build(deps-dev): bump firebase-tools from 15.10.0 to 15.25.1

[dependabot]

Bumps firebase-tools from 15.10.0 to 15.25.1.

Release notes

Sourced from firebase-tools's releases.

v15.25.1

• Fix typo that was breaking the emulator handling of secret params (issue #10866)
• Fixes service account propagation delays during Cloud Functions deploys and cleans up newly created service accounts on 100% deployment failure (#10871).
• Fixed appcheck:debugtokens:list and appcheck:debugtokens:delete prompting "Select the app to register a debug token for" when asking which app to operate on.

v15.25.0

• Update Firestore emulator to v1.22.0, adding support for DML
• Add appcheck:debugtokens:create, appcheck:debugtokens:list, and appcheck:debugtokens:delete CLI commands for managing App Check debug tokens (#10801).
• Add MCP-Protocol-Version, Mcp-Method, and Mcp-Name HTTP headers to OneMcpServer requests per the MCP 0728 standard release candidate (https://blog.modelcontextprotocol.io/posts/2026-07-28-release-candidate/ and https://modelcontextprotocol.io/seps/2243-http-standardization).
• Fixes Storage Emulator to support JSON uploads larger than 100KB without hanging or throwing 413 error (#8355)
• Add extdeprecationwarnings experiment to display phased deprecation notices and guidance across ext:* CLI commands.
• Fixes Data Connect emulator crash when in-flight GraphQL requests are cancelled (#10821)
• Fixed a Cloud Storage emulator hang under concurrent requests, caused by the rules runtime's stdout being parsed per-chunk instead of per-line so batched responses were dropped (#6194, #6865).
• Support for specifying that the input for a string or string[] param in Functions must be non-empty (#10678)
• Removed the warning that Dart functions may not yet be visible in the Firebase Console, since they are now shown.
• Add the V1 environment variable FUNCTION_REGION to v2 functions (#10862)

v15.24.0

• Add declarative security support and automated rolling IAM role grants/revocations for 2nd gen Cloud Functions
• Fixed an issue in apps:create where App Store ID was always prompted for even when unnecessary.
• Add functions:lifecycle:list and functions:lifecycle:run commands to view and run lifecycle hooks in isolation.
• Updated the Firebase SQL Connect local toolkit to v3.4.15, which supports for 1:1 nested mutations. (#10773)
• Support for specifying that the input for a string or string[] param in Functions must be non-empty (#10678)
• Removed the warning that Dart functions may not yet be visible in the Firebase Console, since they are now shown.
• Fixed dataconnect:execute command help text. The right env var should be FIREBASE_DATA_CONNECT_EMULATOR_HOST, with an underscore between DATA and CONNECT.
• Updated the Firebase SQL Connect local toolkit to v3.4.16, which includes the following changes:
  • Updated the Golang dependency version to 1.25.12.
• Fixed a Hosting emulator timeout when a web frameworks request with a body falls through to a function rewrite. (#10760)

v15.23.0

• Add declarative security support and automated rolling IAM role grants/revocations for 2nd gen Cloud Functions
• Fixed an issue in apps:create where App Store ID was always prompted for even when unnecessary.
• Add functions:lifecycle:list and functions:lifecycle:run commands to view and run lifecycle hooks in isolation.
• Updated the Firebase SQL Connect local toolkit to v3.4.15, which supports for 1:1 nested mutations. (#10773)

v15.22.4

• Fixes auth:export and auth:import dropping mfaInfo data for users with Multi-Factor Authentication enabled.
• Updated Pub/Sub emulator to version 0.8.34

v15.22.3

• Disable 'keep-alive' in google-auth-library calls to avoid Premature close errors on some Node versions (#10716).

v15.22.2

• Upgrade zod to v4 and drop the deprecated zod-to-json-schema dependency in favor of zod v4's built-in z.toJSONSchema().
• Updated the Firebase Data Connect local toolkit to v3.4.14, which includes the following changes:
  • Fix linter warnings in generated Kotlin SDK files.
• Changed calls to 'cloudbilling.googleapis.com' to use user project quota to avoid shared quota exhaustion issues. If you are using CI token based auth in CI/CD, please ensure that you enable cloudbilling.googleapis.com before you update to this version.
• Fixed an intermittent "Premature close" error during login and API requests by retrying once without keep-alive. (#10692)

... (truncated)

Commits

• 64c7f7e 15.25.1
• 2480f20 fix argument transposition in resolveParams call (#10875)
• 25857a2 inlined.sa propagation cleanup (#10871)
• 1db912e Use operation-specific wording in App Check debug token prompts (#10867)
• f75d81e fix: set vscode version explicitly in tests (#10872)
• 9c10639 feat: add firebase.json schema support and validation for function kits (#10842)
• e4f28d5 [firebase-release] Removed change log and reset repo after 15.25.0 release
• 9588e8e 15.25.0
• 3b2c067 Add GCF V1's FUNCTION_REGION env var to V2 (#10862)
• 0636759 Upgrading to use Firestore Emulator v1.22.0 (#10831)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1289.