backend-manager 5.0.199 → 5.0.201

package/CHANGELOG.md

@@ -14,6 +14,14 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - `Fixed` for any bug fixes.
 - `Security` in case of vulnerabilities.
 
+# [5.0.201] - 2026-05-08
+### Changed
+- Account deletion confirmation email now includes a "Deletion details:" block with the user's account email, UID, and deletion timestamp (UTC) — matching the pattern used in the data-request download email.
+
+# [5.0.200] - 2026-05-05
+### Changed
+- Bumped `uuid` from `^13.0.2` to `^14.0.0`. uuid v14 is ESM-only, but Node 22+'s native `require(esm)` support means existing CommonJS call sites (`require('uuid').v4`, `.v5`, etc.) work unchanged.
+
 # [5.0.199] - 2026-04-23
 ### Fixed
 - Storage helper (`Manager.storage().get()` / `.set()`) was referencing `_.get` and `_.set` without a lodash namespace import — lodash is destructured at the top of the file, so `_` was undefined and every call crashed. Destructured `get` and `set` (aliased as `_get` / `_set`) and updated both call sites.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "backend-manager",
-  "version": "5.0.199",
+  "version": "5.0.201",
   "description": "Quick tools for developing Firebase functions",
   "main": "src/manager/index.js",
   "bin": {
@@ -49,19 +49,20 @@
     }
   },
   "dependencies": {
-    "@firebase/rules-unit-testing": "^5.0.0",
+    "@firebase/rules-unit-testing": "^5.0.1",
+    "@google-cloud/firestore": "^7.11.6",
     "@google-cloud/pubsub": "^5.3.0",
     "@google-cloud/storage": "^7.19.0",
-    "@inquirer/prompts": "^8.4.1",
+    "@inquirer/prompts": "^8.4.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@octokit/rest": "^22.0.1",
     "@sendgrid/mail": "^8.1.6",
-    "@sentry/node": "^10.48.0",
+    "@sentry/node": "^10.52.0",
     "body-parser": "^2.2.2",
     "busboy": "^1.6.0",
     "chalk": "^5.6.2",
     "cors": "^2.8.6",
-    "dotenv": "^17.4.1",
+    "dotenv": "^17.4.2",
     "express": "^5.2.1",
     "fs-jetpack": "^5.1.0",
     "glob": "^13.0.6",
@@ -75,25 +76,25 @@
     "markdown-it": "^14.1.1",
     "mime-types": "^3.0.2",
     "moment": "^2.30.1",
-    "nanoid": "^5.1.7",
+    "nanoid": "^5.1.11",
     "node-powertools": "^3.0.0",
     "npm-api": "^1.0.1",
     "pushid": "^1.0.0",
-    "sanitize-html": "^2.17.2",
-    "stripe": "^22.0.1",
+    "sanitize-html": "^2.17.3",
+    "stripe": "^22.1.1",
     "uid-generator": "^2.0.0",
-    "uuid": "^13.0.0",
+    "uuid": "^14.0.0",
     "wonderful-fetch": "^2.0.5",
     "wonderful-log": "^1.0.7",
     "wonderful-version": "^1.3.2",
-    "yaml": "^2.8.3",
+    "yaml": "^2.8.4",
     "yargs": "^18.0.0"
   },
   "devDependencies": {
     "prepare-package": "^2.1.0"
   },
   "peerDependencies": {
-    "firebase-admin": "^13.8.0",
+    "firebase-admin": "^13.9.0",
     "firebase-functions": "^7.2.5"
   }
 }

