Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github May 15, 2023

Removes xml2js. It's no longer used after updating ancestor dependency @react-native-firebase/app. These dependencies need to be updated together.

Removes xml2js

Updates @react-native-firebase/app from 15.7.0 to 17.5.0

Release notes

Sourced from @​react-native-firebase/app's releases.

v5.6.0 - Sign-in with Apple support, react-native 0.60+ only

Please note v5 is still seeing releases, but they are for breaking ecosystem changes only - just enough so it remains relevant for those that can't move to v6 yet.

This change allows use of Sign-in with Apple, an iOS13+ requirement to avoid rejection by the App Store if you use any forms of social authentication.

Breaking: Note that iOS13+ is only supported with Xcode 11+, which requires react-native 0.60+

You may find that react-native-firebase v5.6.x still works on react-native 0.59 (the test suite still does), but you will not be able to integrate Sign-in with Apple until you upgrade as that library is react-native 0.60+ only.

It works well with https://github.com/invertase/react-native-apple-authentication including a guide specifically for integrating with react-native-firebase, though note the import statements are for v6, you'll need to import auth in the v5 style to use it: https://github.com/invertase/react-native-apple-authentication/blob/master/docs/FIREBASE.md

See discussion in the related issue: invertase/react-native-firebase#2884

https://rnfirebase.io/docs/v5.x.x/releases/v5.6.x

Changelog

Sourced from @​react-native-firebase/app's changelog.

17.5.0 (2023-05-11)

Features

  • firestore: Firestore Filter instance. Use Filter, Filter.or() & Filter.and() in Firestore queries. (#7045) (f7ec3d1)

Bug Fixes

  • app-check, types: ReactNativeFirebaseAppCheckProvider.configure returns void not Promise (f53dc2d)

17.4.3 (2023-04-26)

Bug Fixes

  • expo: update dependencies of config plugins (3e81143)

17.4.2 (2023-04-05)

Bug Fixes

  • android, auth: phone auth supports Play Integrity now (59b0238)

17.4.1 (2023-04-01)

Bug Fixes

  • app-check, ios: Xcode 14.3 compat bugfix (c4bb807), closes #7014
  • crashlytics, android: use v2.9.2 of crashlytics android plugin (8460ab6), closes #6983

17.4.0 (2023-03-25)

Features

Bug Fixes

  • android: bump to firebase-android-sdk 31.3.0 (500f15a)
  • app-distribution, android: update the gradle plugin to match BoM 31.2.3 release (ebfb413)
  • ios: bump firebase-ios-sdk to 10.7.0 (7103473)

17.3.2 (2023-03-05)

Bug Fixes

  • app, android: adopt firebase-android-sdk 31.2.3 (24fa17e)
  • app, ios: bump firebase-ios-sdk to 10.6.0 (06a6f69)
  • auth, types: add OIDCProvider to typescript declaration (#6936) (00185a3)
  • expo: extend expo config plugin regex to match latest version of AppDelegate (#6957) (281deed)

... (truncated)

Commits
  • a58ea4b chore(release): release packages
  • fbaae3c docs(messaging): add comments to sample code
  • c723c95 docs(messaging): balance parentheses in text
  • afe7359 docs(messaging): remove duplicate title key
  • 7b78348 test(ios): bump rnfb versions in Podfile.lock
  • afa2aa1 docs(auth, phone): add missing useEffect import in sample code
  • f53dc2d fix(app-check, types): ReactNativeFirebaseAppCheckProvider.configure returns ...
  • b46a29a docs(app-check, ios): update installation steps
  • 1631dd4 docs(analytics, android): how to see events in DebugView
  • f7ec3d1 feat(firestore): Firestore Filter instance. Use Filter, Filter.or() & `...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js). It's no longer used after updating ancestor dependency [@react-native-firebase/app](https://github.com/invertase/react-native-firebase). These dependencies need to be updated together.


Removes `xml2js`

Updates `@react-native-firebase/app` from 15.7.0 to 17.5.0
- [Release notes](https://github.com/invertase/react-native-firebase/releases)
- [Changelog](https://github.com/invertase/react-native-firebase/blob/main/CHANGELOG.md)
- [Commits](invertase/react-native-firebase@v15.7.0...v17.5.0)

---
updated-dependencies:
- dependency-name: xml2js
  dependency-type: indirect
- dependency-name: "@react-native-firebase/app"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner May 15, 2023 22:06
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 15, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants