fix(deps): update dependency firebase-functions to v7

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
firebase-functions	^4.9.0 → ^7.3.2

---

Release Notes

firebase/firebase-functions (firebase-functions)

v7.3.2

Compare Source

• chore: update dependencies to close CVEs (#​1936)
• Fix an issue with npm labeling in the deployment pipeline. (#​1937)
• chore: improve release script (#​1932)

v7.3.0

Compare Source

• Bringing in lifecycle triggers into docgen. (#​1931)
• fix: Remove false warning when using Expression in cors option (#​1802)
• feat: Add requiresRole developer API for declarative security support and automatic Manifest extraction (#​1908)
• Validate literal timeoutSeconds values per v2 trigger type (0-540s for events, 0-3600s for HTTPS/callable, 0-1800s for task queues, 0-7s for identity functions) so misconfigured values fail at function-definition or manifest-extraction time instead of at deploy time. (#​1877)
• feat: Add requiresAPI function to allow declaring Google Cloud API dependencies in code. (#​1900)
• fix(v1): Call onInit for schedule.onRun functions (#​1801)
• feat: Add support to declare lifecycle hooks in functions. (#​1915)
• fix(cors): Fix issue using Params to set CORS allowed hosts (#​1903)
• fix(v2): Fix event data unpacking for auth event triggers (#​1923)
• feat: Add "v2/lifecycle" and "lifecycle" import paths for lifecycle hooks (#​1926)
• chore: revamp deploy pipeline to be stateless. Changes must now include relnotes (#​1929)
• chore: move the last encrypted keys into Google Cloud Secrets Manager (#​1929)

v7.2.5

Compare Source

Internal fixes

v7.2.4

Compare Source

-Internal Improvements #​1864

v7.2.3

Compare Source

• Accept BooleanParams in CallableOptions (#​1854)
• rotate the npmrc key to robot account (#​1857)

v7.2.2

Compare Source

• Allow v2 auth blocking functions to use run.app or cloudfunctions.net URLs (#​1831)

v7.2.1

Compare Source

• Fix issue where v1 firestore paths would not handle literals with leading or trailing slashes (#​1829)
• transformed string exprssions (currenlty an internal tool) now propagate across interpolated strings (#​1829)

v7.2.0

Compare Source

• All V1 configuration (e.g. pubsub topics) can be set with params. (#​1820)
• String expressions can now be used in string interpolation with the expr tag. (#​1820) E.g.

  const schedule = expr`every ${intervalParam} minutes`;

• Secret params now support a label and/or description. (#​1820)
• Add support for VPC direct connect (network interfaces) (#​1823)
• Realtime database events in the v2 SDK now provide auth context (#​1770)

v7.1.1

Compare Source

-Internal Docgen improvements

v7.1.0

Compare Source

• Add an onGraphRequest method. (#​1784, #​1818)

v7.0.6

Compare Source

Internal improvements (#​1814)

v7.0.5

Compare Source

• Fixed issue with missing dependency on graphql. (#​1795)
• Internal improvements (#​1800)

v7.0.4

Compare Source

v7.0.3

Compare Source

• Internal improvements.

v7.0.2

Compare Source

• Export param types (SecretParam, StringParam, etc.) from firebase-functions/params for type annotations. (#​1789)
• Remove attemptDeadlineSeconds in v2 scheduled functions. (#​1776)
• Allow JsonSecretParam in function secrets option arrays. (#​1788)

v7.0.1

Compare Source

• Fix "Dual-Package Hazard" for parameterized configuration in ESM projects. (#​1780)

v7.0.0

Compare Source

• BREAKING: Drop support for Node.js 16. Minimum supported version is now Node.js 18. (#​1747)
• BREAKING: Remove deprecated functions.config() API. Use params module for environment variables instead. (#​1748)
• BREAKING: Upgrade to TypeScript v5 and target ES2022. (#​1746)
• BREAKING: Unhandled errors in async onRequest handlers in the Emulator now return a 500 error immediately. (#​1755)
• Add support for ESM (ECMAScript Modules) alongside CommonJS. (#​1750)
• Add onMutationExecuted() trigger for Firebase Data Connect. (#​1727)
• BREAKING: Rename v1 Event to LegacyEvent to avoid api-extractor conflict. (#​1767)

