fix(deps): update dependency firebase-functions to v7

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
firebase-functions	^3.24.1 → ^7.3.2

---

Release Notes

firebase/firebase-functions (firebase-functions)

v7.3.2

Compare Source

• chore: update dependencies to close CVEs (#​1936)
• Fix an issue with npm labeling in the deployment pipeline. (#​1937)
• chore: improve release script (#​1932)

v7.3.0

Compare Source

• Bringing in lifecycle triggers into docgen. (#​1931)
• fix: Remove false warning when using Expression in cors option (#​1802)
• feat: Add requiresRole developer API for declarative security support and automatic Manifest extraction (#​1908)
• Validate literal timeoutSeconds values per v2 trigger type (0-540s for events, 0-3600s for HTTPS/callable, 0-1800s for task queues, 0-7s for identity functions) so misconfigured values fail at function-definition or manifest-extraction time instead of at deploy time. (#​1877)
• feat: Add requiresAPI function to allow declaring Google Cloud API dependencies in code. (#​1900)
• fix(v1): Call onInit for schedule.onRun functions (#​1801)
• feat: Add support to declare lifecycle hooks in functions. (#​1915)
• fix(cors): Fix issue using Params to set CORS allowed hosts (#​1903)
• fix(v2): Fix event data unpacking for auth event triggers (#​1923)
• feat: Add "v2/lifecycle" and "lifecycle" import paths for lifecycle hooks (#​1926)
• chore: revamp deploy pipeline to be stateless. Changes must now include relnotes (#​1929)
• chore: move the last encrypted keys into Google Cloud Secrets Manager (#​1929)

v7.2.5

Compare Source

Internal fixes

v7.2.4

Compare Source

-Internal Improvements #​1864

v7.2.3

Compare Source

• Accept BooleanParams in CallableOptions (#​1854)
• rotate the npmrc key to robot account (#​1857)

v7.2.2

Compare Source

• Allow v2 auth blocking functions to use run.app or cloudfunctions.net URLs (#​1831)

v7.2.1

Compare Source

• Fix issue where v1 firestore paths would not handle literals with leading or trailing slashes (#​1829)
• transformed string exprssions (currenlty an internal tool) now propagate across interpolated strings (#​1829)

v7.2.0

Compare Source

• All V1 configuration (e.g. pubsub topics) can be set with params. (#​1820)
• String expressions can now be used in string interpolation with the expr tag. (#​1820) E.g.

  const schedule = expr`every ${intervalParam} minutes`;

• Secret params now support a label and/or description. (#​1820)
• Add support for VPC direct connect (network interfaces) (#​1823)
• Realtime database events in the v2 SDK now provide auth context (#​1770)

v7.1.1

Compare Source

-Internal Docgen improvements

v7.1.0

Compare Source

• Add an onGraphRequest method. (#​1784, #​1818)

v7.0.6

Compare Source

Internal improvements (#​1814)

v7.0.5

Compare Source

• Fixed issue with missing dependency on graphql. (#​1795)
• Internal improvements (#​1800)

v7.0.4

Compare Source

v7.0.3

Compare Source

• Internal improvements.

v7.0.2

Compare Source

• Export param types (SecretParam, StringParam, etc.) from firebase-functions/params for type annotations. (#​1789)
• Remove attemptDeadlineSeconds in v2 scheduled functions. (#​1776)
• Allow JsonSecretParam in function secrets option arrays. (#​1788)

v7.0.1

Compare Source

• Fix "Dual-Package Hazard" for parameterized configuration in ESM projects. (#​1780)

v7.0.0

Compare Source

• BREAKING: Drop support for Node.js 16. Minimum supported version is now Node.js 18. (#​1747)
• BREAKING: Remove deprecated functions.config() API. Use params module for environment variables instead. (#​1748)
• BREAKING: Upgrade to TypeScript v5 and target ES2022. (#​1746)
• BREAKING: Unhandled errors in async onRequest handlers in the Emulator now return a 500 error immediately. (#​1755)
• Add support for ESM (ECMAScript Modules) alongside CommonJS. (#​1750)
• Add onMutationExecuted() trigger for Firebase Data Connect. (#​1727)
• BREAKING: Rename v1 Event to LegacyEvent to avoid api-extractor conflict. (#​1767)

