v15.24.0

• Add declarative security support and automated rolling IAM role grants/revocations for 2nd gen Cloud Functions
• Fixed an issue in apps:create where App Store ID was always prompted for even when unnecessary.
• Add functions:lifecycle:list and functions:lifecycle:run commands to view and run
  lifecycle hooks in isolation.
• Updated the Firebase SQL Connect local toolkit to v3.4.15, which supports for 1:1 nested mutations. (#10773)
• Support for specifying that the input for a string or string[] param in Functions must be non-empty (#10678)
• Removed the warning that Dart functions may not yet be visible in the Firebase Console, since they are now shown.
• Fixed dataconnect:execute command help text. The right env var should be FIREBASE_DATA_CONNECT_EMULATOR_HOST, with an underscore between DATA and CONNECT.
• Updated the Firebase SQL Connect local toolkit to v3.4.16, which includes the following changes:
  • Updated the Golang dependency version to 1.25.12.
• Fixed a Hosting emulator timeout when a web frameworks request with a body falls through to a function rewrite. (#10760)

v15.23.0

• Add declarative security support and automated rolling IAM role grants/revocations for 2nd gen Cloud Functions
• Fixed an issue in apps:create where App Store ID was always prompted for even when unnecessary.
• Add functions:lifecycle:list and functions:lifecycle:run commands to view and run
  lifecycle hooks in isolation.
• Updated the Firebase SQL Connect local toolkit to v3.4.15, which supports for 1:1 nested mutations. (#10773)

v15.22.4

• Fixes auth:export and auth:import dropping mfaInfo data for users with Multi-Factor Authentication enabled.
• Updated Pub/Sub emulator to version 0.8.34

v15.22.3

• Disable 'keep-alive' in google-auth-library calls to avoid Premature close errors on some Node versions (#10716).

v15.22.2

• Upgrade zod to v4 and drop the deprecated zod-to-json-schema dependency in favor of zod v4's built-in z.toJSONSchema().
• Updated the Firebase Data Connect local toolkit to v3.4.14, which includes the following changes:
  • Fix linter warnings in generated Kotlin SDK files.
• Changed calls to 'cloudbilling.googleapis.com' to use user project quota to avoid shared quota exhaustion issues. If you are using CI token based auth in CI/CD, please ensure that you enable cloudbilling.googleapis.com before you update to this version.
• Fixed an intermittent "Premature close" error during login and API requests by retrying once without keep-alive. (#10692)

v15.22.1

• Fixed various issues with Data Connect emulator / deploy by updating binary to version 3.4.13.
• Temporarily pinned firebase-docker-image to Node 24.16.0 to mitigate nodejs/node#63989.

v15.22.0

• Added apphosting:secrets:revokeaccess command. (#10669)
• Updated Pub/Sub emulator to version 0.8.33.
• Updated Data Connect emulator to version 3.4.12.
• Fix Data Connect non-deterministic output order of generated SDK files when compiled from multiple GQL source files.
• Optimize Data Connect singular relation filters on PKs to avoid EXISTS subqueries.

v15.21.0

• Fixed an issue where login:*, target:*, and ext:* subcommands were missing from firebase --help.
• Functions can declare additional API dependencies (#10621)
• Added mock Passkey (WebAuthn) support to the Auth emulator. (#10636)
• Fixes spawn activate.bat ENOENT error on Windows when initializing Python functions. (#10608)
• Fixed an issue where Cloud Run rewrites in the Hosting emulator would always hit the live Cloud Run API instead of routing to the local functions emulator. (#10588)
• Removed temporary warning directing Dart functions users to Cloud Console, as Firebase Console now supports Dart functions. (#10584)
• Updated the Firebase Data Connect local toolkit to v3.4.11, which includes the following changes:
  • [changed] Updated the Golang dependency version to 1.25.11.
• Fixed issue where apptesting:execute command rejects documented --test-username, --test-password, and --test-password-file options.
• Updated Web Frameworks to warn about missing SSRF protection config in Angular 22 deploys (#10523)
• Fixed an issue where Astro 6 SSR deploys returned HTTP 500 by preserving the server/ directory in the generated Cloud Function. (#10537)

v15.20.0

• Removed the prompt and backend deletion of Data Connect services during firebase deploy. (#10619)
• Fixes firebase init dataconnect failing with ENOEXEC when creating a new template app on some operating systems. (#10616)
• Support setting the Google Cloud Storage (GCS) test results bucket in apptesting:execute and appdistribution:distribute

v15.19.1

• Updated Firebase SQL Connect genAI features to use new Agent Service API
• Updated the Firebase Data Connect local toolkit to v3.4.10, which includes the following changes:
  • Extended client cache consistency validation to include conflicts with schema field names.