refactor: Bump firebase-admin from 13.9.0 to 14.2.0

[dependabot]

Bumps firebase-admin from 13.9.0 to 14.2.0.

Release notes

Sourced from firebase-admin's releases.

Firebase Admin Node.js SDK v14.2.0

New Features

• feat(functions): Implement TaskQueue Scopes (#3210)

Bug Fixes

• fix(dataconnect): Refactor CRUD helpers to use GraphQL variables and @allow directive (#3182)

Miscellaneous

• [chore] Release 14.2.0 (#3213)
• build(deps): bump websocket-driver from 0.7.4 to 0.7.5 (#3212)
• build(deps-dev): bump @​types/node from 26.0.0 to 26.1.1 (#3207)
• build(deps-dev): bump nock from 14.0.15 to 14.0.16 (#3202)
• fix zizmor findings (#3200)
• Security Audit & Remediation: GitHub Actions (#3192)
• Security audit: remove unused dependencies and remediate dev vulnerabilities (#3191)
• build(deps-dev): bump mocha from 11.7.5 to 11.7.6 (#3196)
• build(deps-dev): bump @​types/jsonwebtoken from 8.5.1 to 8.5.9 (#3195)
• build(deps-dev): bump eslint from 10.4.1 to 10.5.0 (#3197)
• build(deps): bump google-auth-library from 10.7.0 to 10.9.0 (#3198)

Firebase Admin Node.js SDK v14.1.0

New Features

• feat(fcm): Enable fid and deprecate token for Send API (#3145)

Bug Fixes

• fix(dataconnect): fix deserialization of emulator gRPC error codes into detailed errors (#3180)

Miscellaneous

• [chore] Release 14.1.0 (#3193)
• build(deps-dev): bump typescript-eslint packages to 8.62.0 (#3194)
• build(deps-dev): bump @​types/node from 25.7.0 to 26.0.0 (#3184)
• build(deps-dev): bump @​firebase/auth-compat from 0.6.6 to 0.6.8 (#3187)
• build(deps-dev): bump @​microsoft/api-extractor from 7.58.1 to 7.58.9 (#3188)
• build(deps-dev): bump @​firebase/app-compat from 0.5.12 to 0.5.13 (#3175)
• build(deps-dev): bump shell-quote from 1.8.3 to 1.8.4 (#3173)
• build(deps): bump @​google-cloud/storage from 7.19.0 to 7.21.0 (#3174)
• build(deps): bump google-auth-library from 10.6.2 to 10.7.0 (#3176)
• build(deps-dev): bump nyc from 17.1.0 to 18.0.0 (#3177)
• build(deps): bump @​grpc/grpc-js from 1.14.3 to 1.14.4 (#3178)

Firebase Admin Node.js SDK v14.0.0

Breaking Changes

... (truncated)

Commits

• 7343f16 [chore] Release 14.2.0 (#3213)
• 07fa1b1 build(deps): bump websocket-driver from 0.7.4 to 0.7.5 (#3212)
• 4681c28 feat(functions): Implement TaskQueue Scopes (#3210)
• 1dae1f9 build(deps-dev): bump @​types/node from 26.0.0 to 26.1.1 (#3207)
• bcae57a build(deps-dev): bump nock from 14.0.15 to 14.0.16 (#3202)
• b231b75 fix zizmor findings (#3200)
• ee31969 fix(dataconnect): Refactor CRUD helpers to use GraphQL variables and @​allow d...
• c550a22 Security Audit & Remediation: GitHub Actions (#3192)
• ad97c0c Security audit: remove unused dependencies and remediate dev vulnerabilities ...
• 0cb9f79 build(deps-dev): bump mocha from 11.7.5 to 11.7.6 (#3196)
• Additional commits viewable in compare view

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.18%. Comparing base (54287f6) to head (2b9385d).

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #577   +/-   ##
=======================================
  Coverage   99.18%   99.18%           
=======================================
  Files          11       11           
  Lines        1841     1841           
=======================================
  Hits         1826     1826           
  Misses         15       15           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[mtrezza]

Deferring this upgrade. firebase-admin 14 drops Node.js 18/20 support (requires Node >=22), but this adapter declares engines.node of 20 || 22 || 24 — upgrading would force dropping Node 20, a breaking change for consumers. v14 also removes the deprecated Instance ID service and legacy FCM messaging types. Holding until a coordinated Node-support/major bump.

[dependabot]

Superseded by #589.