build(deps): bump firebase from 12.14.0 to 12.15.0

[dependabot]

Bumps firebase from 12.14.0 to 12.15.0.

Release notes

Sourced from firebase's releases.

firebase@12.15.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/app@​0.15.0

Minor Changes

• 420156e #10023 - Add ability to call initializeAppCheck without a provider. If no provider is passed to initializeAppCheck, App Check will attempt to initialize with a ReCaptchaEnterpriseProvider using the site key found in the recaptchaSiteKey field of the Firebase project config.

@​firebase/app-check@​0.12.0

Minor Changes

• 420156e #10023 - Add ability to call initializeAppCheck without a provider. If no provider is passed to initializeAppCheck, App Check will attempt to initialize with a ReCaptchaEnterpriseProvider using the site key found in the recaptchaSiteKey field of the Firebase project config.

Patch Changes

• e389f70 #9991 (fixes #9405) - Fix error causing Auth and AppCheck conflict when both are using ReCAPTCHA Enterprise.

firebase@12.15.0

Minor Changes

• 043c0ab #9929 - Merge offline pipeline implementation with one minor API change

• 420156e #10023 - Add ability to call initializeAppCheck without a provider. If no provider is passed to initializeAppCheck, App Check will attempt to initialize with a ReCaptchaEnterpriseProvider using the site key found in the recaptchaSiteKey field of the Firebase project config.

Patch Changes

• Updated dependencies [043c0ab, e389f70, 420156e, 9bef5ab, 33521f2, 6a9d3d1, 712091c]:
• @​firebase/firestore@​4.16.0
• @​firebase/app-check@​0.12.0
• @​firebase/auth@​1.13.3
• @​firebase/app@​0.15.0
• @​firebase/ai@​2.13.1
• @​firebase/remote-config@​0.8.5
• @​firebase/auth-compat@​0.6.8
• @​firebase/firestore-compat@​0.4.11
• @​firebase/app-check-compat@​0.4.5
• @​firebase/app-compat@​0.5.14
• @​firebase/remote-config-compat@​0.2.26

@​firebase/firestore@​4.16.0

Minor Changes

• 043c0ab #9929 - Merge offline pipeline implementation with one minor API change

@​firebase/ai@​2.13.1

Patch Changes

... (truncated)

Commits

• 05c2691 Version Packages (#10080)
• 93cecd0 Merge main into release
• fa26af2 Change setup-node@master to v4 (#10090)
• 67c41e3 Merge main into release
• 9bef5ab feat(ai): Deprecate Google Maps Grounding enableWidget (#10035)
• 40b2a8c run ratchet (#10064)
• 3dcf8ec Revert "chore(ci): make all firestore integration tests optional (#10028)" (#...
• 36d0ca3 Merge main into release
• 6990f26 Fix querystring to always use apiKey even if a key is specified in the reques...
• 712091c Support API key referrer restrictions by changing the Auth SDK referrer polic...
• Additional commits viewable in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​firebase@​12.14.0 ⏵ 12.15.0	+1		+1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm @protobufjs/float is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → npm/firebase@12.15.0 → npm/@protobufjs/float@1.0.2 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@protobufjs/float@1.0.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report