fix(deps): Update dependency reactfire to v4

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
reactfire (source)	^2.0.3 -> ^4.0.0

---

Release Notes

FirebaseExtended/reactfire (reactfire)

v4.2.3

Compare Source

What's Changed

• [fix] Remove useUser's initialData override by @​jhuleatt in https://github.com/FirebaseExtended/reactfire/pull/539

Full Changelog: FirebaseExtended/reactfire@v4.2.2...v4.2.3

v4.2.2

Compare Source

What's Changed

• [auth] fix flash of loading state from useUserhttps://github.com/FirebaseExtended/reactfire/pull/5211
• Move build from TSDX to Vite https://github.com/FirebaseExtended/reactfire/pull/534

New Contributors

• @​mikkimichaelis made their first contribution in https://github.com/FirebaseExtended/reactfire/pull/494
• @​rwhogg made their first contribution in https://github.com/FirebaseExtended/reactfire/pull/532

Full Changelog: FirebaseExtended/reactfire@v4.2.1...v4.2.2

v4.2.1

Compare Source

What's Changed

Fixes

• Fix reconciler : Export SDK contexts for react-reconciler use case by @​RenaudRohlinger in https://github.com/FirebaseExtended/reactfire/pull/486

Note: this is a very niche use case for those using ReactFire with a custom reconciler. Most ReactFire devs shouldn't import the *SdkContexts directly.

Dependency updates

• Bump semver-regex from 3.1.2 to 3.1.3 by @​dependabot in https://github.com/FirebaseExtended/reactfire/pull/454
• Bump tmpl from 1.0.4 to 1.0.5 by @​dependabot in https://github.com/FirebaseExtended/reactfire/pull/456
• Bump nth-check from 2.0.0 to 2.0.1 by @​dependabot in https://github.com/FirebaseExtended/reactfire/pull/458

Docs improvements

• Clarify need for providers in docs by @​jhuleatt in https://github.com/FirebaseExtended/reactfire/pull/460
• update link for useObservable by @​ajonp in https://github.com/FirebaseExtended/reactfire/pull/475
• Update use.md by @​Apfii in https://github.com/FirebaseExtended/reactfire/pull/481

✨ New Contributors

• @​ajonp made their first contribution in https://github.com/FirebaseExtended/reactfire/pull/475
• @​RenaudRohlinger made their first contribution in https://github.com/FirebaseExtended/reactfire/pull/486
• @​Apfii made their first contribution in https://github.com/FirebaseExtended/reactfire/pull/481

Full Changelog: FirebaseExtended/reactfire@v4.2.0...v4.2.1

v4.2.0

Compare Source

New Features

• add useCallableFunctionResponse hook to make it easier to call a function on render (#​449)

Fixes

• Add missing Cloud Functions hooks and provider (#​444)
• Update RxFire dependency to ^6.0.2 to get new types for Cloud Functions helper (https://github.com/FirebaseExtended/rxfire/pull/34)
• Internal cleanup: use RxFire's fromTask (#​448)

v4.1.1

Compare Source

Fix an issue where ReactFire hooks wouldn't move past the loading state if undefined was the first value emitted (PR #​446, Issue #​440)

v4.1.0

Compare Source

• New Feature: Adds support for App Check (PR #​430, Issue #​406)

v4.0.1

Compare Source

• Update lockfile (fixes #​433)
• Add missing Analytics exports (useAnalytics, AnalyticsProvider, useInitAnalytics) (PR #​431)

  Thank you @​shiiinji!

• [internal cleanup] Use RxFire's remote config implementation instead of a custom ReactFire implementation (PR #​434)

  Thank you @​sujishpatel!

• [internal cleanup] Use @ts-expect-error instead of @ts-ignore for safer typings (PR #​435)

  Thank you @​sujishpatel!

v4.0.0

Compare Source

ReactFire version 4 supports Firebase version 9. Firebase v9 introduces a new API that is more tree-shakeable, which should result in reduced bundle size and therefore faster page loads for your users!

ReactFire v3 -> v4 upgrade guide

Check out discussion #​402 for more context.

ReactFire v3 source is available in the v3 branch.

v3.0.0

Compare Source

v3 of ReactFire supports stable builds of React

---

Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

[socket-security]

New dependency changes detected. Learn more about Socket for GitHub ↗︎

🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore protobufjs@6.11.3
• @SocketSecurity ignore protobufjs@7.2.2

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package	Script field	Source
protobufjs@6.11.3 (added)	postinstall	package.json via reactfire@4.2.2
protobufjs@7.2.2 (added)	postinstall	package.json via reactfire@4.2.2

Pull request alert summary

Issue	Status
Install scripts	⚠️ 2 issues
Native code	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

📊 Modified Dependency Overview:

⬆️ Updated Package	Version Diff	Capability Access	+/- Transitive Count	Publisher
reactfire@4.2.2	2.0.3...4.2.2	None	+57/-1	reactfire

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

Error response from daemon: toomanyrequests: You have reached your pull rate limit. You may increase the limit by authenticating and upgrading: https://www.docker.com/increase-rate-limit