Bump form-data and firebase-tools

[dependabot]

Bumps form-data to 2.5.5 and updates ancestor dependency firebase-tools. These dependencies need to be updated together.

Updates form-data from 2.5.1 to 2.5.5

Release notes

Sourced from form-data's releases.

v2.5.2

Fixes

• Buffer.from and Buffer.alloc require node 4+
• npmignore temporary build files (#532)
• move util.isArray to Array.isArray (#564)

Tests

• migrate from travis to GHA

Changelog

Sourced from form-data's changelog.

v2.5.5 - 2025-07-18

Commits

• [meta] actually ensure the readme backup isn’t published 10626c0
• [Fix] use proper dependency 026abe5

v2.5.4 - 2025-07-17

Fixed

• [Fix] append: avoid a crash on nullish values [#577](https://github.com/form-data/form-data/issues/577)

Commits

• [eslint] update linting config 8bf2492
• [meta] add auto-changelog b5101ad
• [Tests] handle predict-v8-randomness failures in node < 17 and node > 23 0e93122
• [Fix] Switch to using crypto random for boundary values b88316c
• [Fix] validate boundary type in setBoundary() method 131ae5e
• [Tests] Switch to newer v8 prediction library; enable node 24 testing c97cfbe
• [Refactor] use hasown 97ac9c2
• [meta] remove local commit hooks be99d4e
• [Dev Deps] remove unused deps ddbc89b
• [meta] fix scripts to use prepublishOnly e351a97
• [Dev Deps] remove unused script 8f23366
• [Dev Deps] add missing peer dep 02ff026
• [meta] fix readme capitalization 2fd5f61

v2.5.3 - 2025-02-14

Merged

• [Fix] set Symbol.toStringTag when available [#573](https://github.com/form-data/form-data/issues/573)

Fixed

• [Fix] set Symbol.toStringTag when available (#573) [#396](https://github.com/form-data/form-data/issues/396)

Commits

• [Refactor] use Object.prototype.hasOwnProperty.call 6e682d4
• [Dev Deps] update @types/node, browserify, coveralls, eslint, formidable, in-publish, phantomjs-prebuilt, pkgfiles, pre-commit, request, tape, typescript 819f6b7
• Only apps should have lockfiles b170ee2
• [Deps] update combined-stream, mime-types 6b1ca1d
• Bumped version 2.5.3 9457283
• [Dev Deps] pin request which via tough-cookie ^2.4 depends on psl 9dbe192

v2.5.2 - 2024-10-10

... (truncated)

Commits

• 40de5a7 v2.5.5
• 026abe5 [Fix] use proper dependency
• 10626c0 [meta] actually ensure the readme backup isn’t published
• efe6c26 v2.5.4
• c97cfbe [Tests] Switch to newer v8 prediction library; enable node 24 testing
• 0e93122 [Tests] handle predict-v8-randomness failures in node < 17 and node > 23
• b88316c [Fix] Switch to using crypto random for boundary values
• b70869d [Fix] append: avoid a crash on nullish values
• 131ae5e [Fix] validate boundary type in setBoundary() method
• 8bf2492 [eslint] update linting config
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for form-data since your current version.

Updates firebase-tools from 8.20.0 to 14.11.0

Release notes

Sourced from firebase-tools's releases.

v14.11.0

• Add experimental App Testing feature
• Fixed an issue where the Cloud Task emulator couldn't decode non-ASCII characters. (#8836)
• Fixed an issue where firestore:indexes wrongly removed the __name__ field. (#7629)
• Update Firebase Data Connect Emulator to version 2.10.0, which added support for full-text search, user-defined enums, and moved SQL/CEL errors to the GraphQL debug_details field. (#8837)

v14.10.1

• Updated Data Connect emulator to v2.9.1, which:
  • Replaces the release of v2.9.0, which used an outdated version of Data Connect emulator.
  • Fixed an issue in Data Connect where indexes over 63 characters broke schema migration.
  • Added support for string_pattern filters in Data Connect. These allow you to filter string fields using regex or LIKE semantics.
• Fixed an issue where firebase-tools could not be used within v1 Cloud Functions due to trying to write to a read only file.

v14.10.0

• Improve App Hosting compute service account flow for source deploys. (#8785)
• Fixed an issue with ext:configure where params without default values could not be set. (#8810)
• Updated Data Connect emulator to v2.9.0, which:
  • Fixed an issue in Data Connect where indexes over 63 characters broke schema migration.
  • Added support for string_pattern filters in Data Connect. These allow you to filter string fields using regex or LIKE semantics.
• Fixed an issue where the Data Connect emulator wasn't provided application default credentials. (#8819)

v14.9.0

• Added validation to check if project ID exists during project creation. (#5233)
• Added generate_dataconnect_schema, dataconnect_generate_operation, firebase_consult_assistant MCP tools. (#8647)
• firebase init dataconnect is now integrated with Gemini in Firebase API to generate Schema based on description. (#8596)
• Added user-friendly warning for runtime errors from the GCF API. (#8713)
• Updated Data Connect emulator to 2.8.0, which adds a README to generated Kotlin packages and drops support for macOS 10.15 (Catalina).

v14.8.0

• Updated the Data Connect emulator to use pglite 0.3.x and Postgres 17, which fixes some crashes related to wire protocol inconsistencies. (#8679, #8658)
• Remove container cleanup logic in functions:delete command (#8771)
• Fixed an issue where the IAM enablement for GenKit monitoring would try to change an invalid service account. (#8756)
• Added a max instance default to function templates and comments educating users on cost controls. (#8772)
• Added caching to API enablement checks to reduce burn of serviceusage.googleapis.com quota.
• Updated the Firebase Data Connect local toolkit to v2.7.1, which includes the following changes
  • Kotlin codegen: Add a default value for the block_ parameter to execute() so that it is not necessary to specify empty {} for operations with optional variables and none are specified.
  • Web SDK READMEs will link to other web framework READMEs for better discoverability.

v14.7.0

• Add emulator support to firebase storage MCP tools. (#8707)
• Removed overeager error catch in functions:list.
• Add validation during firebase init feature selection. (#5232)
• Fixed an issue where the extensions emulator did not work with demo- projects. (#8720)
• Fixed issue where --export-on-exit fails if the target directory does not exist. (#4688)
• Fixed issue where the Firebase MCP server could not use application default credentials. (#8671)
• Updated the Firebase Data Connect local toolkit to v2.7.0, which includes the following changes: (#8743)
  • Fixed an issue where unwanted link dependencies are added to package.json when multiple package managers are used in a web project.
  • Added linter warnings for naming convention violations & missing join table @table(key).

v14.6.0

... (truncated)

Commits

• d03fc8c 14.11.0
• 7a4ce9e Update Data Connect Emulator to v2.10.0 (#8858)
• a02b978 feat: Add experimental support to discover functions via dynamic generation o...
• 476cd01 feat: add utilities to support initiatlizing various ai tools for Firebase (#...
• 1b26e02 Change relative path to include nested dataconnect folders (#8853)
• bbfd570 Fixed an issue where the VSCE extension used the wrong host for execution on ...
• a3e87e5 implement mcp logging (#8846)
• 4d5a7d9 Adding changelogs for community PRs (#8851)
• cbb8582 Fix name field beeing stripped from index listing (#8761)
• 20b5212 Use Buffer.from().toString() instead of atob() to decode task payload (#8836)...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.