Merge branch 'master' into bk-mcp-apphosting

Author: bkendall

CHANGELOG.md

@@ -1,9 +1,18 @@
+- Updated supported runtimes for functions. Default python runtime is now 3.13. (#8534)
 - Fixed issue where Secret Manager API was not automatically enabled for functions using secrets. (#8528)
 - Changed artifact registry cleanup policy error to warn for CI/CD workloads #8513
 - Enhance firebase init apphosting to support local source deploys. (#8479)
 - Fixed issue where `firebase init hosting:github` didn't correctly parse the repo input. (#8536)
 - Add GCP API client functions to support App Hosting deploy from source feature. (#8545)
 - Changed firebase init template for functions to pin runtime version on init. (#8553)
 - Fix an issue where updating a Cloud Function that retires would add incorrect fields to the updateMask. (#8560)
+- Fixed multi tenancy support for SSO users in the auth emulator (#8544)
 - Add SDK autoinit capabilities to App Hosting emulator. (#8582)
 - Provision App Hosting compute service account during init flow. (#8580)
+- Updated the Firebase Data Connect local toolkit to v2.6.1, which includes the following changes: (#8598)
+  - Fixed a bug where `@transaction` continued to execute after errors and produces more confusing errors.
+  - Fixed a bug where rolled-back fields in `@transaction` returned bogus data that had been invalidated by the rollback. They now correctly return null with a corresponding error "(rolled back)".
+  - Disallow `@check` on side-effect fields if the mutation doesn't have `@transaction`.
+  - Improved error messages when reading a field of `null` in CEL expressions.
+  - Updated the underlying Go dependency version from v1.22.2 to v1.22.12.
+  - Added the `response` binding to Server Values and `@check(expr:)` CEL expressions.

schema/firebase-config.json

@@ -275,16 +275,12 @@
                 },
                 "runtime": {
                     "enum": [
-                        "nodejs10",
-                        "nodejs12",
-                        "nodejs14",
-                        "nodejs16",
-                        "nodejs18",
                         "nodejs20",
                         "nodejs22",
                         "python310",
                         "python311",
-                        "python312"
+                        "python312",
+                        "python313"
                     ],
                     "type": "string"
                 },

src/bin/mcp.ts

@@ -5,6 +5,7 @@ import { FirebaseMcpServer } from "../mcp/index";
 import { parseArgs } from "util";
 import { SERVER_FEATURES, ServerFeature } from "../mcp/types";
 import { markdownDocsOfTools } from "../mcp/tools/index.js";
+import { resolve } from "path";
 
 const STARTUP_MESSAGE = `
 This is a running process of the Firebase MCP server. This command should only be executed by an MCP client. An example MCP client configuration might be:
@@ -36,7 +37,10 @@ export async function mcp(): Promise<void> {
   const activeFeatures = (values.only || "")
     .split(",")
     .filter((f) => SERVER_FEATURES.includes(f as ServerFeature)) as ServerFeature[];
-  const server = new FirebaseMcpServer({ activeFeatures, projectRoot: values.dir });
+  const server = new FirebaseMcpServer({
+    activeFeatures,
+    projectRoot: values.dir ? resolve(values.dir) : undefined,
+  });
   await server.start();
   if (process.stdin.isTTY) process.stderr.write(STARTUP_MESSAGE);
 }

src/command.ts

@@ -311,7 +311,7 @@ export class Command {
 
     if (getInheritedOption(options, "json")) {
       options.nonInteractive = true;
-    } else {
+    } else if (!options.isMCP) {
       useConsoleLoggers();
     }
 

src/deploy/functions/runtimes/python/index.ts

@@ -60,6 +60,8 @@ export function getPythonBinary(
     return "python3.11";
   } else if (runtime === "python312") {
     return "python3.12";
+  } else if (runtime === "python313") {
+    return "python3.13";
   }
   assertExhaustive(runtime, `Unhandled python runtime ${runtime as string}`);
 }

src/deploy/functions/runtimes/supported/supported.spec.ts

@@ -46,7 +46,7 @@ describe("supported runtimes", () => {
       expect(logLabeledWarning).to.have.been.calledWith(
         "functions",
         "Runtime Node.js 20 was deprecated on 2026-04-30 and will be " +
-          "decommissioned on 2026-10-31, after which you will not be able to " +
+          "decommissioned on 2026-10-30, after which you will not be able to " +
           "deploy without upgrading. Consider upgrading now to avoid disruption. See " +
           "https://cloud.google.com/functions/docs/runtime-support for full " +
           "details on the lifecycle policy",
@@ -58,7 +58,7 @@ describe("supported runtimes", () => {
       expect(logLabeledWarning).to.have.been.calledWith(
         "functions",
         "Runtime Node.js 20 will be deprecated on 2026-04-30 and will be " +
-          "decommissioned on 2026-10-31, after which you will not be able to " +
+          "decommissioned on 2026-10-30, after which you will not be able to " +
           "deploy without upgrading. Consider upgrading now to avoid disruption. See " +
           "https://cloud.google.com/functions/docs/runtime-support for full " +
           "details on the lifecycle policy",

