feat(firestore): Add setGrpcFlowControlWindow setting and set 256KB default

.github/workflows/ai-daily-tests.yml

@@ -18,12 +18,6 @@ jobs:
         with:
           submodules: true
 
-      - name: Enable KVM
-        run: |
-          echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
-          sudo udevadm control --reload-rules
-          sudo udevadm trigger --name-match=kvm
-
       - name: Set up JDK 17
         uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
@@ -46,24 +40,17 @@ jobs:
       - uses: google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db # v3.0.1
 
       - name: Run tests
-        uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d #v2.33.0
         env:
           FIREBASE_CI: 1
           FTL_RESULTS_BUCKET: android-ci
           FTL_RESULTS_DIR: ${{ format('logs/{0}/{1}_{2}/artifacts/', github.workflow, github.run_id, github.run_attempt) }}
           FIREBASE_APP_CHECK_DEBUG_SECRET: ${{ secrets.FIREBASE_APP_CHECK_DEBUG_SECRET }}
-        with:
-          api-level: 34
-          arch: x86_64
-          ram-size: 4096M
-          heap-size: 4096M
-          script: |
-            adb logcat -v time > logcat.txt &
-            ./gradlew ai-logic:firebase-ai:connectedCheck withErrorProne -PtargetBackend="prod"
+        run: |
+          ./gradlew ai-logic:firebase-ai:deviceCheck withErrorProne -PtargetBackend="prod"
 
       - name: Upload logs
         if: failure()
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: logcat.txt
           path: logcat.txt

.github/workflows/app-distribution-gradle-compatibility-tests.yml

@@ -2,39 +2,64 @@ name: App Distribution Gradle Compatibility Tests
 
 on:
   schedule:
-    - cron: '0 6 * * *' # Run daily at 6 AM
+    - cron: '0 6 * * *' # Run daily at 6:00 am UTC
+  pull_request:
+    paths:
+      - 'firebase-appdistribution/**'
+      - 'firebase-appdistribution-api/**'
+      - 'firebase-appdistribution-gradle/**'
   workflow_dispatch: # Allow manual triggering
 
 permissions:
   contents: read
+  issues: write
 
 jobs:
   app-distribution-plugin:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Set up JDK 17
-        uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           java-version: 17
           distribution: temurin
           cache: gradle
+
+      - name: Setup local.properties for prodTest
+        run: |
+          echo "${{ secrets.INTEG_TESTS_FAD_GRADLE_PROD_TEST_PROPERTIES }}" > local.properties
+
       - name: Add FAD service-credentials.json
         env:
           INTEG_TESTS_FAD_SERVICE_CREDENTIALS: ${{ secrets.INTEG_TESTS_FAD_SERVICE_CREDENTIALS }}
         if: env.INTEG_TESTS_FAD_SERVICE_CREDENTIALS != '' && env.INTEG_TESTS_FAD_SERVICE_CREDENTIALS != 'null'
         run: |
           echo $INTEG_TESTS_FAD_SERVICE_CREDENTIALS | base64 -d > firebase-appdistribution-gradle/service-credentials.json
+
       - name: Run tests
         id: tests
+        env:
+          FIREBASE_TOKEN: ${{ secrets.INTEG_TESTS_FAD_FIREBASE_TOKEN }}
         run: |
           ./gradlew \
-          :firebase-appdistribution-gradle:integrationTest
+          :firebase-appdistribution-gradle:prodTest \
+          :firebase-appdistribution-gradle:integrationTest --continue
 
       - name: Upload Test Report
         if: failure()
         uses: actions/upload-artifact@v4
         with:
           name: integration-test-report
-          path: firebase-appdistribution-gradle/build/reports/tests/integrationTest/
+          path: firebase-appdistribution-gradle/build/reports/tests/
+
+      - name: Create GitHub Issue on Failure
+        if: failure() && github.event_name == 'schedule' && github.ref_name == 'main'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh issue create \
+            --title "[firebase-appdistribution] Gradle Compatibility Tests Failed" \
+            --body "The daily compatibility tests failed on the main branch. Please check the workflow logs here to diagnose the failure: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
+            --label "api: appdistribution"

.github/workflows/build-release-artifacts.yml

@@ -41,21 +41,21 @@ jobs:
           ./gradlew firebasePublish
 
       - name: Upload m2 repo
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: m2repository
           path: build/m2repository/
           retention-days: 15
 
       - name: Upload release notes
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: release_notes
           path: build/release-notes/
           retention-days: 15
 
       - name: Upload kotlindocs
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: kotlindocs
           path: build/firebase-kotlindoc/

