04-17
  

  Firebase Auth

  • [feature] Added the provider config management APIs for managing OIDC and SAML provider configurations (CRUD) via auth.listProviderConfigs(), auth.getProviderConfig(), auth.deleteProviderConfig(), auth.updateProviderConfig() and auth.createProviderConfig().
• 7.2.0 - 2019-03-28
  

  Cloud Firestore

  • Upgraded the Cloud Firestore client dependency to v1.2.0. This upgrade exposes the v1beta and v1 clients, which provide direct access to the underlying Firestore and Firestore Admin RPCs. Please note that you must provide your Firebase credentials directly to these clients.
• 7.1.1 - 2019-03-20
  

  Firebase Cloud Messaging

  • Fixed a bug in the FCM batch APIs that prevented them from correctly handling some message parameters like AndroidConfig.ttl.
• 7.1.0 - 2019-03-14
  

  Firebase Cloud Messaging

  • A new messaging.sendMulticast() API for sending a message to a list of device registration tokens.
  • A new messaging.sendAll() API for sending a list of messages as a single batch.

  Firebase Auth

  • Improved typings of the auth.UpdateRequest interface to clearly specify the nullable fields.

  Cloud Firestore

  • Upgraded the Cloud Firestore client dependency to v1.1.0.
• 7.0.0 - 2019-01-31
  
  • Updated the Google Cloud Firestore client to v1.0.1. This contains breaking changes. Refer to the Cloud Firestore release notes for more details and migration instructions.
  • Updated the Google Cloud Storage client to v2.3.0. This contains breaking changes. Refer to the Cloud Storage release notes for more details and migration instructions.

  Authentication

  • The verifyIdToken() and verifySessionCookie() methods now return auth/id-token-expired and auth/session-cookie-expired error codes for expired JWTs.
  • Credentials-related errors are now reported with additional helpful details.

from firebase-admin GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[//]: # (snyk:metadata:{"dependencies":[{"name":"firebase-admin","from":"7.0.0","to":"7.4.0"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/xlogix/project/bd05afc7-3a08-4821-94a2-6f75a35628fc?utm_source=github&utm_medium=upgrade-pr","projectPublicId":"bd05afc7-3a08-4821-94a2-6f75a35628fc","env":"prod","prType":"upgrade","vulns":["SNYK-JS-LODASHMERGE-173732","SNYK-JS-LODASHMERGE-173733","SNYK-JS-HTTPSPROXYAGENT-469131"],"issuesToFix":[{"issueId":"SNYK-JS-LODASHMERGE-173732","severity":"high","title":"Prototype Pollution","exploitMaturity":"no-known-exploit"},{"issueId":"SNYK-JS-LODASHMERGE-173733","severity":"medium","title":"Prototype Pollution","exploitMaturity":"no-known-exploit"},{"issueId":"SNYK-JS-HTTPSPROXYAGENT-469131","severity":"medium","title":"Man-in-the-Middle (MitM)","exploitMaturity":"proof-of-concept"}],"upgrade":["SNYK-JS-LODASHMERGE-173732","SNYK-JS-LODASHMERGE-173733","SNYK-JS-HTTPSPROXYAGENT-469131"],"upgradeInfo":{"versionsDiff":5,"publishedDate":"2019-05-21T18:06:38.696Z"},"templateVariants":[],"hasFixes":true,"isMajorUpgrade":false,"isBreakingChange":false})