Build(deps): bump tar, @angular/fire, @angular/cli and firebase-tools in /examples/creative-studio/frontend by dependabot[bot] · Pull Request #1838 · GoogleCloudPlatform/professional-services

dependabot · 2026-03-10T23:47:49Z

Bumps tar to 7.5.11 and updates ancestor dependencies tar, @angular/fire, @angular/cli and firebase-tools. These dependencies need to be updated together.

Updates tar from 7.5.2 to 7.5.11

Commits

bf776f6 7.5.11
f48b5fa prevent escaping symlinks with drive-relative paths
97cff15 docs: more security info
2b72abc 7.5.10
7bc755d parse root off paths before sanitizing .. parts
c8cb846 update deps
1f0c2c9 7.5.9
fbb0851 build minified version as default export
6b8eba0 7.5.8
2cb1120 fix(unpack): improve UnpackSync symlink error "into" path accuracy
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates @angular/fire from 18.0.1 to 20.0.1

Release notes

Sourced from @angular/fire's releases.

20.0.1

What's Changed

fix: Avoid handling promise rejections twice in stability helper by @atscott in angular/angularfire#3657

New Contributors

@atscott made their first contribution in angular/angularfire#3657

Full Changelog: angular/angularfire@20.0.0...20.0.1

20.0.0

What's Changed

Peer on Angular v20

Peer on firebase-tools v14

Full Changelog: angular/angularfire@19.2.0...20.0.0

20.0.0-rc.0

What's Changed

Peer on Angular v20

Peer on firebase-tools v14

Full Changelog: angular/angularfire@19.2.0...20.0.0-rc.0

19.2.0

What's Changed

Add @angular/fire/ai entry for Firebase AI by @nohe427 in angular/angularfire#3650

New Contributors

@nohe427 made their first contribution in angular/angularfire#3650

Full Changelog: angular/angularfire@19.1.0...19.2.0

19.1.0

What's Changed

Added data connect to schematics by @maneesht in angular/angularfire#3638

New Contributors

@maneesht made their first contribution in angular/angularfire#3638

Full Changelog: angular/angularfire@19.0.0...19.1.0

19.0.0

What's Changed

Single sample application—demonstrating the modular SDK in a Zoneless SSR application with code-splitting on @defer

Now logging zone warnings about instability when using AngularFire outside of an injection context

Added docs on application instability

Bumped Angular, Firebase, and other dependencies

Now bundling CLI dependencies

Added

... (truncated)

Commits

eb99d8e fix: Avoid handling promise rejections twice in stability helper (#3657)
c1c6af9 Preparing v20 release (#3655)
61fde1b 19.2.0 release (#3651)
20bee94 Add AI package (#3650)
ec4e3bd Bump action, bump minor (#3644)
da4d2d1 Added data connect to schematics (#3638)
35e0a98 zone log verbosity (#3613)
8ce95bf Zone docs and switch to warnings (#3608)
e567618 fix(compat): correct injectors to fix issue with compat API on v19 (#3595)
bc926a8 Single n19 sample (#3591)
Additional commits viewable in compare view

Updates @angular/cli from 20.3.8 to 20.3.19

Release notes

Sourced from @angular/cli's releases.

20.3.19

@angular-devkit/build-angular

Commit Description

update copy-webpack-plugin to v14.0.0

20.3.18

@angular-devkit/core

Commit Description

update ajv to 8.18.0

@angular/build

Commit Description

update rollup to 4.59.0

20.3.17

@angular/ssr

Commit Description

prevent open redirect via X-Forwarded-Prefix header

validate host headers to prevent header-based SSRF

20.3.16

@angular/cli

Commit Description

update dependency @modelcontextprotocol/sdk to v1.26.0

20.3.15

@angular/cli

Commit Description

update pacote to v21.0.4

@angular-devkit/build-angular

Commit Description

update webpack to version 5.104.1

20.3.14

@angular/cli

Commit Description

update dependency @modelcontextprotocol/sdk to v1.25.2

20.3.13

@angular/cli

Commit Description

update @modelcontextprotocol/sdk to v1.24.0

... (truncated)

Changelog

Sourced from @angular/cli's changelog.

