Bump undici, @react-native-firebase/app and @react-native-firebase/messaging#6046
Bump undici, @react-native-firebase/app and @react-native-firebase/messaging#6046dependabot[bot] wants to merge 1 commit into
Conversation
…ssaging Bumps [undici](https://github.com/nodejs/undici) to 6.27.0 and updates ancestor dependencies [undici](https://github.com/nodejs/undici), [@react-native-firebase/app](https://github.com/invertase/react-native-firebase) and [@react-native-firebase/messaging](https://github.com/invertase/react-native-firebase). These dependencies need to be updated together. Updates `undici` from 6.21.3 to 6.27.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v6.21.3...v6.27.0) Updates `@react-native-firebase/app` from 20.5.0 to 24.1.1 - [Release notes](https://github.com/invertase/react-native-firebase/releases) - [Changelog](https://github.com/invertase/react-native-firebase/blob/main/CHANGELOG.md) - [Commits](invertase/react-native-firebase@v20.5.0...v24.1.1) Updates `@react-native-firebase/messaging` from 20.5.0 to 24.1.1 - [Release notes](https://github.com/invertase/react-native-firebase/releases) - [Changelog](https://github.com/invertase/react-native-firebase/blob/main/CHANGELOG.md) - [Commits](invertase/react-native-firebase@v20.5.0...v24.1.1) --- updated-dependencies: - dependency-name: undici dependency-version: 6.27.0 dependency-type: indirect - dependency-name: "@react-native-firebase/app" dependency-version: 24.1.1 dependency-type: direct:production - dependency-name: "@react-native-firebase/messaging" dependency-version: 24.1.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
Warning Review the following alerts detected in dependencies. According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.
|
Bumps undici to 6.27.0 and updates ancestor dependencies undici, @react-native-firebase/app and @react-native-firebase/messaging. These dependencies need to be updated together.
Updates
undicifrom 6.21.3 to 6.27.0Release notes
Sourced from undici's releases.
... (truncated)
Commits
551138cBumped v6.27.0 (#5431)b7f252eBackport WebSocket maxPayloadSize fixes to v7.x (#5423) (#5428)25efa44fix(cookies): preserve values and parse SameSite strictlyf4c31d6fix: guard idle socket validation to skip fresh sockets (#5400)768beacBumped v6.26.0 (#5323)7917b25fix: validate EOF for chunked h1 responses (#5308)3420499Bumped v6.25.0 (#5029)d7a1e55feat: add configurable maxPayloadSize for WebSocket (#4955)a9d1848Do not mark v6.x releases as latest0126586Ignore local agent configuration filesMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for undici since your current version.
Updates
@react-native-firebase/appfrom 20.5.0 to 24.1.1Release notes
Sourced from @react-native-firebase/app's releases.
... (truncated)
Changelog
Sourced from @react-native-firebase/app's changelog.
... (truncated)
Commits
ea699f0chore(release): release packagesb97bc26fix(ios): revert to firebase-ios-sdk 12.10.0 to avoid startup crash624aaabdocs: update generated reference API styling (#9031)804a51fchore(release): release packages351a2fdrelease: allow versioning on branch for stable releases0e361b0release: make api reference deploy workflow reusable65bbe94fix: firebase-android-sdk 34.14.0, firebase-ios-sdk 12.11.0, firebase-js-sdk ...b1c2b53test: run workflows on stable branch push7fb16d9test: use maximal parallelization in full test run3c710e3style(lint): fix style skew due to prettier version skew from mainInstall script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
@react-native-firebase/messagingfrom 20.5.0 to 24.1.1Release notes
Sourced from @react-native-firebase/messaging's releases.
... (truncated)
Changelog
Sourced from @react-native-firebase/messaging's changelog.
... (truncated)
Commits
ea699f0chore(release): release packagesb97bc26fix(ios): revert to firebase-ios-sdk 12.10.0 to avoid startup crash624aaabdocs: update generated reference API styling (#9031)804a51fchore(release): release packages351a2fdrelease: allow versioning on branch for stable releases0e361b0release: make api reference deploy workflow reusable65bbe94fix: firebase-android-sdk 34.14.0, firebase-ios-sdk 12.11.0, firebase-js-sdk ...b1c2b53test: run workflows on stable branch push7fb16d9test: use maximal parallelization in full test run3c710e3style(lint): fix style skew due to prettier version skew from mainInstall script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Medium Risk
Major RN Firebase jump affects native SDKs and push (messaging); undici bump is security-driven but transitive. No TS/app edits in the PR, so risk is integration and runtime on iOS/Android rather than compile-time breakage in this diff.
Overview
Dependency-only update in
package.jsonandpackage-lock.json:@react-native-firebase/appand@react-native-firebase/messagingmove from ^20.5.0 to ^24.1.1, which pulls firebase 12.14.0 and a large refresh of@firebase/*packages (including new@firebase/aiand@firebase/data-connect). The lockfile also bumps undici to 6.27.0 (security fixes) and dropssuperstructfrom@react-native-firebase/app’s dependency tree.There are no application source changes in this diff—only manifests and lock resolution. Review should focus on native rebuilds (iOS
pod install, Android Gradle), push notification / FCM behavior on both platforms, and any v24 RN Firebase migration notes if other Firebase modules are used elsewhere in the repo.Reviewed by Cursor Bugbot for commit 0509e8f. Bugbot is set up for automated code reviews on this repo. Configure here.