Skip to content

Bump protobufjs and renovate - #83

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-a7a36d4463
Closed

Bump protobufjs and renovate#83
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-a7a36d4463

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps protobufjs to 8.7.1 and updates ancestor dependency renovate. These dependencies need to be updated together.

Updates protobufjs from 8.6.4 to 8.7.1

Release notes

Sourced from protobufjs's releases.

protobufjs: v8.7.1

8.7.1 (2026-07-12)

Bug Fixes

  • Accept repeated NullValue elements in ProtoJSON (#2373) (ad0b9bb)
  • Apply enum options regardless of declaration order (#2384) (b5009b0)
  • Base64-encode bytes field defaults in toObject (#2375) (e552511)
  • cli: Handle extensions during sparse generation (#2386) (1965d37)
  • cli: Match declaration imports to generated modules (#2385) (3cf7420)
  • cli: Preserve array element union precedence in pbts (#2378) (2a697a5)
  • cli: Resolve imports from cwd by default (#2381) (65f659a)
  • Merge repeated message-valued fields within map entries (#2364) (13b417b)
  • Parse aggregate objects in option arrays (#2379) (71c2532)
  • Parse Any type URLs in aggregate options (#2383) (666fa6b)
  • Parse bracketed special field names in options (#2377) (dd1870b)
  • Parse map fields inside groups (#2382) (8a2c427)
  • Preserve proto names in bundled definitions (#2390) (7ba0557)
  • Remove circular LongBits dependency (#2387) (829f5cd)

protobufjs: v8.7.0

8.7.0 (2026-07-06)

Features

  • Rework encoder architecture and add additional fast paths (#2359) (e912baf)

Bug Fixes

  • Preserve parsed json_name in field options (#2363) (1cdd91e)
  • Reject truncated declarations without TypeError (#2358) (5995f2a)
  • Resolve feature defaults before lazy codegen (d59d100)

protobufjs: v8.6.6

8.6.6 (2026-07-03)

Bug Fixes

protobufjs: v8.6.5

8.6.5 (2026-06-23)

Bug Fixes

... (truncated)

Changelog

Sourced from protobufjs's changelog.

8.7.1 (2026-07-12)

Bug Fixes

  • accept repeated NullValue elements in ProtoJSON (#2373) (ad0b9bb)
  • Apply enum options regardless of declaration order (#2384) (b5009b0)
  • Base64-encode bytes field defaults in toObject (#2375) (e552511)
  • cli: Handle extensions during sparse generation (#2386) (1965d37)
  • cli: Match declaration imports to generated modules (#2385) (3cf7420)
  • cli: Preserve array element union precedence in pbts (#2378) (2a697a5)
  • cli: Resolve imports from cwd by default (#2381) (65f659a)
  • Merge repeated message-valued fields within map entries (#2364) (13b417b)
  • Parse aggregate objects in option arrays (#2379) (71c2532)
  • Parse Any type URLs in aggregate options (#2383) (666fa6b)
  • Parse bracketed special field names in options (#2377) (dd1870b)
  • Parse map fields inside groups (#2382) (8a2c427)
  • Preserve proto names in bundled definitions (#2390) (7ba0557)
  • Remove circular LongBits dependency (#2387) (829f5cd)

8.7.0 (2026-07-06)

Features

  • Rework encoder architecture and add additional fast paths (#2359) (e912baf)

Bug Fixes

  • Preserve parsed json_name in field options (#2363) (1cdd91e)
  • Reject truncated declarations without TypeError (#2358) (5995f2a)
  • Resolve feature defaults before lazy codegen (d59d100)

8.6.6 (2026-07-03)

Bug Fixes

8.6.5 (2026-06-23)

Bug Fixes

... (truncated)

Commits

Updates renovate from 43.243.2 to 43.272.6

Release notes

Sourced from renovate's releases.

