[Snyk] Upgrade firebase-functions from 4.5.0 to 6.3.2

[lordpython]

Snyk has created this PR to upgrade firebase-functions from 4.5.0 to 6.3.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

• The recommended version is 19 versions ahead of your current version.

• The recommended version was released 4 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	452	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-8482416	452	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	452	No Known Exploit
	Open Redirect SNYK-JS-EXPRESS-6474509	452	No Known Exploit
	Cross-site Scripting SNYK-JS-EXPRESS-7926867	452	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	452	Proof of Concept
	Cross-site Scripting SNYK-JS-SEND-7926862	452	No Known Exploit
	Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	452	No Known Exploit

Release notes

Package name: firebase-functions

• 6.3.2 - 2025-02-13
  

  6.3.2

• 6.3.1 - 2025-01-31
  
  • Fix bug where sse response hangs if handler threw an error. (#1668)
• 6.3.0 - 2025-01-24
  
  • Add onCallGenkit (#1655)
• 6.2.0 - 2024-12-19
  
  • Add an authPolicy callback to CallableOptions for reusable auth middleware as well as helper auth policies (#1650)
  • Handle ESM functions codebases containing top-level awaits, which would break in node 22.12+ (#1651)
  • Multiple breaking changes to the not-yet-announced streaming feature for Callable Functions (#1652)
• 6.1.2 - 2024-12-09
  
  • Update callable function to better support long running requests (#1635)
• 6.1.1 - 2024-11-21
  
  • Fix bug where wrapInit wasn't called on v2 callable functions. (#1634)
  • Add support for callable function to return streaming response (#1629)
  • Add support for firebase-admin@13 (#1641)
• 6.1.0 - 2024-10-22
  
  • Bump express version to 4.19.2 (#1624)
  • Add support for beforeSmsSent auth blocking triggers. (#1589)
• 6.0.1 - 2024-09-16
  
  • Fix bug where v1 functions can't be emulated (#1615)
• 6.0.0 - 2024-09-10
  
  • Breaking: Change default entrypoint of the firebase-functions package to v2 instead of v1 (#1594)
  • Add @ deprecated annotation on functions.config() API (#1604)
• 5.1.1 - 2024-08-30
  
  • Fix retry in event triggered functions. (#1463)
  • Expose retry configuration in v2 RTDB trigger (#1588)
  • Fix CORS options for v2 callable functions (#1564)
  • Remove invalid enforceAppCheck option for v2 onRequest trigger (#1477)
• 5.1.0 - 2024-08-19
• 5.0.1 - 2024-05-03
• 5.0.0 - 2024-05-01
• 4.9.0 - 2024-04-04
• 4.8.2 - 2024-03-29
• 4.8.1 - 2024-03-19
• 4.8.0 - 2024-03-08
• 4.7.0 - 2024-02-07
• 4.6.0 - 2024-01-03
• 4.5.0 - 2023-11-02

from firebase-functions GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.