Always update to latest npm when building docker image (#10043)

Author: joehan

scripts/publish/firebase-docker-image/Dockerfile

@@ -1,5 +1,8 @@
 FROM node:lts-alpine AS app-env
 
+# Make sure to get the latest version of npm before doing anything else, to avoid vulnerabilities in npm's bundled dependencies.
+RUN npm install -g npm@latest
+
 # Install Python (for Cloud Functions) and Java (for emulators) and pre-cache emulator dependencies.
 RUN apk update && \
     apk add --no-cache python3 openjdk21-jre-headless bash && \

scripts/publish/firebase-docker-image/package-lock.json

@@ -3,8 +3,9 @@
     "firebase-tools": "latest"
   },
   "overrides": {
-    "tar": "^7.5.4",
+    "tar": "^7.5.8",
     "diff": "^4.0.4",
-    "hono": "^4.11.7"
+    "hono": "^4.11.7",
+    "minimatch": "^10.2.3"
   }
 }