Merge branch 'main' into davidmotson.add_vertex_to_bom

Author: davidmotson

encoders/firebase-encoders-proto/CHANGELOG.md

@@ -1,4 +1,4 @@
 # Unreleased
 * [changed] Updated protobuf dependency to `3.25.5` to fix
-  [CVE-2024-7254](https://github.com/advisories/GHSA-735f-pc8j-v9w8).
+  [CVE-2024-7254](https://nvd.nist.gov/vuln/detail/CVE-2024-7254).
 

firebase-config/CHANGELOG.md

@@ -1,6 +1,6 @@
 # Unreleased
 * [changed] Updated protobuf dependency to `3.25.5` to fix
-  [CVE-2024-7254](https://github.com/advisories/GHSA-735f-pc8j-v9w8).
+  [CVE-2024-7254](https://nvd.nist.gov/vuln/detail/CVE-2024-7254).
 
 # 22.0.0
 * [changed] Bump internal dependencies

firebase-crashlytics-ndk/CHANGELOG.md

@@ -1,4 +1,6 @@
 # Unreleased
+* [changed] Updated `firebase-crashlytics` dependency to v19.2.1
+
 
 # 19.2.0
 * [changed] Updated `firebase-crashlytics` dependency to v19.2.0

firebase-crashlytics/CHANGELOG.md

@@ -1,6 +1,6 @@
 # Unreleased
 * [changed] Updated protobuf dependency to `3.25.5` to fix
-  [CVE-2024-7254](https://github.com/advisories/GHSA-735f-pc8j-v9w8).
+  [CVE-2024-7254](https://nvd.nist.gov/vuln/detail/CVE-2024-7254).
 
 
 # 19.2.0

firebase-dataconnect/CHANGELOG.md

@@ -1,6 +1,6 @@
 # Unreleased
 * [changed] Updated protobuf dependency to `3.25.5` to fix
-  [CVE-2024-7254](https://github.com/advisories/GHSA-735f-pc8j-v9w8).
+  [CVE-2024-7254](https://nvd.nist.gov/vuln/detail/CVE-2024-7254).
 
 # 16.0.0-beta01
 * [feature] Initial release of the Data Connect SDK (public preview). Learn how to

firebase-dataconnect/firebase-dataconnect.gradle.kts

@@ -31,8 +31,8 @@ firebaseLibrary {
   publishJavadoc = false
   previewMode = "beta"
   releaseNotes {
-    name.set("{{firebase_data_connect}}")
-    versionName.set("dataconnect")
+    name.set("{{data_connect_short}}")
+    versionName.set("data-connect")
     hasKTX.set(false)
   }
 

firebase-firestore/CHANGELOG.md

@@ -1,7 +1,7 @@
 # Unreleased
 * [changed] Update Firestore proto definitions. [#6369](//github.com/firebase/firebase-android-sdk/pull/6369)
 * [changed] Updated protobuf dependency to `3.25.5` to fix
-  [CVE-2024-7254](https://github.com/advisories/GHSA-735f-pc8j-v9w8).
+  [CVE-2024-7254](https://nvd.nist.gov/vuln/detail/CVE-2024-7254).
 
 # 25.1.0
 * [feature] Add support for the VectorValue type. [#6154](//github.com/firebase/firebase-android-sdk/pull/6154)

firebase-functions/api.txt

@@ -81,13 +81,9 @@ package com.google.firebase.functions {
     method public boolean getLimitedUseAppCheckTokens();
     method public long getTimeout();
     method public void setTimeout(long timeout, @NonNull java.util.concurrent.TimeUnit units);
-    field @NonNull public static final com.google.firebase.functions.HttpsCallOptions.Companion Companion;
     field public final boolean limitedUseAppCheckTokens;
   }
 
-  public static final class HttpsCallOptions.Companion {
-  }
-
   public final class HttpsCallableOptions {
     method public boolean getLimitedUseAppCheckTokens();
     field public final boolean limitedUseAppCheckTokens;

firebase-functions/firebase-functions.gradle.kts

@@ -1,3 +1,5 @@
+import org.jetbrains.kotlin.gradle.tasks.KotlinCompile
+
 // Copyright 2022 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
@@ -55,6 +57,20 @@ android {
   testOptions.unitTests.isIncludeAndroidResources = true
 }
 
+// Enable Kotlin "Explicit API Mode". This causes the Kotlin compiler to fail if any
+// classes, methods, or properties have implicit `public` visibility. This check helps
+// avoid  accidentally leaking elements into the public API, requiring that any public
+// element be explicitly declared as `public`.
+// https://github.com/Kotlin/KEEP/blob/master/proposals/explicit-api-mode.md
+// https://chao2zhang.medium.com/explicit-api-mode-for-kotlin-on-android-b8264fdd76d1
+tasks.withType<KotlinCompile>().all {
+  if (!name.contains("test", ignoreCase = true)) {
+    if (!kotlinOptions.freeCompilerArgs.contains("-Xexplicit-api=strict")) {
+      kotlinOptions.freeCompilerArgs += "-Xexplicit-api=strict"
+    }
+  }
+}
+
 dependencies {
     javadocClasspath("org.codehaus.mojo:animal-sniffer-annotations:1.21")
     javadocClasspath(libs.autovalue.annotations)

firebase-functions/src/main/java/com/google/firebase/functions/FirebaseFunctions.kt