20.3.19 (2026-03-04)

@angular-devkit/build-angular

Commit Type Description

0299b4d1a fix update copy-webpack-plugin to v14.0.0

20.3.18 (2026-02-26)

@angular-devkit/core

Commit Type Description

39596d529 fix update ajv to 8.18.0

@angular/build

Commit Type Description

f668e2778 fix update rollup to 4.59.0

19.2.22 (2026-02-26)

@angular-devkit/core

Commit Type Description

0a01aecd9 fix update ajv to 8.18.0

@angular/build

Commit Type Description

79f59412a fix update rollup to 4.59.0

21.2.0 (2026-02-25)

... (truncated)

Commits

93a6f36 release: cut the v20.3.19 release
0299b4d fix(@angular-devkit/build-angular): update copy-webpack-plugin to v14.0.0
05b3511 release: cut the v20.3.18 release
39596d5 fix(@angular-devkit/core): update ajv to 8.18.0
f668e27 fix(@angular/build): update rollup to 4.59.0
c0d1626 release: cut the v20.3.17 release
8700e18 fix(@angular/ssr): prevent open redirect via X-Forwarded-Prefix header
67582a9 fix(@angular/ssr): validate host headers to prevent header-based SSRF
750f037 release: cut the v20.3.16 release
0f02aca build: update webpack to v5.105.0
Additional commits viewable in compare view

Updates firebase-tools from 13.35.1 to 15.9.1

Release notes

Sourced from firebase-tools's releases.

v15.9.1

Added support for next.config.ts and next.config.mts in Next.js deployments (#9871)

Enabled free trials without a billing instrument for Firebase Data Connect (#10042)

v15.9.0

Added *_EMULATOR_VERSION env variables to allow overriding specific versions of downloadable emulators

Updated the functions.config deprecation notice from March 2026 to March 2027 (#9941)

Detects when App Hosting fails to deploy, returning an error. (#8866)

Add firestore_query_collection tool back to MCP as it is not available in the OneMCP server yet.

Add support for custom resolvers in Firebase Data Connect (#9967)

Updated the Firebase Data Connect local toolkit to v3.2.1, which includes the following changes: (#10022)

Resolved metadata pathing issue for @redact and @check directives

v15.8.0

Corrects issue with updateService in runv2.ts (#9918)

Updated suite of MCP tools for Firestore to include many new tools. Firestore tools no longer support emulator mode.

Updated the Firebase Data Connect local toolkit to v3.2.0, which includes the following changes: (#9975)

Support for uuidV7()

Support for custom PostgreSQL schema names.

v15.7.0

Updated Python Functions template to use firebase_functions v0.5.x

Update the Firebase Data Connect local toolkit to v3.1.4, which includes the following changes: (#9944)

Add support for @searchable on varchar fields.

Fix a runtime error when using aggregations with nested reference fields.

Update the Golang dependency version from v1.24.12 to v1.24.13.

Added Developer Knowledge MCP tools which can search Google doumentation to help agents answer questions.

v15.6.0

Added support for enabling Firebase Authentication providers via firebase deploy. You can configure providers in firebase.json like so:
{
  "auth": {
    "providers": {
      "anonymous": true,
      "emailPassword": true,
      "googleSignIn": {
        "oAuthBrandDisplayName": "My App",
        "supportEmail": "[email protected]"
      }
    }
  }
}
Added initial zip deploy support in functions deploy for HTTP functions (#9707)

Fixes an issue where Python was missing from the firebase-tools Docker image (#9855).

Fixes billing information check to use user's project quota (#9879).

