[Snyk] Security upgrade firebase-tools from 4.0.1 to 9.4.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-ASYNC-2441827	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: firebase-tools

The new version differs by 250 commits.

• d5fcb7f 9.4.0
• a661424 Adding changelog for #3132 (#3142)
• c1c3aee Major refactor of functions deploy (#3132)
• ea06936 fix(emulator): Hosting emulator should not connect to 0.0.0.0 for emulators (#3141)
• ca9112e Bump up archiver package version to stop producing bad zip archives in nodejs15 (#3140)
• a5424bf Migrate auth.js to TypeScript (#3122)
• 6fcdce9 Allow optional extension params to be omitted (#3126) (#3128)
• 153c553 Remove auth emulator hack (#3117)
• 417879f Fix check annotations that show up in every PR (#3118)
• 8859dc8 docs(emulator): remove extra `-` in `---project` from missing project ID warning (#3112)
• d162aec Fixes manipulated location header in Hosting emulator proxy logic (#3105)
• 28bc9d3 [firebase-release] Removed change log and reset repo after 9.3.0 release
• 3c0d4ed 9.3.0
• 93ea961 fixes support for calls against local emulators as admin (#3099)
• 76726d7 Implement session cookies in Auth Emulator. (#3094)
• d33369b Fix REST mapping issues in Auth Emulator. (#3088)
• b91b01d Implement batchDelete in Auth Emulator. (#3091)
• 61bd2c0 Add AAB support to App Distribution (#3069)
• 092d175 Merge pull request #3082 from firebase/thebrianchen-patch-1
• eabb65f Update firestore:delete help text
• 030307c Update functionsEmulatorRuntime.ts (#3080)
• ed64784 [firebase-release] Removed change log and reset repo after 9.2.2 release
• ea42e8a 9.2.2
• a9eb22e pass through compressed content in hosting proxy (#3065)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution