build(deps): pin firebase-js-sdk, disallow install of recent packages

.github/dependabot.yml

@@ -9,6 +9,11 @@ updates:
     # Check the npm registry for updates every day (weekdays)
     schedule:
       interval: 'daily'
+    cooldown:
+      default-days: 7
+      semver-major-days: 7
+      semver-minor-days: 7
+      semver-patch-days: 7
     target-branch: dependency-updates
     labels:
       - 'dependencies'

.github/scripts/compare-types/.yarnrc.yml

@@ -1 +1,7 @@
 yarnPath: ../../../.yarn/releases/yarn-4.14.1.cjs
+
+npmMinimalAgeGate: 7d
+
+# In case you must have a package version that would be disallowed
+# by the above npmMinimalAgeGate
+#npmPreapprovedPackages:

.github/workflows/scripts/functions/.yarnrc.yml

@@ -1 +1,7 @@
 yarnPath: ../../../../.yarn/releases/yarn-4.14.1.cjs
+
+npmMinimalAgeGate: 7d
+
+# In case you must have a package version that would be disallowed
+# by the above npmMinimalAgeGate
+#npmPreapprovedPackages:

.yarnrc.yml

@@ -9,6 +9,14 @@ nodeLinker: node-modules
 plugins:
   - checksum: 67ce9e30cf152af35d3dc292f915cb39220942f5f406211801da2b721d873857f8ea6d9c57893e1295133f5d128fa6388bf16a4610ef788f30e987e58f84db26
     path: .yarn/plugins/@yarnpkg/plugin-postinstall-dev.cjs
-    spec: "https://raw.githubusercontent.com/sachinraja/yarn-plugin-postinstall-dev/main/bundles/%40yarnpkg/plugin-postinstall-dev.js"
+    spec: 'https://raw.githubusercontent.com/sachinraja/yarn-plugin-postinstall-dev/main/bundles/%40yarnpkg/plugin-postinstall-dev.js'
 
 yarnPath: .yarn/releases/yarn-4.14.1.cjs
+
+npmMinimalAgeGate: 7d
+
+# In case you must have a package version that would be disallowed
+# by the above npmMinimalAgeGate
+npmPreapprovedPackages:
+  - 'firebase@12.12.1' # If adopting recent firebase-js-sdk, specify directly here
+  - '@react-native-firebase/*'

package.json

@@ -96,7 +96,7 @@
     "eslint-plugin-mocha": "^11.2.0",
     "eslint-plugin-prettier": "^5.5.5",
     "eslint-plugin-react": "^7.37.5",
-    "firebase": "^12.12.1",
+    "firebase": "12.12.1",
     "firebase-tools": "^15.16.0",
     "genversion": "^3.2.0",
     "google-java-format": "^2.2.0",

tests/package.json

@@ -46,7 +46,7 @@
     "axios": "^1.15.2",
     "cpy-cli": "^7.0.0",
     "detox": "patch:detox@npm%3A20.51.0#~/.yarn/patches/detox-npm-20.51.0-3e13b6e309.patch",
-    "firebase": "^12.12.1",
+    "firebase": "12.12.1",
     "firebase-tools": "^15.16.0",
     "jest-circus": "^30.3.0",
     "jest-environment-node": "^30.3.0",

yarn.lock

@@ -13004,7 +13004,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"firebase@npm:12.12.1, firebase@npm:^12.12.1":
+"firebase@npm:12.12.1":
   version: 12.12.1
   resolution: "firebase@npm:12.12.1"
   dependencies:
@@ -22256,7 +22256,7 @@ __metadata:
     axios: "npm:^1.15.2"
     cpy-cli: "npm:^7.0.0"
     detox: "patch:detox@npm%3A20.51.0#~/.yarn/patches/detox-npm-20.51.0-3e13b6e309.patch"
-    firebase: "npm:^12.12.1"
+    firebase: "npm:12.12.1"
     firebase-tools: "npm:^15.16.0"
     jest-circus: "npm:^30.3.0"
     jest-environment-node: "npm:^30.3.0"
@@ -22308,7 +22308,7 @@ __metadata:
     eslint-plugin-mocha: "npm:^11.2.0"
     eslint-plugin-prettier: "npm:^5.5.5"
     eslint-plugin-react: "npm:^7.37.5"
-    firebase: "npm:^12.12.1"
+    firebase: "npm:12.12.1"
     firebase-tools: "npm:^15.16.0"
     genversion: "npm:^3.2.0"
     google-java-format: "npm:^2.2.0"