.github/workflows/changelog.yml

@@ -17,7 +17,7 @@ jobs:
       with:
         fetch-depth: 100
         submodules: true
-    - uses: ruby/setup-ruby@0481980f17b760ef6bca5e8c55809102a0af1e5a # v1.263.0
+    - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1.312.0
       with:
         ruby-version: '3.4'
     - name: Setup Bundler

.github/workflows/check-firebaseai-responses.yml

@@ -19,14 +19,14 @@ jobs:
           echo "latest_tag=$LATEST" >> $GITHUB_ENV
         working-directory: ai-logic/firebase-ai/src/test/resources/vertexai-sdk-test-data
       - name: Find comment from previous run if exists
-        uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3.1.0
+        uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4.0.0
         id: fc
         with:
           issue-number: ${{github.event.number}}
           body-includes: Firebase AI Mock Responses Check
       - name: Comment on PR if newer version is available
         if: ${{env.cloned_tag != env.latest_tag && !steps.fc.outputs.comment-id}}
-        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
+        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
         with:
           issue-number: ${{github.event.number}}
           body: >

.github/workflows/ci_tests.yml

@@ -99,7 +99,7 @@ jobs:
         env:
           MATRIX_MODULE: ${{matrix.module}}
       - name: Upload Test Results
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         if: always()
         with:
           name: unit-test-result-${{env.ARTIFACT_NAME}}
@@ -186,7 +186,7 @@ jobs:
 
     steps:
       - name: Download Artifacts
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           path: artifacts
 

.github/workflows/create-releases-buildtools.yml

@@ -40,7 +40,7 @@ jobs:
           ./gradlew \
             -Dmaven.repo.local=${ARTIFACTS} \
             :firebase-appdistribution-gradle:publishToMavenLocal
-      - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: firebase-appdistribution-gradle
           path: ${{ env.ARTIFACTS }}
@@ -68,7 +68,7 @@ jobs:
             -Dmaven.repo.local=${ARTIFACTS} \
             :firebase-crashlytics-buildtools:publishToMavenLocal \
             :firebase-crashlytics-gradle:publishToMavenLocal
-      - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: firebase-crashlytics-gradle-and-buildtools
           path: ${{ env.ARTIFACTS }}
@@ -95,7 +95,7 @@ jobs:
           ./gradlew \
             -Dmaven.repo.local=${ARTIFACTS} \
             :firebase-perf-gradle:publishToMavenLocal
-      - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: firebase-perf-gradle
           path: ${{ env.ARTIFACTS }}

.github/workflows/create_releases.yml

@@ -22,12 +22,14 @@ jobs:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Create base branch
-        uses: peterjgrainger/action-create-branch@08259812c8ebdbf1973747f9297e332fa078d3c1
-        with:
-          branch: 'releases/${{ inputs.name }}'
+        run: |
+          gh api repos/${{ github.repository }}/git/refs \
+            -f ref="refs/heads/releases/${{ inputs.name }}" \
+            -f sha="${{ github.sha }}"
 
   create-pull-request:
     runs-on: ubuntu-latest
+    needs: create-branches
     permissions:
       contents: write
       pull-requests: write

.github/workflows/dataconnect.yml

@@ -34,8 +34,8 @@ on:
 env:
   FDC_JAVA_VERSION: ${{ inputs.javaVersion || '17' }}
   FDC_ANDROID_EMULATOR_API_LEVEL: ${{ inputs.androidEmulatorApiLevel || '34' }}
-  FDC_NODEJS_VERSION: ${{ inputs.nodeJsVersion || '20' }}
-  FDC_FIREBASE_TOOLS_VERSION: ${{ inputs.firebaseToolsVersion || '15.15.0' }}
+  FDC_NODEJS_VERSION: ${{ inputs.nodeJsVersion || '24' }}
+  FDC_INPUT_FIREBASE_TOOLS_VERSION: ${{ inputs.firebaseToolsVersion }}
   FDC_FIREBASE_TOOLS_DIR: /tmp/firebase-tools
   FDC_FIREBASE_COMMAND: /tmp/firebase-tools/node_modules/.bin/firebase
   FDC_PYTHON_VERSION: ${{ inputs.pythonVersion || '3.13' }}
@@ -54,6 +54,16 @@ jobs:
         with:
           show-progress: false
 
+      - name: Initialize FDC_FIREBASE_TOOLS_VERSION environment variable
+        run: |
+          set -euo pipefail
+          if [[ -n "$FDC_INPUT_FIREBASE_TOOLS_VERSION" ]]; then
+            version="$FDC_INPUT_FIREBASE_TOOLS_VERSION"
+          else
+            version="$(cat firebase-dataconnect/ci/firebase-tools-version.txt)"
+          fi
+          echo "FDC_FIREBASE_TOOLS_VERSION=${version}" >> "$GITHUB_ENV"
+
       - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           java-version: ${{ env.FDC_JAVA_VERSION }}
@@ -63,7 +73,7 @@ jobs:
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
 
-      - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: ${{ env.FDC_NODEJS_VERSION }}
 
@@ -83,7 +93,7 @@ jobs:
           npm install --fund=false --audit=false --save --save-exact firebase-tools@${{ env.FDC_FIREBASE_TOOLS_VERSION }}
 
       - name: Restore Gradle Cache
-        uses: actions/cache/restore@d4323d4df104b026a6aa633fdb11d772146be0bf # 4.2.2
+        uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
         if: github.event_name != 'schedule'
         with:
           path: |
@@ -135,7 +145,7 @@ jobs:
             :firebase-dataconnect:assembleDebugAndroidTest
 
       - name: Save Gradle Cache
-        uses: actions/cache/save@d4323d4df104b026a6aa633fdb11d772146be0bf # 4.2.2
+        uses: actions/cache/save@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
         if: github.event_name == 'schedule'
         with:
           path: |
@@ -152,7 +162,7 @@ jobs:
           sudo udevadm trigger --name-match=kvm
 
       - name: Restore AVD Cache
-        uses: actions/cache/restore@d4323d4df104b026a6aa633fdb11d772146be0bf # 4.2.2
+        uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
         if: github.event_name != 'schedule'
         id: restore-avd-cache
         with:
@@ -165,7 +175,7 @@ jobs:
 
       - name: Create AVD
         if: github.event_name == 'schedule' || steps.restore-avd-cache.outputs.cache-matched-key == ''
-        uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d #v2.33.0
+        uses: reactivecircus/android-emulator-runner@e89f39f1abbbd05b1113a29cf4db69e7540cae5a #v2.37.0
         with:
           api-level: ${{ env.FDC_ANDROID_EMULATOR_API_LEVEL }}
           arch: x86_64
@@ -175,7 +185,7 @@ jobs:
           script: 'echo "Generated AVD snapshot for caching; event_name=${{ github.event_name }}, cache-matched-key=${{ steps.restore-avd-cache.outputs.cache-matched-key }}"'
 
       - name: Save AVD Cache
-        uses: actions/cache/save@d4323d4df104b026a6aa633fdb11d772146be0bf # 4.2.2
+        uses: actions/cache/save@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
         if: github.event_name == 'schedule'
         with:
           path: |
@@ -244,7 +254,7 @@ jobs:
 
       - name: Gradle connectedCheck
         id: connectedCheck
-        uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d #v2.33.0
+        uses: reactivecircus/android-emulator-runner@e89f39f1abbbd05b1113a29cf4db69e7540cae5a #v2.37.0
         # Allow this GitHub Actions "job" to continue even if the tests fail so that logs from a
         # failed test run get uploaded as "artifacts" and are available to investigate failed runs.
         # A later step in this "job" will fail the job if this step fails
@@ -259,15 +269,15 @@ jobs:
             set -eux && ./gradlew --warning-mode all ${{ (inputs.gradleInfoLog && '--info') || '' }} :firebase-dataconnect:connectedCheck :firebase-dataconnect:connectors:connectedCheck
 
       - name: Upload Log Files
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: integration_test_logs
           path: "**/*.log"
           if-no-files-found: warn
           compression-level: 9
 
       - name: Upload Gradle Build Reports
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: integration_test_gradle_build_reports
           path: firebase-dataconnect/**/build/reports/
@@ -403,6 +413,7 @@ jobs:
     needs:
       - 'integration-test'
       - 'actionlint-dataconnect-yml'
+      - 'zshellcheck'
       - 'python-ci-unit-tests'
       - 'python-ci-lint'
       - 'python-ci-format'
@@ -428,6 +439,7 @@ jobs:
           cat >'${{ runner.temp }}/job_results.txt' <<EOF
           integration-test:${{ needs.integration-test.result }}
           actionlint-dataconnect-yml:${{ needs.actionlint-dataconnect-yml.result }}
+          zshellcheck:${{ needs.zshellcheck.result }}
           python-ci-unit-tests:${{ needs.python-ci-unit-tests.result }}
           python-ci-lint:${{ needs.python-ci-lint.result }}
           python-ci-format:${{ needs.python-ci-format.result }}