firebase-framework-tools

firebase-framework-tools copied to clipboard

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 4.5.1 to 4.5.3. Changelog Sourced from vite's changelog. 4.5.3 (2024-03-24) fix: fs.deny with globs with directories (#16250) (96a7f3a), closes #16250 4.5.2 (2024-01-19) fix: fs deny for case...

dependabot[bot]

Fixed import to use require.resolve to work with pnpm file structure. Tested all three package managers work fine now.

sjjj986

Add cache control header to include maxAge=1 year for our Angular CSR simple server, so that it matches what Angular SSR server automatically configured

sjjj986

Currently the nextjs adapter doesn't work if the app is built using yarn plug n play, this fixes that.

Yuangwang

Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2. Release notes Sourced from express's releases. 4.19.2 What's Changed Improved fix for open redirect allow list bypass Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2 4.19.1 What's Changed Fix...

dependabot[bot]

Bumps [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) from 5.3.3 to 5.3.4. Release notes Sourced from webpack-dev-middleware's releases. v5.3.4 5.3.4 (2024-03-20) Bug Fixes security: do not allow to read files above (#1779) (189c4ac) Changelog Sourced from...

dependabot[bot]

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.4 to 1.15.6. Commits 35a517c Release version 1.15.6 of the npm package. c4f847f Drop Proxy-Authorization across hosts. 8526b4a Use GitHub for disclosure. b1677ce Release version 1.15.5 of...

dependabot[bot]

Bumps [jose](https://github.com/panva/jose) from 4.15.4 to 4.15.5. Release notes Sourced from jose's releases. v4.15.5 Fixes add a maxOutputLength option to zlib inflate (1b91d88), fixes CVE-2024-28176 Changelog Sourced from jose's changelog. 4.15.5...

dependabot[bot]

Bumps [ip](https://github.com/indutny/node-ip) from 2.0.0 to 2.0.1. Commits 3b0994a 2.0.1 32f468f lib: fixed CVE-2023-42282 and added unit test See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any...

dependabot[bot]

Adds additional logic in publishing flow so that releases to the build adapter can only be published from the appropriate branch. For example adapter-nextjs-v14.0.1 can only be released from the...

Yuangwang