v6.6.0

Compare Source

• Add defineJsonSecret API for storing structured JSON objects in Cloud Secret Manager. (#​1745)
• Enhance validation against incomplete/invalid app_remove events to avoid runtime crashes. (#​1738)

v6.5.0

Compare Source

• Add LLM guidance (#​1736)
• Fix issue calling DataSnapshot methods with null data (#​1661)
• Adds auth.rawToken to context to allow access to the underlying token. (#​1678)
• Fix logger runtime exceptions #(1704)

v6.4.0

Compare Source

• Add @​deprecated annotation to callable functions's auth policy (#​1675)
• Allows CORS to be a parameter. (#​1688)
• Make traceContext accessible (#​1696)

v6.3.2

Compare Source

v6.3.1

Compare Source

• Fix bug where sse response hangs if handler threw an error. (#​1668)

v6.3.0

Compare Source

• Add onCallGenkit (#​1655)

v6.2.0

Compare Source

• Add an authPolicy callback to CallableOptions for reusable auth middleware as well as helper auth policies (#​1650)
• Handle ESM functions codebases containing top-level awaits, which would break in node 22.12+ (#​1651)
• Multiple breaking changes to the not-yet-announced streaming feature for Callable Functions (#​1652)

v6.1.2

Compare Source

• Update callable function to better support long running requests (#​1635)

v6.1.1

Compare Source

• Fix bug where wrapInit wasn't called on v2 callable functions. (#​1634)
• Add support for callable function to return streaming response (#​1629)
• Add support for firebase-admin@​13 (#​1641)

v6.1.0

Compare Source

• Bump express version to 4.19.2 (#​1624)
• Add support for beforeSmsSent auth blocking triggers. (#​1589)

v6.0.1

Compare Source

• Fix bug where v1 functions can't be emulated (#​1615)

v6.0.0

Compare Source

• Breaking: Change default entrypoint of the firebase-functions package to v2 instead of v1 (#​1594)
• Add @​deprecated annotation on functions.config() API (#​1604)

v5.1.1

Compare Source

• Fix retry in event triggered functions. (#​1463)
• Expose retry configuration in v2 RTDB trigger (#​1588)
• Fix CORS options for v2 callable functions (#​1564)
• Remove invalid enforceAppCheck option for v2 onRequest trigger (#​1477)

v5.1.0

Compare Source

• Future Extensions support (#​1590)

v5.0.1

Compare Source

• Fix App fetching for named firestore instances (#​1562).

v5.0.0

Compare Source

• Add option to get named firestore instance for v2 firestore functions (#​1550).
• Remove firebase-admin v10 dependency for Firestore triggers multi-DB support (#​1555).

v4.9.0

Compare Source

• Add new 2nd gen Firestore auth context triggers. (#​1519)

v4.8.2

Compare Source

Fix bug with CORS options for an array of one string (#​1544)

v4.8.1

Compare Source

Fix bug where 1st gen functions eventually fail with stack too deep (#​1540)
Make simple CORS options static for improved debugability (#​1536)

v4.8.0

Compare Source

Add onInit callback function for global variable initialization (#​1531)

v4.7.0

Compare Source

• Fixes access on deeply nested, nonexistent property. (#​1432)
• Add IteratedDataSnapshot interface to match with firebase admin v12 (#​1517).
• Make bucket parameterizeable in storage functions (#​1518)
• Introduce helper library for select and multi-select input (#​1518)

v4.6.0

Compare Source

• Wrap 2nd gen onCall functions with trace context. (#​1491)
• Bump peer depdencies for firebase-admin to support 12.0.0. (#​1509)

v4.5.0

Compare Source

• Remove HTTP server shutdown message. (#​1457)
• Add features to task queue functions. (#​1423)
• Add traces to V2 Firestore trigger logs. (#​1440)
• Fix incorrectly parsed timestamps in auth blocking functions. (#​1472)
• Add recaptcha verdict support for auth blocking functions (#​1458)

v4.4.1

Compare Source

• Update list of supported regions for 2nd Gen Functions. (#​1402)
• Fix bug where log message on structured log was being overwritten (#​1416)
• Fix bug where exists() should return true for falsy values like 0, "" (#​1410)

v4.4.0

Compare Source

• Fix typo on alert event type. (#​1384)
• Add consumeAppCheckToken option for callable functions (#​1374)

v4.3.1

Compare Source

• Export Change interface from the v2 firestore path (#​1379).

v4.3.0

Compare Source

• Enhance firstore triggers (#​1358).
• Allow parametrized string type in ServiceAccount fields in Functions and trigger configs (#​1309)
• Adds support for region params (#​1353).

v4.2.1

Compare Source

• Fixes an emulator issue where snapshot.ref could not point to multiple databases (#​1339).
• Fixes emulated v1 callable functions that use a monorepo setup (#​1345).

v4.2.0

Compare Source

• Allow Functions to specify vpcConnector as a string parameter (#​1329)
• Upgrade jsonwebtoken to version 9 (#​1336)
• Adds 'eventarcpublishing' as required API to custom event function
• Hide type information of defineFloat in params module - it's not supported yet (#​1341)

v4.1.1

Compare Source

• Fix bug where some FireAlerts v2 functions didn't correctly return values back to Functions Framework. (#​1324)

v4.1.0

Compare Source

• Deprecate typoed function name lessThanorEqualTo (#​1284)
• Fix a bug where supplying preserveExternalChanges to scheduled functions would cause deployment failure (#​1305).
• Adds omit option to skip function deploys (#​1298).

v4.0.2

Compare Source

• Fix bug where secret parameters, defined using defineSecret(), were missing a .value() method (#​1281)
• Fix bug where v1/https was not exported (#​1267)
• Fix incorrect typeVersion export paths (#​1287)
• Revert removal of \_\_trigger (#​1274)

v4.0.1

Compare Source

Correct the function BooleanExpression#then to BooleanExpression#thenElse (#​1268)

v4.0.0

Compare Source

Breaking Changes

• Deprecated allowInvalidAppCheckToken option. Instead use
  enforceAppCheck.

App Check enforcement on callable functions is disabled by default in v4.
Requests containing invalid App Check tokens won't be denied unless you
explicitly enable App Check enforcement using the new enforceAppCheck option.
Furthermore, when enforcement is enabled, callable functions will deny
all requests without App Check tokens.

• Dropped support for Node.js versions 8, 10, and 12.
• Dropped support for Admin SDK versions 8 and 9.
• Removed the functions.handler namespace.
• DataSnapshot passed to the Firebase Realtime Database trigger now
  matches the DataSnapshot returned by the Admin SDK, with null values
  removed.
• Removed __trigger object on function handlers.
• Reorganized source code location. This affects only apps that directly import files instead of using the recommend entry points specified in the
• Reworked the apps library and removed lodash as a runtime dependency.
• Change default behavior of function deploy to clear configurations not specified in the source code (e.g. change memory configuration in Google Cloud Console). Use preserveExternalChanges to keep existing behavior. See docs for more info.

Enhancements

• Logs created with the functions.logger package in v2 functions
  are now annotated with each request's trace ID, making it easy to correlate
  log entries with the incoming request. Trace IDs are especially useful for
  cases where 2nd gen's concurrency feature permits a function
  to handle multiple requests at any given time. See
  Correlate log entries to learn more.
• functions.logger.error now always outputs an error object and is included in Google Cloud Error Reporting.
• The logging severity of Auth/App Check token validation has changed from info to debug level.
• Event parameters for 2nd generation functions are now strongly typed, permitting stronger TypeScript types for matched parameters.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 6am and before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.