chore(deps-dev): bump firebase-functions-test from 3.0.0 to 3.4.0 in /functions

[dependabot]

Bumps firebase-functions-test from 3.0.0 to 3.4.0.

Release notes

Sourced from firebase-functions-test's releases.

v3.4.0

• Explicitly import from the v1 namespace to unbreak firebase-functions 6.x (#243).
• Explciitly import from the v2 namespace so that #243 doesn't break firebase-functions versions below 6.x (#252)
• Also adds firebase-admin 13.x as a supported version in peer-deps (#252)

v3.3.0

• Add support for v2 callable functions (#229).

v3.2.0

• Add support for testing Firestore 2nd gen Auth Context triggers. (#227)

v3.1.1

• Extend support for firebase-admin@12 (#220)

v3.1.0

• Add testing support for 2nd gen firestore triggers (#200).

Commits

• bae9924 3.4.0
• cbf289a add /v2 imports back in to support firebase-functions versions below 6.x (#252)
• b78cbc4 Update to firebase-functions 6 (#243)
• c3c9abc [firebase-release] Removed change log and reset repo after 3.3.0 release
• 9f074f2 3.3.0
• 4a7f05e add changelog entry (#232)
• 3f85954 feat: add support for v2 callable functions (#229)
• 0c48043 [firebase-release] Removed change log and reset repo after 3.2.0 release
• 3d7bb1b 3.2.0
• a688da3 add changelog entry (#228)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[guardrails]

⚠️ We detected 10 security issues in this pull request:

Insecure File Management (1)

Severity	Details	Docs
High	Title: Path Traversal from user input Spot-the-Hole/functions/index.js Line 562 in b145737 path.join(os.tmpdir(), path.basename(req.files.file[0].fieldname)),	📚

More info on how to fix Insecure File Management in JavaScript.

---

Insecure Use of Crypto (1)

Severity	Details	Docs
Medium	Title: Insecure use of random generator Spot-the-Hole/functions/index.js Line 204 in b145737 result += characters.charAt(Math.floor(Math.random() * charactersLength));	📚

More info on how to fix Insecure Use of Crypto in JavaScript.

---

Vulnerable Libraries (8)

Severity	Details
High	pkg:npm/busboy@0.3.1 upgrade to: > 0.3.1
High	pkg:npm/firebase-functions@4.9.0 (t) upgrade to: > 4.9.0
Medium	pkg:npm/axios@0.25.0 upgrade to: 1.6.0
Critical	pkg:npm/@tensorflow/tfjs-node@3.14.0 upgrade to: > 3.14.0
High	pkg:npm/eslint@8.54.0 upgrade to: > 8.54.0
Critical	pkg:npm/firebase-admin@11.3.0 upgrade to: > 11.3.0
Informational	pkg:npm/cookie-parser@1.4.6 upgrade to: > 1.4.6
N/A	pkg:npm/ejs@3.1.7 upgrade to: 3.1.10

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.