v6.6.0

Compare Source

• Add defineJsonSecret API for storing structured JSON objects in Cloud Secret Manager. (#​1745)
• Enhance validation against incomplete/invalid app_remove events to avoid runtime crashes. (#​1738)

v6.5.0

Compare Source

• Add LLM guidance (#​1736)
• Fix issue calling DataSnapshot methods with null data (#​1661)
• Adds auth.rawToken to context to allow access to the underlying token. (#​1678)
• Fix logger runtime exceptions #(1704)

v6.4.0

Compare Source

• Add @​deprecated annotation to callable functions's auth policy (#​1675)
• Allows CORS to be a parameter. (#​1688)
• Make traceContext accessible (#​1696)

v6.3.2

Compare Source

v6.3.1

Compare Source

• Fix bug where sse response hangs if handler threw an error. (#​1668)

v6.3.0

Compare Source

• Add onCallGenkit (#​1655)

v6.2.0

Compare Source

• Add an authPolicy callback to CallableOptions for reusable auth middleware as well as helper auth policies (#​1650)
• Handle ESM functions codebases containing top-level awaits, which would break in node 22.12+ (#​1651)
• Multiple breaking changes to the not-yet-announced streaming feature for Callable Functions (#​1652)

v6.1.2

Compare Source

• Update callable function to better support long running requests (#​1635)

v6.1.1

Compare Source

• Fix bug where wrapInit wasn't called on v2 callable functions. (#​1634)
• Add support for callable function to return streaming response (#​1629)
• Add support for firebase-admin@​13 (#​1641)

v6.1.0

Compare Source

• Bump express version to 4.19.2 (#​1624)
• Add support for beforeSmsSent auth blocking triggers. (#​1589)

v6.0.1

Compare Source

• Fix bug where v1 functions can't be emulated (#​1615)

v6.0.0

Compare Source

• Breaking: Change default entrypoint of the firebase-functions package to v2 instead of v1 (#​1594)
• Add @​deprecated annotation on functions.config() API (#​1604)

v5.1.1

Compare Source

• Fix retry in event triggered functions. (#​1463)
• Expose retry configuration in v2 RTDB trigger (#​1588)
• Fix CORS options for v2 callable functions (#​1564)
• Remove invalid enforceAppCheck option for v2 onRequest trigger (#​1477)

v5.1.0

Compare Source

• Future Extensions support (#​1590)

v5.0.1

Compare Source

• Fix App fetching for named firestore instances (#​1562).

v5.0.0

Compare Source

• Add option to get named firestore instance for v2 firestore functions (#​1550).
• Remove firebase-admin v10 dependency for Firestore triggers multi-DB support (#​1555).

v4.9.0

Compare Source

• Add new 2nd gen Firestore auth context triggers. (#​1519)

v4.8.2

Compare Source

Fix bug with CORS options for an array of one string (#​1544)

v4.8.1

Compare Source

Fix bug where 1st gen functions eventually fail with stack too deep (#​1540)
Make simple CORS options static for improved debugability (#​1536)

v4.8.0

Compare Source

Add onInit callback function for global variable initialization (#​1531)

v4.7.0

Compare Source

• Fixes access on deeply nested, nonexistent property. (#​1432)
• Add IteratedDataSnapshot interface to match with firebase admin v12 (#​1517).
• Make bucket parameterizeable in storage functions (#​1518)
• Introduce helper library for select and multi-select input (#​1518)

v4.6.0

Compare Source

• Wrap 2nd gen onCall functions with trace context. (#​1491)
• Bump peer depdencies for firebase-admin to support 12.0.0. (#​1509)

v4.5.0

Compare Source

• Remove HTTP server shutdown message. (#​1457)
• Add features to task queue functions. (#​1423)
• Add traces to V2 Firestore trigger logs. (#​1440)
• Fix incorrectly parsed timestamps in auth blocking functions. (#​1472)
• Add recaptcha verdict support for auth blocking functions (#​1458)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 6am and before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.