fix: externalize useSyncExternalStore shim to fix App Router crash (#760

)

Bundling use-sync-external-store/shim (a CJS module) into the ESM dist
makes rolldown emit a dynamic require() that throws "dynamic usage of
require is not supported" when a reactfire data hook loads client-side in
a Next.js App Router (strict ESM) context. This regression shipped in
4.2.4 and 4.2.5; 4.2.3 predates the current build toolchain and is clean.

Externalizing the shim lets the consumer's bundler resolve it (it is
already a runtime dependency), removing the require from our dist while
keeping the shim's React 16/17 fallback. Verified the throw path is
absent from the built ESM dist and from a rebuilt Next.js App Router
client chunk.

4.2.5

Bump body-parser from 1.20.5 to 1.20.6 in /functions (#746)

Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.5 to 1.20.6.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.5...1.20.6)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 1.20.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Remove `useUser`'s `initialData` override (#539)

* remove auth optimization

* regenerate docs

* bump version

Move build from TSDX to Vite (#534)

Update use.md (#481)

correction to code sample

update to latest rxfire

Make sure Firestore hooks return `undefined` when data does not exist (…

…#446)

More context in discussion #438

add App Check (#430)

Bump tar from 4.4.15 to 4.4.19 (#441)

Bumps [tar](https://github.com/npm/node-tar) from 4.4.15 to 4.4.19.
- [Release notes](https://github.com/npm/node-tar/releases)
- [Changelog](https://github.com/npm/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v4.4.15...v4.4.19)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>