Skip to content

Bump @bufbuild/buf from 1.66.0 to 1.72.0 in /impl/google-protobuf in the google-protobuf group across 1 directory - #410

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/impl/google-protobuf/google-protobuf-8c06795567
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/impl/google-protobuf/google-protobuf-8c06795567

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the google-protobuf group with 1 update in the /impl/google-protobuf directory: @bufbuild/buf.

Updates @bufbuild/buf from 1.66.0 to 1.72.0

Release notes

Sourced from @​bufbuild/buf's releases.

v1.72.0

  • Fix buf beta registry webhook create and buf beta registry webhook list to emit proto JSON output.
  • Fix HTTPS Basic authentication for remote inputs to use BUF_INPUT_HTTPS_USERNAME for the username.
  • Fix IMPORT_USED lint rule silently reporting no unused imports when google/protobuf/descriptor.proto is in the transitive dependency graph.

v1.71.0

  • Port new formatter and fix bugs for in-line block comment spacing.
  • Fix handling for an empty rpc input/output.

v1.70.0

  • Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.
  • Fix LSP textDocument/documentSymbol marking every symbol as deprecated.
  • Add error for when a dependency is added to buf.yaml and is missing from buf.lock.
  • Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.
  • Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

v1.69.0

  • Increase check plugin WASM memory limits to 1GiB.
  • Fix LSP stale diagnostics persisting after a file is closed or deleted.
  • Fix handling of unprefixed newlines in block comments.
  • Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".
  • Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

v1.68.4

  • Fix duplicated extension tags across imports from compiler.

v1.68.3

  • Fix buf format error handling for edition 2024.

v1.68.2

  • Fix build failures for modules with a vendored descriptor.proto.
  • Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.
  • Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.
  • Add --debug-address flag to buf lsp serve to provide debug and profile support.

v1.68.1

  • Revert the use of the new compiler report format and properly ungate Editions 2024 features.
  • Fix absolute imports (leading-dot) marked unused in diagnostics.

v1.68.0

This release ports buf to our new Protobuf compiler, already used to power the Buf LSP. It uses a query-driven frontend and a new AST and intermediate representation, designed from the ground up to bring several improvements:

  • Better diagnostics. The new compiler produces rich, structured diagnostic reports with precise source locations. It also catches issues that protoc misses, such as duplicate repeated modifiers.
  • Editions 2024 support. Full support for Protobuf Editions 2024.
  • Faster and more memory efficient. Designed for large workspaces, the new compiler uses less memory and compiles faster than the previous implementation.

This is a seamless upgrade for buf users: no changes are required, the output has been automatically updated to a new, richer diagnostics report.


... (truncated)

Changelog

Sourced from @​bufbuild/buf's changelog.

[v1.72.0] - 2026-07-17

  • Fix buf beta registry webhook create and buf beta registry webhook list to emit proto JSON output.
  • Fix HTTPS Basic authentication for remote inputs to use BUF_INPUT_HTTPS_USERNAME for the username.
  • Fix IMPORT_USED lint rule silently reporting no unused imports when google/protobuf/descriptor.proto is in the transitive dependency graph.

[v1.71.0] - 2026-06-16

  • Port new formatter and fix bugs for in-line block comment spacing.
  • Fix handling for an empty rpc input/output.

[v1.70.0] - 2026-05-25

  • Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.
  • Fix LSP textDocument/documentSymbol marking every symbol as deprecated.
  • Add error for when a dependency is added to buf.yaml and is missing from buf.lock.
  • Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.
  • Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

[v1.69.0] - 2026-04-29

  • Increase check plugin WASM memory limits to 1GiB.
  • Fix LSP stale diagnostics persisting after a file is closed or deleted.
  • Fix handling of unprefixed newlines in block comments.
  • Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".
  • Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

[v1.68.4] - 2026-04-22

  • Fix duplicated extension tags across imports from compiler.

[v1.68.3] - 2026-04-20

  • Fix buf format error handling for edition 2024.

[v1.68.2] - 2026-04-17

  • Fix build failures for modules with a vendored descriptor.proto.
  • Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.
  • Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.
  • Add --debug-address flag to buf lsp serve to provide debug and profile support.

[v1.68.1] - 2026-04-14

  • Revert the use of the new compiler report format and properly ungate Editions 2024 features.
  • Fix absolute imports (leading-dot) marked unused in diagnostics.

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 1, 2026
Bumps the google-protobuf group with 1 update in the /impl/google-protobuf directory: [@bufbuild/buf](https://github.com/bufbuild/buf).


Updates `@bufbuild/buf` from 1.66.0 to 1.72.0
- [Release notes](https://github.com/bufbuild/buf/releases)
- [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md)
- [Commits](bufbuild/buf@v1.66.0...v1.72.0)

---
updated-dependencies:
- dependency-name: "@bufbuild/buf"
  dependency-version: 1.69.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: google-protobuf
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump @bufbuild/buf from 1.66.0 to 1.69.0 in /impl/google-protobuf in the google-protobuf group Bump @bufbuild/buf from 1.66.0 to 1.72.0 in /impl/google-protobuf in the google-protobuf group across 1 directory Aug 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/impl/google-protobuf/google-protobuf-8c06795567 branch from 6ec8c09 to de9a185 Compare August 1, 2026 07:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants