From 189fc47080e92c83a2b550089c592efec7cf8bd4 Mon Sep 17 00:00:00 2001
From: Zach Leventer <zleventer@gmail.com>
Date: Fri, 24 Apr 2026 10:30:12 -0400
Subject: [PATCH] chore(deps): bump firebase-admin in /functions from ^8.10.0
 to ^12.0.0

firebase-admin v8 has reached end-of-life and has not received security
patches since 2021. v12 is the current stable series (requires Node 18+,
which aligns with Firebase Functions gen2). Multiple CVEs affect the
bundled grpc and google-auth-library transitive deps in v8 that are
resolved in v12.
---
 functions/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/functions/package.json b/functions/package.json
index 18f6bdd7..87baea63 100644
--- a/functions/package.json
+++ b/functions/package.json
@@ -15,7 +15,7 @@
   "main": "lib/index.js",
   "dependencies": {
     "cors": "^2.8.5",
-    "firebase-admin": "^8.10.0",
+    "firebase-admin": "^12.0.0",
     "firebase-functions": "^3.13.2",
     "firebase-tools": "^9.10.0",
     "node-fetch": "^2.6.7"