Request: Update Firebase SDK in Plugin to Support Apple Privacy Manifest Requirement

[plutoniac]

I am reaching out regarding an important compliance update that will impact apps using the cordova-plugin-push plugin, specifically due to the Firebase dependencies.

Background:
As per the recent Apple App Store policy, third-party SDKs that impact user privacy, including Firebase SDKs, will require a privacy manifest starting November 12, 2024. During my app’s recent submission, Apple provided the following feedback:

ITMS-91061: Missing privacy manifest
Your app includes Firebase SDK components, such as FirebaseCore, FirebaseCoreDiagnostics, FirebaseInstallations, and FirebaseMessaging, which are identified as privacy-impacting SDKs. Starting November 12, 2024, all privacy-impacting SDKs must include a privacy manifest to comply with App Store policies. For more information, please refer to Apple’s third-party SDK requirements.

Given this policy, I wanted to check if an update to Firebase (or another solution to support privacy manifests) might be scheduled for the cordova-plugin-push library. Currently, the plugin appears dependent on an older version of Firebase (IOS_FIREBASE_MESSAGING_VERSION set to ~> 8.1.1), which does not support the required privacy manifest.

Are there any plans to update the Firebase dependency in cordova-plugin-push to a more recent version that includes the privacy manifest? This update would be invaluable in helping us comply with Apple’s latest requirements.

Thank you for considering this request.

[peterfox1]

Yes I'm also looking for this, it looks like the change has already been completed in the following PR which has been closed & merged so it seems like this will be in the next release: #294