Bump firebase-tools from 13.9.0 to 14.6.0

[dependabot]

Bumps firebase-tools from 13.9.0 to 14.6.0.

Release notes

Sourced from firebase-tools's releases.

v14.6.0

• Fixed issue where projects:create didn't correctly parse the projectId and displayName input. (#8634)
• Improved GetDatabase API call caching for Firestore function deployments. (#8681)
• Increased timeout for linking CloudSQL instances to Data Connect.
• Fixed issue where firebase use --add didn't correctly set the active project. (#8694)
• Correctly support '--database' flag in firestore:delete. (#6753)
• Always setup Data Connect SDK when FDC_CONNECTOR env var is set.
• firebase init now uses FIREBASE_PROJECT env var as the default project name.
• Add emulator support to firestore MCP tools. (#8700)
• Increased npm timeout for web frameworks to 60s. (#8702)
• Fallback to reading web framework dependencies version directly from node_modules package.json when the npm timeout is reached. (#8702)
• Updated the Firebase Data Connect local toolkit to v2.6.3, which includes some cleanups and error message improvements. (#8667)

v14.5.1

• Fixed an issue where 'firestore.database' was accidentally treated as a required field. (#8678)

v14.5.0

• WARNING - This version accidentally included a breaking change where firestore.database was treated as a required field in firebase.json. This is addressed in 14.5.1.
• Improve log messages on skipped App Hosting source deploys. (#8674)
• Fixed issue in init where users were forced to specify emulator UI port (#8626)
• Added MCP tools for App Hosting (#8605)
• Fixed crash when starting the App Hosting emulator in certain applications (#8624)
• Fixed issue where, with webframeworks enabled, firebase init hosting re-prompts users for source. (#8587)
• Updated typescript version in functions template to avoid build issue with @​google-cloud/storage depedency (#8194)
• Updated the Firebase Data Connect local toolkit to v2.6.2, which includes the following changes: (#8667)
  • Improved error messages of auth.uid in CEL expressions when unauthenticated.
  • Fixed a bug where ExecuteGraphql with vector embedding in emulator fails due to missing context.
• Improved firebase init firestore + firebase deploy flow on a fresh new project without going to Console (#8653)
• Added support for Angular v20 to Firebase Hosting (#8672)

v14.4.0

• Added firebase experimental:mcp command, which runs an MCP server for AI assistants to interact with Firebase resources.
• Updated supported runtimes for functions. Default python runtime is now 3.13. (#8534)
• Fixed issue where Secret Manager API was not automatically enabled for functions using secrets. (#8528)
• Changed artifact registry cleanup policy error to warn for CI/CD workloads #8513
• Enhance firebase init apphosting to support local source deploys. (#8479)
• Fixed issue where firebase init hosting:github didn't correctly parse the repo input. (#8536)
• Add GCP API client functions to support App Hosting deploy from source feature. (#8545)
• Fixed an issue where Extensions, Cloud Functions, and App Hosting would run into issues on projects where the default compute service account was changed.
• Changed firebase init template for functions to pin runtime version on init. (#8553)
• Fix an issue where updating a Cloud Function that retires would add incorrect fields to the updateMask. (#8560)
• Fixed multi tenancy support for SSO users in the auth emulator (#8544)
• Add SDK autoinit capabilities to App Hosting emulator. (#8582)
• Provision App Hosting compute service account during init flow. (#8580)
• Updated the Firebase Data Connect local toolkit to v2.6.1, which includes the following changes: (#8598)
  • Fixed a bug where @transaction continued to execute after errors and produces more confusing errors.
  • Fixed a bug where rolled-back fields in @transaction returned bogus data that had been invalidated by the rollback. They now correctly return null with a corresponding error "(rolled back)".
  • Disallow @check on side-effect fields if the mutation doesn't have @transaction.
  • Improved error messages when reading a field of null in CEL expressions.
  • Updated the underlying Go dependency version from v1.22.2 to v1.22.12.

... (truncated)

Commits

• 39c9a4f 14.6.0
• b5a3b7b Update FDC local toolkit to v2.6.3 (#8709)
• 424c548 Respect --database flag in firestore:delete and add database option to MCP to...
• 4d05ea9 fix: Change photoUrl to photoURL in cloud functions auth provider payload (#4...
• b5c6238 npm list fallback, increase timeout to 60s (#8702)
• 91e05d2 fix audit issues 2025-06-03 (#8701)
• e930a4c [MCP] Support firestore emulator in MCP server (#8700)
• 3416f84 Improve automation for env vars for Data Connect init. (#8684)
• b103ff1 Update function deploy to add necessary Genkit monitoring permissions when de...
• c977451 Fix issue where values for results aren't being set (#8697)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #47.