Skip to content

Bump the protobuf-es group across 1 directory with 6 updates - #432

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/impl/protobuf-es/protobuf-es-08edd7f747
Open

Bump the protobuf-es group across 1 directory with 6 updates#432
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/impl/protobuf-es/protobuf-es-08edd7f747

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the protobuf-es group with 6 updates in the /impl/protobuf-es directory:

Package From To
@bufbuild/protobuf 2.13.0 2.14.0
@bufbuild/protoc-gen-es 2.13.0 2.14.0
@bufbuild/buf 1.66.1 1.72.0
@types/node 25.5.0 26.4.0
tsx 4.21.0 4.23.12
typescript 6.0.2 7.0.2

Updates @bufbuild/protobuf from 2.13.0 to 2.14.0

Release notes

Sourced from @​bufbuild/protobuf's releases.

v2.14.0

What's Changed

This is a performance release of protobuf-es. We've made substantial improvements to the runtime, while also reducing bundle size by 5%. Here are the results from our benchmarks (compared against v2.13.0):

fixture toBinary fromBinary toJson fromJson
general 4.66x 1.46x 2.29x 1.67x
scalar 2.91x 1.96x 1.74x 1.64x
repeated-scalar 4.37x 1.53x 3.06x 1.65x
map-scalar 4.43x 1.44x 2.42x 2.28x
repeated-message 5.27x 1.89x 1.71x 1.63x
map-message 5.21x 1.95x 1.81x 1.66x
user-tiny 1.44x 1.99x 1.49x 1.50x
user-normal 5.24x 1.99x 2.33x 2.03x

Individual changes are below:

New Contributors

Full Changelog: bufbuild/protobuf-es@v2.13.0...v2.14.0

Commits

Updates @bufbuild/protoc-gen-es from 2.13.0 to 2.14.0

Release notes

Sourced from @​bufbuild/protoc-gen-es's releases.

v2.14.0

What's Changed

This is a performance release of protobuf-es. We've made substantial improvements to the runtime, while also reducing bundle size by 5%. Here are the results from our benchmarks (compared against v2.13.0):

fixture toBinary fromBinary toJson fromJson
general 4.66x 1.46x 2.29x 1.67x
scalar 2.91x 1.96x 1.74x 1.64x
repeated-scalar 4.37x 1.53x 3.06x 1.65x
map-scalar 4.43x 1.44x 2.42x 2.28x
repeated-message 5.27x 1.89x 1.71x 1.63x
map-message 5.21x 1.95x 1.81x 1.66x
user-tiny 1.44x 1.99x 1.49x 1.50x
user-normal 5.24x 1.99x 2.33x 2.03x

Individual changes are below:

New Contributors

Full Changelog: bufbuild/protobuf-es@v2.13.0...v2.14.0

Commits

Updates @bufbuild/buf from 1.66.1 to 1.72.0

Release notes

Sourced from @​bufbuild/buf's releases.

v1.72.0

  • Fix buf beta registry webhook create and buf beta registry webhook list to emit proto JSON output.
  • Fix HTTPS Basic authentication for remote inputs to use BUF_INPUT_HTTPS_USERNAME for the username.
  • Fix IMPORT_USED lint rule silently reporting no unused imports when google/protobuf/descriptor.proto is in the transitive dependency graph.

v1.71.0

  • Port new formatter and fix bugs for in-line block comment spacing.
  • Fix handling for an empty rpc input/output.

v1.70.0

  • Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.
  • Fix LSP textDocument/documentSymbol marking every symbol as deprecated.
  • Add error for when a dependency is added to buf.yaml and is missing from buf.lock.
  • Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.
  • Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

v1.69.0

  • Increase check plugin WASM memory limits to 1GiB.
  • Fix LSP stale diagnostics persisting after a file is closed or deleted.
  • Fix handling of unprefixed newlines in block comments.
  • Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".
  • Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

v1.68.4

  • Fix duplicated extension tags across imports from compiler.

v1.68.3

  • Fix buf format error handling for edition 2024.

v1.68.2

  • Fix build failures for modules with a vendored descriptor.proto.
  • Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.
  • Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.
  • Add --debug-address flag to buf lsp serve to provide debug and profile support.

v1.68.1

  • Revert the use of the new compiler report format and properly ungate Editions 2024 features.
  • Fix absolute imports (leading-dot) marked unused in diagnostics.

v1.68.0

This release ports buf to our new Protobuf compiler, already used to power the Buf LSP. It uses a query-driven frontend and a new AST and intermediate representation, designed from the ground up to bring several improvements:

  • Better diagnostics. The new compiler produces rich, structured diagnostic reports with precise source locations. It also catches issues that protoc misses, such as duplicate repeated modifiers.
  • Editions 2024 support. Full support for Protobuf Editions 2024.
  • Faster and more memory efficient. Designed for large workspaces, the new compiler uses less memory and compiles faster than the previous implementation.