src/deploy/functions/runtimes/supported/types.ts

@@ -49,63 +49,69 @@ export const RUNTIMES = runtimes({
   },
   nodejs10: {
     friendly: "Node.js 10",
-    status: "GA",
+    status: "decommissioned",
     deprecationDate: "2024-01-30",
     decommissionDate: "2025-01-30",
   },
   nodejs12: {
     friendly: "Node.js 12",
-    status: "GA",
+    status: "decommissioned",
     deprecationDate: "2024-01-30",
     decommissionDate: "2025-01-30",
   },
   nodejs14: {
     friendly: "Node.js 14",
-    status: "GA",
+    status: "decommissioned",
     deprecationDate: "2024-01-30",
     decommissionDate: "2025-01-30",
   },
   nodejs16: {
     friendly: "Node.js 16",
-    status: "GA",
+    status: "decommissioned",
     deprecationDate: "2024-01-30",
     decommissionDate: "2025-01-30",
   },
   nodejs18: {
     friendly: "Node.js 18",
-    status: "GA",
+    status: "decommissioned",
     deprecationDate: "2025-04-30",
-    decommissionDate: "2025-10-31",
+    decommissionDate: "2025-10-30",
   },
   nodejs20: {
     friendly: "Node.js 20",
     status: "GA",
     deprecationDate: "2026-04-30",
-    decommissionDate: "2026-10-31",
+    decommissionDate: "2026-10-30",
   },
   nodejs22: {
     friendly: "Node.js 22",
     status: "GA",
     deprecationDate: "2027-04-30",
-    decommissionDate: "2027-10-31",
+    decommissionDate: "2028-10-31",
   },
   python310: {
     friendly: "Python 3.10",
     status: "GA",
     deprecationDate: "2026-10-04",
-    decommissionDate: "2027-04-30",
+    decommissionDate: "2027-04-04",
   },
   python311: {
     friendly: "Python 3.11",
     status: "GA",
     deprecationDate: "2027-10-24",
-    decommissionDate: "2028-04-30",
+    decommissionDate: "2028-04-24",
   },
   python312: {
     friendly: "Python 3.12",
     status: "GA",
     deprecationDate: "2028-10-02",
-    decommissionDate: "2029-04-30",
+    decommissionDate: "2029-04-02",
+  },
+  python313: {
+    friendly: "Python 3.13",
+    status: "GA",
+    deprecationDate: "2029-10-10",
+    decommissionDate: "2030-04-10",
   },
 });
 

src/emulator/auth/widget_ui.ts

@@ -21,6 +21,7 @@ assert(!internalError, internalError);
 
 var apiKey = query.get('apiKey');
 var appName = query.get('appName');
+var tenantId = query.get('tid');
 var authType = query.get('authType');
 var providerId = query.get('providerId');
 var redirectUrl = query.get('redirectUrl');
@@ -192,7 +193,7 @@ function finishWithUser(urlEncodedIdToken, email) {
     urlResponse: url,
     sessionId: "ValueNotUsedByAuthEmulator",
     postBody: "",
-    tenantId: null,
+    tenantId: tenantId,
     error: null,
   });
 }

src/emulator/downloadableEmulatorInfo.json

@@ -39,22 +39,22 @@
   },
   "dataconnect": {
     "darwin": {
-      "version": "2.5.0",
-      "expectedSize": 27378432,
-      "expectedChecksum": "d18bc3a07be90886f6ec212f3393b66e",
-      "expectedChecksumSHA256": "a863e04f45a6704c25f1a7155c13dac5ed5f481f1a75ed11e45abed570d13117"
+      "version": "2.6.1",
+      "expectedSize": 27415296,
+      "expectedChecksum": "5814d22b06b1321409f40693dfe47288",
+      "expectedChecksumSHA256": "8df1cfac6ef747909b3c18b57ba52b70a11d53b9d0a22b197011d6550ceca133"
     },
     "win32": {
-      "version": "2.5.0",
-      "expectedSize": 27836416,
-      "expectedChecksum": "d335e9295b00381eb12682bc944ffef7",
-      "expectedChecksumSHA256": "8a216c475c4796bfcd65bcfb52aa303b3d79f389e3675dbf37702052d82c04c5"
+      "version": "2.6.1",
+      "expectedSize": 27875328,
+      "expectedChecksum": "21381052c2bf767ee84fb85975cfd4d5",
+      "expectedChecksumSHA256": "6bebaa9575b460c4fa170b191d94722923a3c869bc1eca24c7e444428e6b7a70"
     },
     "linux": {
-      "version": "2.5.0",
-      "expectedSize": 27295896,
-      "expectedChecksum": "dc44dbfd972a9b3608794909df517077",
-      "expectedChecksumSHA256": "7276447968da6375d3818f5011b1474f39510ec53b2fa14c4b771f795e19e7bd"
+      "version": "2.6.1",
+      "expectedSize": 27332760,
+      "expectedChecksum": "0480a92f5af8e8441e680dc4e7995263",
+      "expectedChecksumSHA256": "4f60baf4649c670227314302056f50b1c40ccc8d673b98d16935977508342a67"
     }
   }
 }

src/functions/projectConfig.spec.ts

@@ -29,7 +29,7 @@ describe("projectConfig", () => {
     });
 
     it("fails validation given config w/o source", () => {
-      expect(() => projectConfig.validate([{ runtime: "nodejs10" }])).to.throw(
+      expect(() => projectConfig.validate([{ runtime: "nodejs22" }])).to.throw(
         FirebaseError,
         /codebase source must be specified/,
       );
@@ -84,7 +84,7 @@ describe("projectConfig", () => {
     });
 
     it("fails validation given singleton config w/o source", () => {
-      expect(() => projectConfig.normalizeAndValidate({ runtime: "nodejs10" })).to.throw(
+      expect(() => projectConfig.normalizeAndValidate({ runtime: "nodejs22" })).to.throw(
         FirebaseError,
         /codebase source must be specified/,
       );
@@ -98,7 +98,7 @@ describe("projectConfig", () => {
     });
 
     it("fails validation given multi-resource config w/o source", () => {
-      expect(() => projectConfig.normalizeAndValidate([{ runtime: "nodejs10" }])).to.throw(
+      expect(() => projectConfig.normalizeAndValidate([{ runtime: "nodejs22" }])).to.throw(
         FirebaseError,
         /codebase source must be specified/,
       );