fix(deps): update dependency @google-cloud/firestore to v6 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@google-cloud/firestore (source)	^5.0.0 → ^6.0.0

---

Logging of the firestore key within nodejs-firestore

CVE-2023-6460 / GHSA-4g6q-77j7-vvjc

More information

Details

A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._settings would be logging the firestore key as well potentially exposing it to anyone with logs read access. We recommend upgrading to version 6.1.0 to avoid this issue

Severity

• CVSS Score: 4.0 / 10 (Medium)
• Vector String: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6460
• https://github.com/googleapis/nodejs-firestore/pull/1742
• https://github.com/googleapis/nodejs-firestore/releases/tag/v6.1.0
• https://bughunters.google.com/reports/vrp/KNvgo1Wij
• https://github.com/advisories/GHSA-4g6q-77j7-vvjc

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

googleapis/google-cloud-node (@​google-cloud/firestore)

v6.2.0

Compare Source

Features

• Use REST (#​1698) (d85b0e9)

Bug Fixes

• Minify proto JSON files (#​1771) (6393fe7)
• Remove hack in update.sh, and replace with existing pattern for protobuf dependencies. (#​1769) (6ba6751)

v6.0.0

Compare Source

⚠ BREAKING CHANGES

• update library to use Node 12 (#​1725)

Features

• Enable RunQueryResponse.done (#​1712) (0cc549c)
• Support Logical Termination on RunQueryResponse (#​1741) (07de28a)
• support regapic LRO (#​1729) (b9d8fef)
• update client libraries to support Database operations (#​1676) (533aade)

Bug Fixes

• change REST binding for ListDocuments to support root collection (#​1695) (6185f13)
• deps: update dependency protobufjs to v7 (#​1747) (4e8d33c)
• split v1 and v1beta1 protos to improve startup time (#​1664) (f3729cf)

Build System

• update library to use Node 12 (#​1725) (0abbd21)

5.0.2 (2022-01-07)

Bug Fixes

• remove serializer check from Query.isEqual() (#​1654) (f13da18)

5.0.1 (2021-12-02)

Bug Fixes

• save negative zero as doubleValue (#​1639) (a6ba5cc)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
find-rentals	Error		Jun 11, 2026 6:15pm