All pull requests

Pull requests

• fix(change): restore every nested field mask path in Change.fromJSON

  #1996·0z5a opened Nov 15, 2026·

  ·

• chore(deps): bump protobufjs and qs to fix moderate audit findings

  #1995·CorieW opened Nov 12, 2026Member·

  ·
  2

• fix(alerts): run onThresholdAlertPublished handlers through withInit and return their result

  #1994·Ishkirat-Singh opened Nov 11, 2026·

  ·
  4

• fix(https): stop logging callable data that cannot be decoded

  #1992·IzaakGough opened Nov 4, 2026Contributor·

  ·

• chore(deps): bump the security-updates group across 1 directory with 8 updates

  dependencies
  #1990·dependabot[bot] opened Oct 29, 2026Bot·

  ·
  1

• chore(deps): bump serialize-javascript and mocha

  dependenciesjavascript
  #1986·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• fix(firestore): keep non-ASCII characters in document params

  #1982·IzaakGough opened Oct 21, 2026Contributor·

  ·
  1

  2

• chore(deps): bump @graphql-tools/utils and @graphql-tools/schema

  dependenciesjavascript
  #1979·dependabot[bot] opened Oct 18, 2026Bot·

  ·

• fix(options): allow resetting one VPC option while setting the other

  #1978·IzaakGough opened Oct 15, 2026Contributor·

  ·

• fix: log unhandled handler errors so thrown values keep their message

  #1977·IzaakGough opened Oct 15, 2026Contributor·

  ·
  3

• fix(onInit): run async init once across concurrent requests

  #1976·IzaakGough opened Oct 15, 2026Contributor·

  ·
  2

• fix(ai): expose run on AI blocking functions

  #1975·IzaakGough opened Oct 14, 2026Contributor·

  ·
  3

• fix(scheduler): don't invent schedule options the caller never set getOpts() built the retryConfig/timeZone keys unconditionally, so the object form of onSchedule handed copyIfPresent a bunch of present-but-undefined keys. copyIfPresent only checks hasOwnProperty, so those undefineds overwrote the RESET_VALUE placeholders that initV2ScheduleTrigger had just written, and the endpoint ended up looking exactly like one built with preserveExternalChanges: true -- which is documented to default to false. Only carry over the fields that are actually set. Also fixes the preserveExternalChanges test, which had the buggy shape baked into its expectation.

  #1969·rootkiller6788 opened Oct 5, 2026·

  ·
  2

• new optionalSecretParam() class

  #1967·Berlioz opened Sep 16, 2026Contributor·

  ·
  4

• Adds 'optional' config field to secret params

  #1966·Berlioz opened Sep 15, 2026Contributor·

  ·
  9

• feat: accept RegExp values in Expression/thenElse for CORS options

  #1944·IzaakGough opened Jul 30, 2026Contributor·

  ·
  1

  19

• fix: avoid CORS declaration interop requirement

  #1941·cexbrayat opened Jul 28, 2026·

  ·
  4

• upgrade as express5

  #1940·inlined opened Jul 27, 2026Member·

  ·
  4

• chore(deps): upgrade integration test dependencies to reduce deprecations

  #1939·inlined opened Jul 24, 2026Member·

  ·
  3

• chore: add .editorconfig with standard defaults

  #1938·tayloralessia207 opened Jul 24, 2026·

  ·
  3

• feat: add built-in functionRegion parameter for region

  #1928·inlined opened Jul 16, 2026Member·

  ·
  5

• fix: remove false warning from enforceAppCheck and consumeAppCheckToken

  #1921·IzaakGough opened Jul 7, 2026Contributor·

  ·
  8

• docs: clarify Firestore auth context event fields

  #1904·SSDWGG opened Jun 13, 2026·

  ·
  1

  1

• fix: preserve quoted hyphenated export names in discovery

  DO NOT MERGE
  #1896·IzaakGough opened May 28, 2026Contributor·

  ·
  1

  4

• feat: forward rawRequest and abortSignal into onCallGenkit

  #1891·IzaakGough opened May 22, 2026Contributor·

  ·
  1

  3