package/src/manager/libraries/disposable-domains.json

@@ -204,6 +204,7 @@
   "99.com",
   "99cows.com",
   "99experts.com",
+  "99mail.us",
   "9mail.cf",
   "9me.site",
   "9mot.ru",
@@ -214,6 +215,7 @@
   "a45.in",
   "a7996.com",
   "aa5zy64.com",
+  "aabkmail.com",
   "aachendate.de",
   "aakk.link",
   "aakkmail.com",
@@ -227,6 +229,7 @@
   "abevw.com",
   "abilitywe.us",
   "abo-free.fr.nf",
+  "aboodbab.com",
   "abouse.space",
   "abovewe.us",
   "absolutewe.us",
@@ -472,6 +475,7 @@
   "appc.se",
   "appinventor.nl",
   "appixie.com",
+  "apple.edu.pl",
   "appmail.uk",
   "apps.dj",
   "appzily.com",
@@ -551,6 +555,7 @@
   "b2bx.net",
   "b2cmail.de",
   "b7s.ru",
+  "babyeat.food",
   "backilnge.com",
   "bacteroidmail.com",
   "badgerland.eu",
@@ -790,6 +795,7 @@
   "california.edu.pl",
   "californiafitnessdeals.com",
   "calima.asso.st",
+  "calmriver.info",
   "cam4you.cc",
   "cameltok.com",
   "camera47.net",
@@ -906,6 +912,7 @@
   "clandest.in",
   "classesmail.com",
   "claudd.com",
+  "clearbeam.pro",
   "clearwatermail.info",
   "click-email.com",
   "clickdeal.co",
@@ -1102,6 +1109,7 @@
   "dealja.com",
   "deallabs.org",
   "dealrek.com",
+  "deapad.com",
   "decep.com",
   "decodewp.com",
   "dede.infos.st",
@@ -1128,6 +1136,7 @@
   "dengekibunko.ga",
   "dengekibunko.gq",
   "dengekibunko.ml",
+  "denipl.net",
   "deornaumail.com",
   "der-kombi.de",
   "derkombi.de",
@@ -1293,6 +1302,7 @@
   "dropjar.com",
   "droplar.com",
   "dropmail.me",
+  "dropons.com",
   "dropsin.net",
   "drowblock.com",
   "drugsellers.com",
@@ -1312,6 +1322,7 @@
   "duk33.com",
   "dukedish.com",
   "dulich84.com",
+  "dulieu.io.vn",
   "dumalu.com",
   "dumbass.nl",
   "dump-email.info",
@@ -1385,6 +1396,7 @@
   "einrot.de",
   "eintagsmail.de",
   "eiveg.com",
+  "elafans.com",
   "eldobhato-level.hu",
   "elearningjournal.org",
   "electro.mn",
@@ -1671,6 +1683,7 @@
   "fastyamaha.com",
   "fatflap.com",
   "faxico.com",
+  "faxzu.com",
   "faybetsy.com",
   "fbhotro.com",
   "fbi.one",
@@ -1812,6 +1825,7 @@
   "frm.ovh",
   "front14.org",
   "frostmail.fr.nf",
+  "frostypeak.info",
   "frwdmail.com",
   "fsitip.com",
   "fthcapital.com",
@@ -2110,6 +2124,7 @@
   "hasanmail.ml",
   "hat-geld.de",
   "hatespam.org",
+  "hathitrannhien.edu.vn",
   "hawrong.com",
   "haydoo.com",
   "hazelnut4u.com",
@@ -2144,6 +2159,7 @@
   "hidemail.pro",
   "hidemail.us",
   "hidesmail.net",
+  "hidingmail.net",
   "hidmail.org",
   "hidzz.com",
   "hiemail.net",
@@ -2341,6 +2357,7 @@
   "inoutmail.info",
   "inoutmail.net",
   "inpwa.com",
+  "inreur.com",
   "insanony.art",
   "insanony.one",
   "insanony.store",
@@ -2410,6 +2427,7 @@
   "itaolo.com",
   "itcompu.com",
   "itfast.net",
+  "itmo.edu.pl",
   "itsbds.com",
   "itsedit.click",
   "itsjiff.com",
@@ -2434,6 +2452,7 @@
   "jailbreakeverything.com",
   "jaipas.lu",
   "jajxz.com",
+  "jakarta.io.vn",
   "jakemsr.com",
   "janproz.com",
   "japnc.com",
@@ -2636,6 +2655,7 @@
   "kwilco.net",
   "kwtest.io",
   "kyal.pl",
+  "kynninc.com",
   "kyois.com",
   "kyriog.fr",
   "kyuusei.fr.nf",
@@ -2749,6 +2769,7 @@
   "logsmarter.net",
   "logular.com",
   "loh.pp.ua",
+  "lohinja.com",
   "loin.in",
   "lolfreak.net",
   "lolmail.biz",
@@ -2890,6 +2911,8 @@
   "mailed.ro",
   "maileimer.de",
   "maileme101.com",
+  "mailer.edu.pl",
+  "mailer.io.vn",
   "mailers.edu.pl",
   "mailexpire.com",
   "mailf5.com",
@@ -2966,6 +2989,7 @@
   "mailnoop.store",
   "mailnull.com",
   "mailnuo.com",
+  "mailo.edu.pl",
   "mailonaut.com",
   "mailorc.com",
   "mailorg.org",
@@ -3028,6 +3052,7 @@
   "malayalamdtp.com",
   "malioter.pro",
   "mama3.org",
+  "mamabood.com",
   "mamulenok.ru",
   "mandraghen.cf",
   "manifestgenerator.com",
@@ -3123,6 +3148,7 @@
   "minhquang2000.com",
   "minimail.gq",
   "ministry-of-silly-walks.de",
+  "minitts.net",
   "minsmail.com",
   "mintemail.com",
   "minuteafter.com",
@@ -3364,9 +3390,11 @@
   "newaddr.com",
   "newbpotato.tk",
   "newbreedapps.com",
+  "newdelhi.io.vn",
   "newfilm24.ru",
   "newideasfornewpeople.info",
   "newmail.top",
+  "newyork.io.vn",
   "next.ovh",
   "nextmail.info",
   "nextstopvalhalla.com",
@@ -3388,6 +3416,7 @@
   "nickmxh.com",
   "nicknassar.com",
   "nightorb.com",
+  "nik.edu.pl",
   "nikora.fr.nf",
   "nincsmail.com",
   "nincsmail.hu",
@@ -4024,6 +4053,7 @@
   "safetymail.info",
   "safetypost.de",
   "saharanightstempe.com",
+  "sahildash.dev",
   "sailmail.io",
   "sajutadollars.com",
   "saleis.live",
@@ -4161,6 +4191,7 @@
   "siteinfox.com",
   "siteposter.net",
   "six25.biz",
+  "sixoplus.com",
   "sizzlemctwizzle.com",
   "sjuaq.com",
   "skeefmail.com",