This is a seamless upgrade for buf users: no changes are required, the output has been automatically updated to a new, richer diagnostics report.

... (truncated)

Changelog

Sourced from @​bufbuild/buf's changelog.

[v1.72.0] - 2026-07-17

  • Fix buf beta registry webhook create and buf beta registry webhook list to emit proto JSON output.
  • Fix HTTPS Basic authentication for remote inputs to use BUF_INPUT_HTTPS_USERNAME for the username.
  • Fix IMPORT_USED lint rule silently reporting no unused imports when google/protobuf/descriptor.proto is in the transitive dependency graph.

[v1.71.0] - 2026-06-16

  • Port new formatter and fix bugs for in-line block comment spacing.
  • Fix handling for an empty rpc input/output.

[v1.70.0] - 2026-05-25

  • Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.
  • Fix LSP textDocument/documentSymbol marking every symbol as deprecated.
  • Add error for when a dependency is added to buf.yaml and is missing from buf.lock.
  • Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.
  • Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

[v1.69.0] - 2026-04-29

  • Increase check plugin WASM memory limits to 1GiB.
  • Fix LSP stale diagnostics persisting after a file is closed or deleted.
  • Fix handling of unprefixed newlines in block comments.
  • Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".
  • Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

[v1.68.4] - 2026-04-22

  • Fix duplicated extension tags across imports from compiler.

[v1.68.3] - 2026-04-20

  • Fix buf format error handling for edition 2024.

[v1.68.2] - 2026-04-17

  • Fix build failures for modules with a vendored descriptor.proto.
  • Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.
  • Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.
  • Add --debug-address flag to buf lsp serve to provide debug and profile support.

[v1.68.1] - 2026-04-14

  • Revert the use of the new compiler report format and properly ungate Editions 2024 features.
  • Fix absolute imports (leading-dot) marked unused in diagnostics.

... (truncated)

Commits

Updates @types/node from 25.5.0 to 26.4.0

Commits

Updates tsx from 4.21.0 to 4.23.12

Release notes

Sourced from tsx's releases.

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

  • shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

  • preserve async ESM require fallback (55cbece)

This release is also available on:

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

This release is also available on:

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

  • map Node test locations (2f55884)
  • support data URLs in tsImport (b94f46f)

This release is also available on:

v4.23.8

... (truncated)

Commits
  • ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
  • 651f5be test: cover CommonJS TypeScript import.meta paths
  • bd3bc64 test: cover CommonJS loader source fallback
  • 55cbece fix: preserve async ESM require fallback
  • 6c5ba85 docs: document CommonJS default interop
  • ec1bcd5 fix: support nyc coverage discovery (#710)
  • b6e5b48 docs: clarify CommonJS default imports
  • 2f55884 fix: map Node test locations
  • de935d5 docs: document Node source-map stack formatting
  • b94f46f fix: support data URLs in tsImport
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.


Updates typescript from 6.0.2 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

Downloads are available on:

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the protobuf-es group across 1 directory with 6 updates
d932be5 
Bumps the protobuf-es group with 6 updates in the /impl/protobuf-es directory:

| Package | From | To |
| --- | --- | --- |
| [@bufbuild/protobuf](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protobuf) | `2.13.0` | `2.14.0` |
| [@bufbuild/protoc-gen-es](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protoc-gen-es) | `2.13.0` | `2.14.0` |
| [@bufbuild/buf](https://github.com/bufbuild/buf) | `1.66.1` | `1.72.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.0` | `26.4.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.12` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.2` | `7.0.2` |



Updates `@bufbuild/protobuf` from 2.13.0 to 2.14.0
- [Release notes](https://github.com/bufbuild/protobuf-es/releases)
- [Commits](https://github.com/bufbuild/protobuf-es/commits/v2.14.0/packages/protobuf)

Updates `@bufbuild/protoc-gen-es` from 2.13.0 to 2.14.0
- [Release notes](https://github.com/bufbuild/protobuf-es/releases)
- [Commits](https://github.com/bufbuild/protobuf-es/commits/v2.14.0/packages/protoc-gen-es)

Updates `@bufbuild/buf` from 1.66.1 to 1.72.0
- [Release notes](https://github.com/bufbuild/buf/releases)
- [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md)
- [Commits](bufbuild/buf@v1.66.1...v1.72.0)

Updates `@types/node` from 25.5.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `tsx` from 4.21.0 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.21.0...v4.23.12)

Updates `typescript` from 6.0.2 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.2...v7.0.2)

---
updated-dependencies:
- dependency-name: "@bufbuild/protobuf"
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: protobuf-es
- dependency-name: "@bufbuild/protoc-gen-es"
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: protobuf-es
- dependency-name: "@bufbuild/buf"
  dependency-version: 1.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: protobuf-es
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: protobuf-es
- dependency-name: tsx
  dependency-version: 4.23.12
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: protobuf-es
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: protobuf-es
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants