npm / firebase-tools
firebase-tools
What changed in firebase-tools 15, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.
2 breaking1 security2 new APIs and options3 behavior and defaults2 tooling13 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initfirebase-tools 1523 changes
Breaking changes 2
Hosting API requests are now project-scoped; site-scoped requests and using - as a project identifier are eliminated.
GraphQL root operation type names (Query, Mutation, Subscription) can no longer be used as @table or @view types.
Security 1
Writer roles are no longer granted unnecessary TRUNCATE privilege.
New APIs and options 2
Added commands to manage Crashlytics Android heap dump collection.
Adds an optional step to configure Crashlytics email alerts during web onboarding.
Behavior and default changes 3
Deployment uses existing apps from any platform before creating a default web app.
Checks for a default Hosting site and offers to create one during web app creation.
Batches function deletions across instances when uninstalling a Function Kit.
Tooling 2
Validation, wrapper aliasing, and line-comment handling were improved to support the SQL editor in Firebase SQL.
Checks for a default Hosting site and offers to create one during auth initialization.
Fixes and other changes 13
Analytics timeouts no longer mask command errors or cause successful commands to exit with an error.
Creation now retries on HTTP 403 service account propagation errors.
Unhandled exceptions during deployment are no longer silently ignored with exit code 0.
Validation now succeeds when a Function Kit and a functions codebase share the same source directory.
Fixed source-site lookup when cloning from another project.
Queues continue processing remaining tasks when a task exhausts its retries or times out.
Fixes default region resolution for 2nd-gen functions with parameterized trigger event filters.
Nested ternary expressions in function parameters now load correctly and select the correct branch.
No longer recreates an already-deleted Cloud Tasks queue for task queue functions.
Reports the GCFv2-to-GCFv1 downgrade error during validation instead of showing a misleading CPU error.
The error message is improved when billing is not enabled.
Fixes 404 errors when re-uploading a source map with the same obfuscated file path across different app versions.
Fixes a crash when deploying Cloud Tasks functions whose IAM policy has no bindings.