package/src/manager/routes/user/delete.js

@@ -81,7 +81,7 @@ module.exports = async ({ assistant, Manager, user, settings, libraries }) => {
   // Send confirmation email (fire-and-forget)
   const shouldSend = !assistant.isTesting() || process.env.TEST_EXTENDED_MODE;
   if (email && shouldSend) {
-    sendConfirmationEmail(assistant, email, reason, userData?.personal?.name?.first);
+    sendConfirmationEmail(assistant, email, uid, reason, userData?.personal?.name?.first);
   }
 
   return assistant.respond({ success: true });
@@ -90,7 +90,7 @@ module.exports = async ({ assistant, Manager, user, settings, libraries }) => {
 /**
  * Send account deletion confirmation email (fire-and-forget)
  */
-function sendConfirmationEmail(assistant, email, reason, firstName) {
+function sendConfirmationEmail(assistant, email, uid, reason, firstName) {
   const Manager = assistant.Manager;
   const brandName = Manager.config.brand.name;
   const mailer = Manager.Email(assistant);
@@ -98,6 +98,7 @@ function sendConfirmationEmail(assistant, email, reason, firstName) {
   const reasonLine = reason
     ? `\n\n**Reason provided:** ${reason}`
     : '';
+  const deletionDate = new Date().toUTCString();
 
   mailer.send({
     to: email,
@@ -114,6 +115,12 @@ function sendConfirmationEmail(assistant, email, reason, firstName) {
         title: 'Account Deleted',
         message: `${greeting} **${brandName}** account and all associated personal data have been permanently deleted from our systems. This action is irreversible.${reasonLine}
 
+**Deletion details:**
+
+- **Account email:** ${email}
+- **Account UID:** ${uid}
+- **Deletion date:** ${deletionDate}
+
 **What this means:**
 
 - Your account credentials and profile information have been removed.