Fix dependabot security alerts

[yifanyang]

https://github.com/firebase/firebase-android-sdk/security/dependabot/18

[github-actions]

Unit Test Results

   394 files  +  4     394 suites  +4   18m 19s ⏱️ + 1m 24s
4 713 tests +10  4 691 ✔️ +10  22 💤 ±0  0 ❌ ±0 
4 729 runs  +10  4 707 ✔️ +10  22 💤 ±0  0 ❌ ±0 

Results for commit 3f49238. ± Comparison against base commit 523730a.

♻️ This comment has been updated with latest results.

[google-oss-bot]

Size Report ¹

Affected Products

No changes between base commit (523730a) and merge commit (0369a0a).

Test Logs

• Base (523730a): https://github.com/firebase/firebase-android-sdk/actions/runs/3091989507
• Merge (0369a0a): https://github.com/firebase/firebase-android-sdk/actions/runs/3099713726

1. https://storage.googleapis.com/firebase-sdk-metric-reports/G2ksDSqOcq.html

[google-oss-bot]

Coverage Report ¹

Affected Products

• firebase-database

  Overall coverage changed from 50.18% (523730a) to 50.22% (0369a0a) by +0.04%.

  Filename	Base (523730a)	Merge (0369a0a)	Diff
  ChildChangeAccumulator.java	83.33%	96.67%	+13.33%
  DefaultPersistenceManager.java	74.76%	75.73%	+0.97%
  QueryParams.java	90.36%	89.76%	-0.60%

• firebase-firestore

  Overall coverage changed from 44.25% (523730a) to 44.26% (0369a0a) by +0.00%.

  Filename	Base (523730a)	Merge (0369a0a)	Diff
  SetMutation.java	94.44%	97.22%	+2.78%

• firebase-messaging

  Overall coverage changed from 85.14% (523730a) to 85.26% (0369a0a) by +0.12%.

  Filename	Base (523730a)	Merge (0369a0a)	Diff
  FirebaseMessaging.java	75.77%	76.21%	+0.44%
  RequestDeduplicator.java	80.00%	90.00%	+10.00%

Test Logs

• Base (523730a): https://github.com/firebase/firebase-android-sdk/actions/runs/3091989507
• Merge (0369a0a): https://github.com/firebase/firebase-android-sdk/actions/runs/3099713726

1. https://storage.googleapis.com/firebase-sdk-metric-reports/ZhGLAL8UJr.html