Firebase

Recently shipped declarative security for 2nd gen Cloud Functions and automated IAM role management in the CLI.

2nd gen Cloud Functions gained declarative security and automated IAM — The CLI (v15.23.0) added declarative security support and automated rolling IAM role grants/revocations for 2nd gen Cloud Functions. New functions:lifecycle:list and functions:lifecycle:run commands let developers view and run lifecycle hooks in isolation.

Data Connect local toolkit updated — The SQL Connect local toolkit (v3.4.15) now supports 1:1 nested mutations. Earlier releases fixed non-deterministic SDK file output order and optimized singular relation filters on PKs to avoid EXISTS subqueries.

Auth emulator gained mock Passkey (WebAuthn) support — The CLI (v15.21.0) added mock Passkey flow support to the Auth emulator. A fix for auth:export and auth:import (v15.22.4) stopped dropping mfaInfo data for users with Multi-Factor Authentication enabled.

Apple SDK naming consistency — In v12.16.0, GeminiModel was renamed to GeminiLanguageModel across the Firebase Apple SDK. The Package.swift manifest now requires swift-tools-version:6.1.

App Check can now auto-initialize on JS — Calling initializeAppCheck without a provider argument attempts a default ReCaptchaEnterpriseProvider using the site key from the Firebase project config.

CLI housekeeping — firebase --help now shows missing subcommands (login:*, target:*, and ext:*). The zod dependency was upgraded to v4, replacing zod-to-json-schema. Intermittent "Premature close" errors during Google Auth API calls were addressed with a retry-and-disable-keep-alive fix. A pub/sub emulator bump (v0.8.34) and a temporary Node 24.16.0 Docker image pin mitigate a Node.js issue (nodejs/node#63989).