Skip to content

chore(deps): update firebase/agent-skills digest to c3bb9d5#639

Open
renovate[bot] wants to merge 2 commits intomainfrom
renovate/firebase-agent-skills-digest
Open

chore(deps): update firebase/agent-skills digest to c3bb9d5#639
renovate[bot] wants to merge 2 commits intomainfrom
renovate/firebase-agent-skills-digest

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 8, 2026 •
edited
Loading

This PR contains the following updates:

Package Update Change
firebase/agent-skills digest 9067c1e → c3bb9d5

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label May 8, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 8, 2026 •
edited by toolhive-release-app Bot
Loading

🛡️ Skill Security Scan Results

✅ developing-genkit-dart

  • Status: Passed
  • Findings: 6
  • Allowed (not blocking): 2
    • MANIFEST_MISSING_LICENSE (Allowed: firebase/agent-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)
    • PIPELINE_TAINT_FLOW (Allowed: The skill's prerequisites cite the official Genkit CLI installer curl -sL cli.genkit.dev | bash as a documented install command.)

✅ developing-genkit-go

  • Status: Passed
  • Findings: 0

✅ developing-genkit-js

  • Status: Passed
  • Findings: 5
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: firebase/agent-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ firebase-ai-logic-basics

  • Status: Passed
  • Findings: 5
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: firebase/agent-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ firebase-app-hosting-basics

  • Status: Passed
  • Findings: 2
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: firebase/agent-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ firebase-auth-basics

  • Status: Passed
  • Findings: 4
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: firebase/agent-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ firebase-basics

  • Status: Passed
  • Findings: 3

❌ firebase-data-connect-basics

  • Status: Failed
  • Findings: 121
  • Blocking: 46

Blocking issues:

  • [ATR_2026_00066] (CRITICAL) Pattern detected: `bash (reference/sdk_flutter.md:13)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_flutter.md:36)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_flutter.md:46)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_flutter.md:53)
  • [ATR_2026_00066] (CRITICAL) Pattern detected: ${aspectValue.stringValue} (reference/sdk_flutter.md:71)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_flutter.md:92)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_flutter.md:95)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (reference/sdk_ios.md:6)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_ios.md:9)
  • [ATR_2026_00013] (CRITICAL) Pattern detected: 127.0.0.1:9399 (reference/sdk_ios.md:28)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_ios.md:38)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_ios.md:46)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_ios.md:59)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_ios.md:90)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_ios.md:91)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (reference/sdk_web.md:6)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: default branch to switch statements or an else branc (reference/sdk_web.md:7)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: connectDataConnectEmulator is only required if connecting to the emulator. Otherwise, the generated SDK auto-creates the instanc (reference/sdk_web.md:9)
  • [ATR_2026_00066] (CRITICAL) Pattern detected: `bash (reference/sdk_web.md:13)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: executeQuery (reference/sdk_web.md:31)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_web.md:33)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_web.md:37)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_web.md:86)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: exec (reference/sdk_web.md:87)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: subscribe() (reference/sdk_web.md:91)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (reference/security.md:15)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: admin = (reference/security.md:20)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (reference/security.md:27)
  • [ATR_2026_00088] (HIGH) Pattern detected: Suppress deploy warning (reference/security.md:27)
  • [ATR_2026_00010] (CRITICAL) Pattern detected: USER_ANON | Any authenticated user (inc (reference/security.md:36)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Authenticated users (excludes anonymous) | `auth.uid (reference/security.md:37)
  • [ATR_2026_00012] (HIGH) Pattern detected: | Users with verified email |auth.uid (reference/security.md:38)
  • [ATR_2026_00012] (HIGH) Pattern detected: `auth.uid (reference/security.md:51)
  • [ATR_2026_00111] (CRITICAL) Pattern detected: sub (reference/security.md:65)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: 'admin' (reference/security.md:73)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: 'admin' (reference/security.md:79)
  • [ATR_2026_00012] (HIGH) Pattern detected: && vars.status in ['draft', 'publish (reference/security.md:82)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: 'admin' (reference/security.md:119)
  • [ATR_2026_00004] (CRITICAL) Pattern detected: # Admin (reference/security.md:206)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: admin = (reference/security.md:207)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: 'admin' (reference/security.md:215)
  • [ATR_2026_00066] (CRITICAL) Pattern detected: `bash (templates.md:214)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Deploy (templates.md:228)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: deploy (templates.md:229)
  • [ATR_2026_00161] (CRITICAL) Pattern detected: .env (templates.md:254)
  • [ATR_2026_00040] (CRITICAL) Pattern detected: Exec (templates.md:292)

✅ firebase-firestore

  • Status: Passed
  • Findings: 2

✅ firebase-hosting-basics

  • Status: Passed
  • Findings: 3
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: firebase/agent-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ firebase-security-rules-auditor

  • Status: Passed
  • Findings: 3
  • Allowed (not blocking): 1
    • MANIFEST_MISSING_LICENSE (Allowed: firebase/agent-skills is licensed Apache-2.0 at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

Summary: Scanned 11 skill(s), found 46 blocking issue(s).

⚠️ Action Required: Review the blocking findings. Add a justified entry to the skill's security.allowed_issues[] in its spec.yaml if the finding is a false positive.

@renovate renovate Bot force-pushed the renovate/firebase-agent-skills-digest branch 2 times, most recently from 4e2a698 to 6f9f16f Compare May 11, 2026 09:59
@renovate renovate Bot force-pushed the renovate/firebase-agent-skills-digest branch from ca46033 to 2f3b891 Compare May 11, 2026 10:04
@toolhive-release-app
chore(skills): bump spec.version for developing-genkit-dart,developin…
b715d3b 
…g-genkit-go,developing-genkit-js,firebase-ai-logic-basics,firebase-app-hosting-basics,firebase-auth-basics,firebase-basics,firebase-data-connect-basics,firebase-firestore,firebase-hosting-basics,firebase-security-rules-auditor
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants