Skip to content

Bump protobufjs and google-gax in /scripts/firebase#3000

Merged
veloce merged 1 commit intomainfrom
dependabot/npm_and_yarn/scripts/firebase/multi-2a30685f11
Apr 25, 2026
Merged

Bump protobufjs and google-gax in /scripts/firebase#3000
veloce merged 1 commit intomainfrom
dependabot/npm_and_yarn/scripts/firebase/multi-2a30685f11

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 17, 2026

Bumps protobufjs and google-gax. These dependencies needed to be updated together.
Updates protobufjs from 7.2.6 to 7.5.5

Release notes

Sourced from protobufjs's releases.

v7.5.5

This release backports two reported security issues to 7.x branch.

  • fix: do not allow setting __proto__ in Message constructor (#2126)
  • fix: filter invalid characters from the type name (#2127)

Full Changelog: protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.5.5

protobufjs: v7.5.4

7.5.4 (2025-08-15)

Bug Fixes

protobufjs: v7.5.3

7.5.3 (2025-05-28)

Bug Fixes

  • descriptor extensions handling post-editions (#2075) (6e255d4)

protobufjs: v7.5.2

7.5.2 (2025-05-14)

Bug Fixes

protobufjs: v7.5.1

7.5.1 (2025-05-08)

Bug Fixes

  • optimize regressions from editions implementations (#2066) (6406d4c)
  • reserved field inside group blocks fail parsing (#2058) (56782bf)

protobufjs: v7.5.0

7.5.0 (2025-04-15)

Features

  • add Edition 2023 Support (f04ded3)
  • add Edition 2023 Support (ac9a3b9)

... (truncated)

Changelog

Sourced from protobufjs's changelog.

Changelog

8.0.1 (2026-03-11)

Bug Fixes

  • bump protobufjs dependency version for cli package (#2128) (549b05e)
  • correct json syntax in tsconfig.json (#2120) (8065625)
  • descriptor: guard oneof index for non-Type parents (#2122) (1cac5cf)
  • do not allow setting proto in Message constructor (#2126) (f05e3c3)
  • filter invalid characters from the type name (#2127) (535df44)

8.0.0 (2025-12-16)

⚠ BREAKING CHANGES

  • add Edition 2024 Support (#2060)

Features

7.5.4 (2025-08-15)

Bug Fixes

7.5.3 (2025-05-28)

Bug Fixes

  • descriptor extensions handling post-editions (#2075) (6e255d4)

7.5.2 (2025-05-14)

Bug Fixes

7.5.1 (2025-05-08)

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by fenster, a new releaser for protobufjs since your current version.


Updates google-gax from 4.3.2 to 4.6.1

Changelog

Sourced from google-gax's changelog.

4.6.1 (2025-05-15)

Bug Fixes

4.6.0 (2024-12-19)

Features

4.5.0 (2024-10-25)

Features

  • adds unit tests for sync and async reads of a pipeline transformation (#1663) (c7995c4)

Bug Fixes

4.4.1 (2024-09-04)

Bug Fixes

  • expose underlying error with timeouts or retries (#1650) (f4d037a)

4.4.0 (2024-08-27)

Features

Bug Fixes

  • deps: update dependency protobufjs-cli to v1.1.3 (#1645) (1b2ffdf)

4.3.9 (2024-08-06)

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 17, 2026
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) and [google-gax](https://github.com/googleapis/google-cloud-node-core/tree/HEAD/packages/gax). These dependencies needed to be updated together.

Updates `protobufjs` from 7.2.6 to 7.5.5
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v7.2.6...protobufjs-v7.5.5)

Updates `google-gax` from 4.3.2 to 4.6.1
- [Release notes](https://github.com/googleapis/google-cloud-node-core/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node-core/blob/main/packages/gax/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node-core/commits/HEAD/packages/gax)

---
updated-dependencies:
- dependency-name: google-gax
  dependency-version: 4.6.1
  dependency-type: indirect
- dependency-name: protobufjs
  dependency-version: 7.5.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/scripts/firebase/multi-2a30685f11 branch from c712c11 to 3dc076f Compare April 25, 2026 10:36
@veloce veloce merged commit 0704eb0 into main Apr 25, 2026
@veloce veloce deleted the dependabot/npm_and_yarn/scripts/firebase/multi-2a30685f11 branch April 25, 2026 10:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant