Bump node-forge, @angular-devkit/build-angular and firebase-tools

[dependabot]

Removes node-forge. It's no longer used after updating ancestor dependencies node-forge, @angular-devkit/build-angular and firebase-tools. These dependencies need to be updated together.

Removes node-forge

Updates @angular-devkit/build-angular from 0.901.6 to 21.2.5

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.5

@​angular/cli

Commit	Description
	support custom port in MCP devserver start tool

@​angular/ssr

Commit	Description
	allow underscores in host validation
	patch Headers.forEach in cloneRequestAndPatchHeaders

21.2.4

@​angular/cli

Commit	Description
	restore console methods after logger completes

@​angular/build

Commit	Description
	deduplicate and merge coverage excludes with vitest
	prevent reporter duplicates by explicitly overriding Vitest configuration
	remove default for unit-test coverage option
	warn about performance of test.exclude in vitest configuration
	warn when vitest watch config conflicts with builder

@​angular/ssr

Commit	Description
	apply forwarded prefix and vary header in accept-language redirects
	support '*' in allowedHosts and warn about security risks

21.2.3

@​angular/cli

Commit	Description
	use parsed package name for migrate-only updates

@​angular/build

Commit	Description
	alias createRequire banner import to avoid duplicate binding
	only use external packages for polyfills when no local files are present

@​angular/ssr

Commit	Description
	disallow x-forwarded-prefix starting with a backslash
	ensure unique values in redirect response Vary header
	support custom headers in redirect responses

21.2.2

@​angular/cli

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.5 (2026-03-27)

@​angular/cli

Commit	Type	Description
cadf9b201	feat	support custom port in MCP devserver start tool

@​angular/ssr

Commit	Type	Description
bbc255419	fix	allow underscores in host validation
b1fe66a7f	fix	patch Headers.forEach in cloneRequestAndPatchHeaders

20.3.22 (2026-03-27)

@​angular-devkit/build-angular

Commit	Type	Description
5978eeeff	fix	update picomatch to 4.0.4

@​angular-devkit/core

Commit	Type	Description
6e9b92612	fix	update picomatch to 4.0.4

@​angular/build

Commit	Type	Description
6f209c26d	fix	update picomatch to 4.0.4

19.2.23 (2026-03-27)

@​angular/cli

Commit	Type	Description
67cfbe32f	fix	update picomatch to 4.0.4

... (truncated)

Commits

• See full diff in compare view

Updates firebase-tools from 8.2.0 to 15.12.0

Release notes

Sourced from firebase-tools's releases.

v15.12.0

• Moved MCP server firebase-debug.log to ~/.cache/firebase/firebase-debug.log. (#9982)
• Added a prompt to firebase init to install Agent Skills for Firebase.
• Updated the Firebase Data Connect local toolkit to v3.3.1, which includes the following changes: (#10190)
  • [added] Support for configuring client-side caching in connector.yaml / generate section

v15.11.0

• Add support for dataAccessMode in Firestore database creation. This allows choosing between FIRESTORE_NATIVE and MONGODB_COMPATIBLE for Enterprise edition databases.
• Updated Firestore Emulator to v1.20.4, which includes minor bug fixes for Firestore Native Mode.
• Added apptesting:execute command to run App Testing agent tests from YAML files.
• Updated Data Connect emulator to v3.3.0:
  • firebase dataconnect:sdk:generate now performs compilation check first before generating SDKs.
  • Updated the Golang dependency version from 1.24.13 to 1.25.8, which removes support for macOS versions prior to Monterey.
  • Prevent concurrent execution of operations. firebase/firebase-tools#9866
  • Support for skip and include directives.
  • Vector similarity search now supports offset as well as limit

v15.10.1

• Updated Pub/Sub emulator to version 0.8.29.

v15.10.0

• Add support for VPC direct connect in GCF 2nd gen (#10033)
• Added --only flag for emulators:export (#4033)
• Added support for custom PostgreSQL schema names in Data Connect. (#9271)
• When SSR web app features are detected in the firebase init hosting flow, offer to switch to App Hosting (#9887)
• Removed the experimental web frameworks prompt from firebase init hosting (#9843)
• Added studio:export command to export Firebase Studio projects to Antigravity.

v15.9.1

• Added support for next.config.ts and next.config.mts in Next.js deployments (#9871)
• Enabled free trials without a billing instrument for Firebase Data Connect (#10042)

v15.9.0

• Added *_EMULATOR_VERSION env variables to allow overriding specific versions of downloadable emulators
• Updated the functions.config deprecation notice from March 2026 to March 2027 (#9941)
• Detects when App Hosting fails to deploy, returning an error. (#8866)
• Add firestore_query_collection tool back to MCP as it is not available in the OneMCP server yet.
• Add support for custom resolvers in Firebase Data Connect (#9967)
• Updated the Firebase Data Connect local toolkit to v3.2.1, which includes the following changes: (#10022)
  • Resolved metadata pathing issue for @​redact and @​check directives

v15.8.0

• Corrects issue with updateService in runv2.ts (#9918)
• Updated suite of MCP tools for Firestore to include many new tools. Firestore tools no longer support emulator mode.
• Updated the Firebase Data Connect local toolkit to v3.2.0, which includes the following changes: (#9975)
  • Support for uuidV7()
  • Support for custom PostgreSQL schema names.

v15.7.0

• Updated Python Functions template to use firebase_functions v0.5.x

... (truncated)

Commits

• 9fdcf7e 15.12.0
• f98a2f3 bump fdc emulator to 3.3.1 (#10190)
• 134359f Pin to @​toolnate/once@​3.0.1 (#10196)
• 4886699 Organize terraform attributes when serializing (#10145)
• 0e29a34 Fix some tests that were using real configstore content (#10178)
• 81cbdec Write MCP debug logs to ~/.cache/firebase (#10175)
• d2c923f Non-interactive mode for migrate.ts (#10143)
• 9697616 Registration for FAL events (#10149)
• b60bbfd Include empty clientCache configs on init (#10167)
• 3ad2ba6 Add RPC library for AI Logic triggers (#10144)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.