commit 2fa4dc5654e92014e9a2c5e1e2ed6e961cc609d6
author Yiming Jing <yimingjing@google.com> Tue Jan 10 13:57:08 2023 -0800
committer Yiming Jing <yimingjing@google.com> Tue Jan 10 13:57:08 2023 -0800
tree 33f6ddb56878b4136e2a24a8f1d5cc99e260d20e
parent b1483fd34c896ab040f1abd43c99f0c4741223a5

Update dependencies for DRC

In particular, upgrade `jsonwebtoken` to 9.0.0 that fixes CVE-2022-23540

Bug: 264124577
Test: npm update
Test: npm audit fix --force
Change-Id: Ia228cf5fc69baf995c37796679da74cadc646ce1

server/functions/package.json

diff --git a/server/functions/package.json b/server/functions/package.json
index 85ba565..9dd1994 100644
--- a/server/functions/package.json
+++ b/server/functions/package.json
@@ -14,9 +14,9 @@
   },
   "main": "index.js",
   "dependencies": {
-    "firebase-admin": "^9.3.0",
+    "firebase-admin": "^11.4.1",
     "firebase-functions": "^3.11.0",
-    "jsonwebtoken": "^8.5.1"
+    "jsonwebtoken": "^9.0.0"
   },
   "devDependencies": {
     "eslint": "^5.12.0",

server/package.json

diff --git a/server/package.json b/server/package.json
index 269e852..642efc4 100644
--- a/server/package.json
+++ b/server/package.json
@@ -1,6 +1,6 @@
 {
   "dependencies": {
-    "firebase-admin": "^9.5.0",
+    "firebase-admin": "^11.4.1",
     "firebase-functions": "^3.13.2"
   }
 }