Updated the Firebase Data Connect local toolkit to v3.1.2, which contains the following changes: (#9882)

... (truncated)

Commits

f27ded1 15.9.1
02e7088 Always update to latest npm when building docker image (#10043)
4feab5f enable fdc instrumentless sql trial (#10042)
8b8a8ce add support for additional Next.js config file types (#9871)
80a5d3d 2.2.0 (#10036)
0ca486c [firebase-release] Removed change log and reset repo after 15.9.0 release
e4ef812 15.9.0
0ce0329 Flip resolvers flag. (#9967)
87ec0f7 update fdc emulator to 3.2.1 (#10022)
75e5fd7 Improve fdc iftrial error messages edge cases (#10014)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.11 and updates ancestor dependencies [tar](https://github.com/isaacs/node-tar), [@angular/fire](https://github.com/angular/angularfire), [@angular/cli](https://github.com/angular/angular-cli) and [firebase-tools](https://github.com/firebase/firebase-tools). These dependencies need to be updated together. Updates `tar` from 7.5.2 to 7.5.11 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.2...v7.5.11) Updates `@angular/fire` from 18.0.1 to 20.0.1 - [Release notes](https://github.com/angular/angularfire/releases) - [Commits](angular/angularfire@18.0.1...20.0.1) Updates `@angular/cli` from 20.3.8 to 20.3.19 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@20.3.8...v20.3.19) Updates `firebase-tools` from 13.35.1 to 15.9.1 - [Release notes](https://github.com/firebase/firebase-tools/releases) - [Changelog](https://github.com/firebase/firebase-tools/blob/main/CHANGELOG.md) - [Commits](firebase/firebase-tools@v13.35.1...v15.9.1) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.11 dependency-type: indirect - dependency-name: "@angular/fire" dependency-version: 20.0.1 dependency-type: direct:production - dependency-name: "@angular/cli" dependency-version: 20.3.19 dependency-type: direct:development - dependency-name: firebase-tools dependency-version: 15.9.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 10, 2026

dependabot bot mentioned this pull request Mar 10, 2026

Build(deps): bump tar, @angular/fire, @angular/cli and firebase-tools in /examples/creative-studio/frontend #1831

Closed

pull-request-size bot added the size/XS Denotes a PR that changes 0-9 lines. label Mar 10, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Build(deps): bump tar, @angular/fire, @angular/cli and firebase-tools in /examples/creative-studio/frontend#1838

Build(deps): bump tar, @angular/fire, @angular/cli and firebase-tools in /examples/creative-studio/frontend#1838
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/examples/creative-studio/frontend/multi-f22660a108

dependabot bot commented on behalf of github Mar 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	prevent open redirect via X-Forwarded-Prefix header
	validate host headers to prevent header-based SSRF

Conversation

dependabot bot commented on behalf of github Mar 10, 2026

20.0.1

What's Changed

New Contributors

20.0.0

What's Changed

20.0.0-rc.0

What's Changed

19.2.0

What's Changed

New Contributors

19.1.0

What's Changed

New Contributors

19.0.0

What's Changed

Added

20.3.19

@​angular-devkit/build-angular

20.3.18

@​angular-devkit/core

@​angular/build

20.3.17

@​angular/ssr

20.3.16

@​angular/cli

20.3.15

@​angular/cli

@​angular-devkit/build-angular

20.3.14

@​angular/cli

20.3.13

@​angular/cli

20.3.19 (2026-03-04)

@​angular-devkit/build-angular

20.3.18 (2026-02-26)

@​angular-devkit/core

@​angular/build

19.2.22 (2026-02-26)

@​angular-devkit/core

@​angular/build

21.2.0 (2026-02-25)

v15.9.1

v15.9.0

v15.8.0

v15.7.0

v15.6.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@angular-devkit/build-angular`

`@angular-devkit/core`

`@angular/build`

`@angular/ssr`

`@angular/cli`

`@angular/cli`

`@angular-devkit/build-angular`

`@angular/cli`

`@angular/cli`

`@angular-devkit/build-angular`

`@angular-devkit/core`

`@angular/build`

`@angular-devkit/core`

`@angular/build`