Bump firebase and react-redux-firebase#94
Conversation
Bumps [firebase](https://github.com/firebase/firebase-js-sdk) and [react-redux-firebase](https://github.com/prescottprue/react-redux-firebase). These dependencies needed to be updated together. Updates `firebase` from 7.24.0 to 12.15.0 - [Release notes](https://github.com/firebase/firebase-js-sdk/releases) - [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md) - [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@7.24.0...firebase@12.15.0) Updates `react-redux-firebase` from 1.5.1 to 4.0.0 - [Release notes](https://github.com/prescottprue/react-redux-firebase/releases) - [Changelog](https://github.com/prescottprue/react-redux-firebase/blob/main/CHANGELOG.md) - [Commits](prescottprue/react-redux-firebase@v1.5.1...v4.0.0) --- updated-dependencies: - dependency-name: firebase dependency-version: 12.15.0 dependency-type: direct:production - dependency-name: react-redux-firebase dependency-version: 4.0.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 3 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 6a9acc1. Configure here.
| "react-gravatar": "^2.6.3", | ||
| "react-redux": "^5.1.2", | ||
| "react-redux-firebase": "^1.5.1", | ||
| "react-redux-firebase": "^4.0.0", |
There was a problem hiding this comment.
RRF v4 without Provider migration
High Severity
Bumping react-redux-firebase to ^4.0.0 without accompanying app changes leaves the store wired through the removed reactReduxFirebase enhancer and no ReactReduxFirebaseProvider. Since v3, initialization goes through context, so auth, Realtime Database listeners, and firebaseConnect are unlikely to work after this dependency-only upgrade.
Reviewed by Cursor Bugbot for commit 6a9acc1. Configure here.
| "react-gravatar": "^2.6.3", | ||
| "react-redux": "^5.1.2", | ||
| "react-redux-firebase": "^1.5.1", | ||
| "react-redux-firebase": "^4.0.0", |
There was a problem hiding this comment.
Node 20 required, Volta 16
Medium Severity
react-redux-firebase 4 declares engines.node >=20, while the repo still pins Node 16.15.1 via Volta. Local installs, CI, and production builds on Node 16 can hit engine warnings or subtle failures after this bump even when npm install succeeds.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 6a9acc1. Configure here.
| "bootstrap": "3", | ||
| "canvas-confetti": "^1.9.3", | ||
| "firebase": "^7.24.0", | ||
| "firebase": "^12.15.0", |
There was a problem hiding this comment.
Firebase 12 without SDK wiring
High Severity
Jumping firebase to ^12.15.0 alongside react-redux-firebase 4, with no changes to how the app initializes Firebase, leaves Realtime Database, Auth, and Storage on the modular v9+ SDK while the UI still assumes the legacy enhancer-injected API (firebase.storage(), firebase.remove, etc.). That pairing often breaks at runtime until Firebase is initialized and passed into the Provider.
Reviewed by Cursor Bugbot for commit 6a9acc1. Configure here.
Bumps firebase and react-redux-firebase. These dependencies needed to be updated together.
Updates
firebasefrom 7.24.0 to 12.15.0Release notes
Sourced from firebase's releases.
... (truncated)
Commits
05c2691Version Packages (#10080)93cecd0Merge main into releasefa26af2Change setup-node@master to v4 (#10090)67c41e3Merge main into release9bef5abfeat(ai): Deprecate Google Maps GroundingenableWidget(#10035)40b2a8crun ratchet (#10064)3dcf8ecRevert "chore(ci): make all firestore integration tests optional (#10028)" (#...36d0ca3Merge main into release6990f26Fix querystring to always use apiKey even if a key is specified in the reques...712091cSupport API key referrer restrictions by changing the Auth SDK referrer polic...Updates
react-redux-firebasefrom 1.5.1 to 4.0.0Release notes
Sourced from react-redux-firebase's releases.
... (truncated)
Commits
c213733chore: fix release workflow32f8e0afeat!: modernize toolchain to Node 20+, vitest, and Biome (v4) (#1240)9952215chore: add nvmrc for clear node version6c68d76chore: fix 3 typos "seperate(d)" → "separate(d)" in index.d.ts JSDoc (#1239)befe3b9chore(deps): bump ua-parser-js in /examples/complete/react-native (#1218)6e00f5echore(docs): incorrect link (404) to profileFactory in FAQ (#1173)9041285chore(deps): bump follow-redirects in /examples/complete/simple (#1154)9b94cccchore(deps): bump follow-redirects in /examples/complete/firestore (#1153)3ce963fchore(deps): bump follow-redirects in /examples/complete/typescript (#1152)5fa1838v3.11.0 (#1149)Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.