Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 14, 2026

Removes undici. It's no longer used after updating ancestor dependencies undici, @react-native-firebase/app and @react-native-firebase/auth. These dependencies need to be updated together.

Removes undici

Updates @react-native-firebase/app from 20.4.0 to 23.8.2

Release notes

Sourced from @​react-native-firebase/app's releases.

v5.6.0 - Sign-in with Apple support, react-native 0.60+ only

Please note v5 is still seeing releases, but they are for breaking ecosystem changes only - just enough so it remains relevant for those that can't move to v6 yet.

This change allows use of Sign-in with Apple, an iOS13+ requirement to avoid rejection by the App Store if you use any forms of social authentication.

Breaking: Note that iOS13+ is only supported with Xcode 11+, which requires react-native 0.60+

You may find that react-native-firebase v5.6.x still works on react-native 0.59 (the test suite still does), but you will not be able to integrate Sign-in with Apple until you upgrade as that library is react-native 0.60+ only.

It works well with https://github.com/invertase/react-native-apple-authentication including a guide specifically for integrating with react-native-firebase, though note the import statements are for v6, you'll need to import auth in the v5 style to use it: https://github.com/invertase/react-native-apple-authentication/blob/master/docs/FIREBASE.md

See discussion in the related issue: invertase/react-native-firebase#2884

https://rnfirebase.io/docs/v5.x.x/releases/v5.6.x

Changelog

Sourced from @​react-native-firebase/app's changelog.

23.8.2 (2026-01-14)

Bug Fixes

  • app: adopt firebase-ios-sdk 12.8.0 (dbff0c9)

23.8.1 (2026-01-13)

Bug Fixes

  • app-check: remove javascript files from web post-typescript migration (b729417)
  • remove newly-added files array from package.json (474036d)

23.8.0 (2026-01-13)

Features

  • firestore: add VectorValue type and vector() API (8de9b68)
  • functions: turbo modules implementation (#8603) (ad09a9b)

Bug Fixes

  • app: firebase-ios-sdk 12.7.0 / firebase-js-sdk 12.7.0 (#8810) (e00bd87)
  • messaging, types: isSupported signature should be Promise<boolean> not boolean (#8798) (4d54636)

Performance Improvements

  • ci: only save ccache on main branch (a2844d4)

23.7.0 (2025-12-08)

Features

  • auth: cache password policy per-app in validatePassword (cc29117)

23.6.0 (2025-12-08)

Features

  • ai: firebase-js-sdk parity: template models and live API (6572aa5)
  • app, ios: adopt firebase-ios-sdk 12.5.0 (acc665c)

Bug Fixes

  • app-distribution, android: adopt beta17 of the native deps (7b933c2)
  • auth, ios: append openURL changes only once in Expo plugin (#8763) (5f74256)
  • firebase-ios-sdk 12.6.0 / firebase-js-sdk 12.6.0 / firebase-android-sdk 34.6.0 (dacdfa2)
  • firestore: remove inequality filter with orderBy limitation (b388022)
  • firestore: set firestore client language attribution to react-native (4fa5141)
  • messaging, android: properly remove remote message from prefs (336901b)

... (truncated)

Commits
  • 578c157 chore(release): release packages
  • dbff0c9 fix(app): adopt firebase-ios-sdk 12.8.0
  • 46b06d2 chore(release): release packages
  • b729417 fix(app-check): remove javascript files from web post-typescript migration
  • f932b23 build(deps): update bob, typescript, and babel deps
  • 49dbef0 build(ai): express app-check+auth devDependencies so they build before ai
  • 474036d fix: remove newly-added files array from package.json
  • 724ddcf chore(release): release packages
  • e16ccc4 refactor(app-check): migrate to TypeScript (#8813)
  • 98b4d79 refactor(messaging): migrate to TypeScript (#8818)
  • Additional commits viewable in compare view

Updates @react-native-firebase/auth from 20.4.0 to 23.8.2

Release notes

Sourced from @​react-native-firebase/auth's releases.

v5.6.0 - Sign-in with Apple support, react-native 0.60+ only

Please note v5 is still seeing releases, but they are for breaking ecosystem changes only - just enough so it remains relevant for those that can't move to v6 yet.

This change allows use of Sign-in with Apple, an iOS13+ requirement to avoid rejection by the App Store if you use any forms of social authentication.

