Outdated versions of GRPC-Binary and GTM-session-fetcher

[DimDL]

Description

Outdated versions of GRPC-Binary and GTM-session-fetcher

The latest version of Firebase (12.12.1 right now) has 2 outdated dependencies:

Package	Current	Latest	URL
grpc-binary	1.69.0	1.69.1	https://github.com/google/grpc-binary.git
gtm-session-fetcher	3.5.0	5.2.0	https://github.com/google/gtm-session-fetcher.git

Concern:
gtm-session-fetcher in particular is almost 2 years old: https://github.com/google/gtm-session-fetcher/releases

Reproducing the issue

To reproduce:

• install Firebase SDK (iOS, via SPM, currently 12.12.1)
• run swift outdated, you get the table output above

Firebase SDK Version

12.12.1

Xcode Version

26.4

Installation Method

Swift Package Manager

Firebase Product(s)

All

Targeted Platforms

iOS

Relevant Log Output

If using Swift Package Manager, the project's Package.resolved

Expand Package.resolved snippet

Replace this line with the contents of your Package.resolved.

If using CocoaPods, the project's Podfile.lock

No response

[paulb777]

Firebase supports any gtm-session-fetcher up to 6.0.0. See https://github.com/firebase/firebase-ios-sdk/blob/main/Package.swift#L151. Run File -> Packages -> Update to Latest package versions to update. If it doesn't update, it's likely the result of another SDK that doesn't support later versions of gtm-session-fetcher.

The gRPC version is a pending task for the Firestore team

[nosferatu500]

I can confirm. My project relies solely on FirebaseSDK and for my installed v12.10.0, the gtm-session-fetcher is currently at version 5.1.0.

[DimDL]

Thanks for your prompt replies. Glad to hear gRPC is tracked :)

For GTM-session-fetcher, my point is that after I install Firebase, I shouldn't have to update an outdated sub-dependency; the fact that Firebase supports 3 majors versions "3.4.1" ..< "6.0.0" sounds like a bug / missed cleanup opportunity, especially given that when you look at all the other dependencies at https://github.com/firebase/firebase-ios-sdk/blob/main/Package.swift#L151, they all pin a single major version, sometime narrower than that (single minor version)

[paulb777]

@DimDL We'll likely narrow the support range at the next major version update. We purposely keep a wider version range to preserve compatibility with other SDKs in the ecosystem that don't yet support a dependency major version 5 of gtm-session-fetcher.

cc: @ncooke3