43.272.6

43.272.6 (2026-07-20)

Bug Fixes

  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.8 (main) (#44747) (a00c621)
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.9 (main) (#44748) (d2aa7e3)

Miscellaneous Chores

  • deps: update dependency astral-sh/uv to v0.11.30 (main) (#44745) (451ed1c)
  • deps: update dependency uv to v0.11.30 (main) (#44746) (984cb43)

Tests

  • replace deprecated Biome recommended with preset (#44735) (73d21dd)

43.272.5

43.272.5 (2026-07-20)

Bug Fixes

  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.76.7 (main) (#44743) (1e7391f)

Miscellaneous Chores

  • deps: update actions/checkout action to v6.1.0 (main) (#44741) (e3541c1)
  • deps: update dependency astral-sh/uv to v0.11.29 (main) (#44619) (75d2ca1)
  • deps: update dependency protobufjs@8.0.1 to v8.7.1 (main) (#44733) (f3e5741)
  • deps: update github/codeql-action action to v4.37.1 (main) (#44647) (5a06fc9)

Code Refactoring

  • linters: enable node/no-sync and migrate to async calls (#44693) (2dbfd85)

Tests

  • linters: add linting rule to enforce v8 ignore reason declaration (#44726) (91e068f)

Continuous Integration

43.272.4

43.272.4 (2026-07-20)

Documentation

  • fix outdated statement that Docker major updates are disabled by default (#44524) (b0bc33c)
  • wrap preset names in code blocks (#44234) (6959107)

... (truncated)

Commits
  • d2aa7e3 fix(deps): update ghcr.io/renovatebot/base-image docker tag to v13.76.9 (main...
  • a00c621 fix(deps): update ghcr.io/renovatebot/base-image docker tag to v13.76.8 (main...
  • 984cb43 chore(deps): update dependency uv to v0.11.30 (main) (#44746)
  • 451ed1c chore(deps): update dependency astral-sh/uv to v0.11.30 (main) (#44745)
  • 73d21dd test: replace deprecated Biome recommended with preset (#44735)
  • 1e7391f fix(deps): update ghcr.io/renovatebot/base-image docker tag to v13.76.7 (main...
  • e3541c1 chore(deps): update actions/checkout action to v6.1.0 (main) (#44741)
  • 5a06fc9 chore(deps): update github/codeql-action action to v4.37.1 (main) (#44647)
  • 75d2ca1 chore(deps): update dependency astral-sh/uv to v0.11.29 (main) (#44619)
  • 2dbfd85 refactor(linters): enable node/no-sync and migrate to async calls (#44693)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump protobufjs and renovate
efcba59 
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) to 8.7.1 and updates ancestor dependency [renovate](https://github.com/renovatebot/renovate). These dependencies need to be updated together.


Updates `protobufjs` from 8.6.4 to 8.7.1
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v8.6.4...protobufjs-v8.7.1)

Updates `renovate` from 43.243.2 to 43.272.6
- [Release notes](https://github.com/renovatebot/renovate/releases)
- [Commits](renovatebot/renovate@43.243.2...43.272.6)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-version: 8.7.1
  dependency-type: indirect
- dependency-name: renovate
  dependency-version: 43.272.6
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026
@cursor

cursor Bot commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown

PR Summary

Low Risk
Dev-only dependency bump for Renovate with no application runtime changes; main risk is regression in Renovate behavior during scheduled dependency updates.

Overview
Updates the Renovate dev dependency from 43.243.2 to 43.272.6 in package.json, with a matching package-lock.json refresh.

That version is what the housekeeping dependencies workflow reads when it installs Renovate globally, so this pins the bot used for automated dependency PRs. The lockfile also moves protobufjs to 8.7.1 and refreshes Renovate’s tree (AWS SDK clients, OpenTelemetry, Smithy, adm-zip, optional re2, and related packages).

Reviewed by Cursor Bugbot for commit efcba59. Bugbot is set up for automated code reviews on this repo. Configure here.

@TimDiekmann
TimDiekmann added this pull request to the merge queue Aug 1, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to a conflict with the base branch Aug 1, 2026
@TimDiekmann
TimDiekmann added this pull request to the merge queue Aug 1, 2026
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to a conflict with the base branch Aug 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 1, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-a7a36d4463 branch August 1, 2026 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@TimDiekmann TimDiekmann TimDiekmann approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@TimDiekmann