Breaking: Note that iOS13+ is only supported with Xcode 11+, which requires react-native 0.60+

You may find that react-native-firebase v5.6.x still works on react-native 0.59 (the test suite still does), but you will not be able to integrate Sign-in with Apple until you upgrade as that library is react-native 0.60+ only.

It works well with https://github.com/invertase/react-native-apple-authentication including a guide specifically for integrating with react-native-firebase, though note the import statements are for v6, you'll need to import auth in the v5 style to use it: https://github.com/invertase/react-native-apple-authentication/blob/master/docs/FIREBASE.md

See discussion in the related issue: invertase/react-native-firebase#2884

https://rnfirebase.io/docs/v5.x.x/releases/v5.6.x

Changelog

Sourced from @​react-native-firebase/auth's changelog.

23.8.2 (2026-01-14)

Bug Fixes

  • app: adopt firebase-ios-sdk 12.8.0 (dbff0c9)

23.8.1 (2026-01-13)

Bug Fixes

  • app-check: remove javascript files from web post-typescript migration (b729417)
  • remove newly-added files array from package.json (474036d)

23.8.0 (2026-01-13)

Features

  • firestore: add VectorValue type and vector() API (8de9b68)
  • functions: turbo modules implementation (#8603) (ad09a9b)

Bug Fixes

  • app: firebase-ios-sdk 12.7.0 / firebase-js-sdk 12.7.0 (#8810) (e00bd87)
  • messaging, types: isSupported signature should be Promise<boolean> not boolean (#8798) (4d54636)

Performance Improvements

  • ci: only save ccache on main branch (a2844d4)

23.7.0 (2025-12-08)

Features

  • auth: cache password policy per-app in validatePassword (cc29117)

23.6.0 (2025-12-08)

Features

  • ai: firebase-js-sdk parity: template models and live API (6572aa5)
  • app, ios: adopt firebase-ios-sdk 12.5.0 (acc665c)

Bug Fixes

  • app-distribution, android: adopt beta17 of the native deps (7b933c2)
  • auth, ios: append openURL changes only once in Expo plugin (#8763) (5f74256)
  • firebase-ios-sdk 12.6.0 / firebase-js-sdk 12.6.0 / firebase-android-sdk 34.6.0 (dacdfa2)
  • firestore: remove inequality filter with orderBy limitation (b388022)
  • firestore: set firestore client language attribution to react-native (4fa5141)
  • messaging, android: properly remove remote message from prefs (336901b)

... (truncated)

Commits
  • 578c157 chore(release): release packages
  • dbff0c9 fix(app): adopt firebase-ios-sdk 12.8.0
  • 46b06d2 chore(release): release packages
  • b729417 fix(app-check): remove javascript files from web post-typescript migration
  • f932b23 build(deps): update bob, typescript, and babel deps
  • 49dbef0 build(ai): express app-check+auth devDependencies so they build before ai
  • 474036d fix: remove newly-added files array from package.json
  • 724ddcf chore(release): release packages
  • e16ccc4 refactor(app-check): migrate to TypeScript (#8813)
  • 98b4d79 refactor(messaging): migrate to TypeScript (#8818)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [undici](https://github.com/nodejs/undici). It's no longer used after updating ancestor dependencies [undici](https://github.com/nodejs/undici), [@react-native-firebase/app](https://github.com/invertase/react-native-firebase) and [@react-native-firebase/auth](https://github.com/invertase/react-native-firebase). These dependencies need to be updated together.


Removes `undici`

Updates `@react-native-firebase/app` from 20.4.0 to 23.8.2
- [Release notes](https://github.com/invertase/react-native-firebase/releases)
- [Changelog](https://github.com/invertase/react-native-firebase/blob/main/CHANGELOG.md)
- [Commits](invertase/react-native-firebase@v20.4.0...v23.8.2)

Updates `@react-native-firebase/auth` from 20.4.0 to 23.8.2
- [Release notes](https://github.com/invertase/react-native-firebase/releases)
- [Changelog](https://github.com/invertase/react-native-firebase/blob/main/CHANGELOG.md)
- [Commits](invertase/react-native-firebase@v20.4.0...v23.8.2)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 
  dependency-type: indirect
- dependency-name: "@react-native-firebase/app"
  dependency-version: 23.8.2
  dependency-type: direct:production
- dependency-name: "@react-native-firebase/auth"
  dependency-version: 23.8.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant