[Snyk] Security upgrade firebase-tools from 7.16.1 to 13.6.1

[carlosvillu]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	416/1000 Why? Recently disclosed, Has a fix available, CVSS 2.6	Cross-Site Request Forgery (CSRF) SNYK-JS-FIREBASETOOLS-6808836	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: firebase-tools

The new version differs by 250 commits.

• 61eec81 13.6.1
• 0b770fe initial (#6951)
• 4743344 Move some of dialog to log rather than prompt to unbold (#6950)
• fbbffd7 Finally wrap up the secrets:set command 🎉 (#6947)
• 068a2b0 Block web browser requests to export endpoint (#6944)
• dbb8573 Add support for apphosting:secrets:describe, alias for functions:secrets:get to align with gcloud (#6948)
• ed46b01 Reconcile existing secrets management code. (#6946)
• ee68b28 Move FAH files from init directory to common library as there is no init command (#6945)
• db7dd17 Add FAH config library (#6941)
• 25673ea FAH ensure secret (#6940)
• 9a5534f Chose service accounts dialog (#6939)
• b82594f Onboard users to App Hosting using Developer Connect (#6915)
• cecf08b Add support for grantaccess (#6899)
• 77d5f0a Support pagination in listBackends (#6935)
• c152767 Actually use the correct method for calculating deprecation warning window (#6929)
• 3fb3240 Stop trying to clean up AR cache on function deletion. (#6927)
• 1a3b885 Strengthen typing of Runtimes+Langauges and their support timelines. (#6866)
• ed9e2d6 [firebase-release] Removed change log and reset repo after 13.6.0 release
• f6b7d05 13.6.0
• a26c3d0 Ignore quota project in GCF source uploads (#6917)
• 476bd33 Update to PubSub emulator 0.8.2 (#6916)
• ccab9b7 Add Service Usage Consumer role to GitHub Actions service account (#6895)
• 4c1bd42 Switching a few more places to getters (#6914)
• 6950829 Fix "could not assert Secret Manager permissions" Cloud Build error (#6904)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-Site Request Forgery (CSRF)