@@ -47,7 +47,7 @@ import org.json.JSONException
 import org.json.JSONObject
 
 /** FirebaseFunctions lets you call Cloud Functions for Firebase. */
-class FirebaseFunctions
+public class FirebaseFunctions
 @AssistedInject
 internal constructor(
   context: Context,
@@ -105,22 +105,25 @@ internal constructor(
   }
 
   /** Returns a reference to the callable HTTPS trigger with the given name. */
-  fun getHttpsCallable(name: String): HttpsCallableReference {
+  public fun getHttpsCallable(name: String): HttpsCallableReference {
     return HttpsCallableReference(this, name, HttpsCallOptions())
   }
 
   /** Returns a reference to the callable HTTPS trigger with the provided URL. */
-  fun getHttpsCallableFromUrl(url: URL): HttpsCallableReference {
+  public fun getHttpsCallableFromUrl(url: URL): HttpsCallableReference {
     return HttpsCallableReference(this, url, HttpsCallOptions())
   }
 
   /** Returns a reference to the callable HTTPS trigger with the given name and call options. */
-  fun getHttpsCallable(name: String, options: HttpsCallableOptions): HttpsCallableReference {
+  public fun getHttpsCallable(name: String, options: HttpsCallableOptions): HttpsCallableReference {
     return HttpsCallableReference(this, name, HttpsCallOptions(options))
   }
 
   /** Returns a reference to the callable HTTPS trigger with the provided URL and call options. */
-  fun getHttpsCallableFromUrl(url: URL, options: HttpsCallableOptions): HttpsCallableReference {
+  public fun getHttpsCallableFromUrl(
+    url: URL,
+    options: HttpsCallableOptions
+  ): HttpsCallableReference {
     return HttpsCallableReference(this, url, HttpsCallOptions(options))
   }
 
@@ -149,7 +152,7 @@ internal constructor(
   }
 
   @Deprecated("Use {@link #useEmulator(String, int)} to connect to the emulator. ")
-  fun useFunctionsEmulator(origin: String) {
+  public fun useFunctionsEmulator(origin: String) {
     Preconditions.checkNotNull(origin, "origin cannot be null")
     urlFormat = "$origin/%2\$s/%1\$s/%3\$s"
   }
@@ -162,7 +165,7 @@ internal constructor(
    * @param host the emulator host (for example, 10.0.2.2)
    * @param port the emulator port (for example, 5001)
    */
-  fun useEmulator(host: String, port: Int) {
+  public fun useEmulator(host: String, port: Int) {
     emulatorSettings = EmulatedServiceSettings(host, port)
   }
 
@@ -318,7 +321,7 @@ internal constructor(
     return tcs.task
   }
 
-  companion object {
+  public companion object {
     /** A task that will be resolved once ProviderInstaller has installed what it needs to. */
     private val providerInstalled = TaskCompletionSource<Void>()
 
@@ -370,7 +373,7 @@ internal constructor(
      * `"us-central1"` or `"https://mydomain.com"`.
      */
     @JvmStatic
-    fun getInstance(app: FirebaseApp, regionOrCustomDomain: String): FirebaseFunctions {
+    public fun getInstance(app: FirebaseApp, regionOrCustomDomain: String): FirebaseFunctions {
       Preconditions.checkNotNull(app, "You must call FirebaseApp.initializeApp first.")
       Preconditions.checkNotNull(regionOrCustomDomain)
       val component = app.get(FunctionsMultiResourceComponent::class.java)
@@ -384,7 +387,7 @@ internal constructor(
      * @param app The app for the Firebase project.
      */
     @JvmStatic
-    fun getInstance(app: FirebaseApp): FirebaseFunctions {
+    public fun getInstance(app: FirebaseApp): FirebaseFunctions {
       return getInstance(app, "us-central1")
     }
 
@@ -395,13 +398,13 @@ internal constructor(
      * `"us-central1"` or `"https://mydomain.com"`.
      */
     @JvmStatic
-    fun getInstance(regionOrCustomDomain: String): FirebaseFunctions {
+    public fun getInstance(regionOrCustomDomain: String): FirebaseFunctions {
       return getInstance(FirebaseApp.getInstance(), regionOrCustomDomain)
     }
 
     /** Creates a Cloud Functions client with the default app. */
     @JvmStatic
-    fun getInstance(): FirebaseFunctions {
+    public fun getInstance(): FirebaseFunctions {
       return getInstance(FirebaseApp.getInstance(), "us-central1")
     }
   }