reactfire
reactfire copied to clipboard
Hooks, Context Providers, and Components that make it easy to interact with Firebase.
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together. Updates `path-to-regexp` from 0.1.7 to 0.1.12 Release notes Sourced from path-to-regexp's releases. Fix backtracking (again) Fixed Improved backtracking protection...
I haven't seen a single library that makes infinite scroll with subscriptions work in an easy way. Is this on the roadmap?
Bumps [firebase](https://github.com/firebase/firebase-js-sdk) from 9.9.1 to 10.9.0. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps and [jws](https://github.com/brianloveswords/node-jws). These dependencies needed to be updated together. Updates `jws` from 4.0.0 to 4.0.1 Release notes Sourced from jws's releases. v4.0.1 Changed Fix advisory GHSA-869p-cjfg-cm3x: createSign and createVerify...
Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.22.0. Release notes Sourced from express's releases. 4.22.0 Important: Security Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6) What's Changed Refactor: improve readability by @sazk07 in expressjs/express#6190 ci:...
Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.3.2. Changelog Sourced from node-forge's changelog. 1.3.2 - 2025-11-25 Security HIGH: ASN.1 Validator Desynchronization An Interpretation Conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and below...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). These dependencies needed to be updated together. Updates `vite` from 4.3.9 to 7.1.5 Release notes Sourced from vite's releases. v7.1.5 Please refer to CHANGELOG.md for...
Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.1 to 0.2.4. Changelog Sourced from tmp's changelog. v0.2.2 (2024-02-28) :bug: Bug Fix #278 Closes #268: Revert "fix #246: remove any double quotes or single quotes… (@mbargiel)...
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.12. Release notes Sourced from brace-expansion's releases. v1.1.12 pkg: publish on tag 1.x c460dbd fmt ccb8ac6 Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65)...
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start)...