build(deps): bump firebase from 12.13.0 to 12.14.0

[dependabot]

Bumps firebase from 12.13.0 to 12.14.0.

Release notes

Sourced from firebase's releases.

firebase@12.14.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/ai@​2.13.0

Minor Changes

• f0752a0 #9800 - Add initializeDeviceModel() method to allow explicit initialization of on-device model in hybrid mode.

• bd08cae #9926 - Change "beta" (public preview) tags to "public" (generally available) for all hybrid inference features.

Patch Changes

• bd2644b #9956 (fixes #9938) - Fix a bug that caused ChatSession.sendMessageStream() and TemplateChatSession.sendMessageStream() to send duplicate user turns in the request.

firebase@12.14.0

Minor Changes

• 3b337b9 #9917 - Add new API and deprecate old API for creating and deleting fcm registration

• f0752a0 #9800 - Add initializeDeviceModel() method to allow explicit initialization of on-device model in hybrid mode.

• d5b0f61 #9913 - Added minimum and maximum FieldValue operations

• bd08cae #9926 - Change "beta" (public preview) tags to "public" (generally available) for all hybrid inference features.

Patch Changes

• 2697919 #9845 (fixes #9732) - Updated _isAvailable() to use retry logic for the initial IndexedDB availability check, preventing incorrect fallbacks to in-memory persistence in environments where transactions may occasionally drop on startup.

• Updated dependencies [3b337b9, bd2644b, 2697919, f0752a0, d5b0f61, 4d3f71a, 85f6f4e, d675580, bd08cae, 51e93fc, a1a2455]:

• @​firebase/messaging@​0.13.0

• @​firebase/app@​0.14.13

• @​firebase/ai@​2.13.0

• @​firebase/auth@​1.13.2

• @​firebase/auth-compat@​0.6.7

• @​firebase/firestore@​4.15.0

• @​firebase/remote-config@​0.8.4

• @​firebase/app-check@​0.11.4

• @​firebase/data-connect@​0.7.1

• @​firebase/messaging-compat@​0.2.27

• @​firebase/functions@​0.13.5

• @​firebase/app-compat@​0.5.13

• @​firebase/firestore-compat@​0.4.10

• @​firebase/remote-config-compat@​0.2.25

• @​firebase/app-check-compat@​0.4.4

• @​firebase/functions-compat@​0.4.5

... (truncated)

Commits

• 62a4653 Version Packages (#10004)
• 82dd7ed Merge main into release
• bd08cae feat(ai): Update tags to mark hybrid inference features as GA (#9926)
• f0752a0 feat(ai)!: Add explicit initializeDeviceModel() method when using hybrid (#...
• cbb1953 implement onSubChange for FID-based registration (#9996)
• 85f6f4e fix(firestore): improved robustness and logging in query listen stream creati...
• 4d3f71a fix(remoteconfig): Stopping last running experiment must call updateActiveExp...
• d675580 fix(app-check): Fix getLimitedUseToken() (#9987)
• 3b337b9 Feat/messaging api series (#9917)
• eefab3e fix(changelog-generator): fix postinstall build failure (#9948)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	firebase@​12.13.0 ⏵ 12.14.0	+1		+1	+1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm @firebase/firestore is 72.0% likely obfuscated Confidence: 0.72 Location: Package overview From: ? → npm/firebase@12.14.0 → npm/@firebase/firestore@4.15.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@firebase/firestore@4.15.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report