Skip to content

Conversation

@jeffmartson
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade @bufbuild/buf from 1.28.1 to 1.56.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 39 versions ahead of your current version.

  • The recommended version was released a month ago.

Release notes
Package name: @bufbuild/buf
  • 1.56.0 - 2025-07-31
    • Add buf export --all flag to include non-proto source files.
    • Add s390x binaries for Linux to releases.
    • Fix ppc64le binaries for Linux released as x86_64 binaries.
    • buf lint will no longer warn about uses of (buf.validate.message).disabled, as it was removed in protovalidate v0.14.0. Please update to protovalidate v0.14.0 or higher, using the steps outlined in the protovalidate release notes.
    • Fix buf breaking --against-registry to work with new modules that have no commits on the default branch.
  • 1.55.1 - 2025-06-17
    • Fix language version for pre-commit hooks.
  • 1.55.0 - 2025-06-17
    • Promote buf beta stats to buf stats.
    • Update built-in Well-Known Types to Protobuf v31.1.
    • Add buf registry sdk info command.
    • Allow workspaces that are adding new module(s) with no module-specific breaking configurations to run buf breaking, ignoring new module(s).
  • 1.54.0 - 2025-05-12
    • Add CSR category to breaking rules.
    • Add support for local bufplugins for protoc-gen-buf-breaking and protoc-gen-buf-lint.
    • Add RISC-V (64-bit) binaries for Linux to releases.
    • Fix type filtering on buf generate for empty files, files with no declared types.
    • Fix CEL check on buf lint for predefined rules variables.
    • Fix buf config migrate to filter out removed rules.
    • Allow users to set examples without constraints in PROTOVALIDATE lint rule.
    • Add ppc64le binaries for Linux to releases.
  • 1.53.0 - 2025-04-21
    • Fix buf breaking annotations for JSON format.
  • 1.52.1 - 2025-04-08
    • Fix language version for pre-commit hooks.
  • 1.52.0 - 2025-04-07
    • Fix exclude_type on a non imported package.
    • Fix --exclude-type flag for buf generate when an input is specified.
    • Fix type filter import filtering for options.
    • Add OS environment when invoking local buf plugins.
    • Add file path to buf lint and buf breaking output even when source code info is not available. This allows buf lint and buf breaking to respect ignore and ignore_only configurations when source code info is not available.
  • 1.51.0 - 2025-03-28
    • Fix buf convert to allow for zero length for binpb, txtpb, and yaml formats.
    • Fix use of deprecated flag --include-types for buf generate.
    • Add --against-registry flag to buf breaking that runs breaking checks against the latest commit on the default branch of the corresponding module in the registry.
    • Fix type filter with unused image dependencies for buf generate.
    • Improve type filtering for buf generate. Adds the ability to exclude types with the parameter exclude_types in buf.gen.yaml and a flag --exclude-types in the CLI. Type filters may now also be specified as plugin parameters in buf.gen.yaml.
  • 1.50.1 - 2025-03-10
    • Security: Improved input validation to prevent unsafe command execution when running buf registry login. (Reported by Matt Austin)
  • 1.50.0 - 2025-01-17
    • Add input parameter filter for use with git inputs. This sets the filter flag argument for the git fetch command.
  • 1.49.0 - 2025-01-07
  • 1.48.0 - 2024-12-20
  • 1.47.2 - 2024-11-14
  • 1.47.1 - 2024-11-13
  • 1.47.0 - 2024-11-13
  • 1.47.0-1 - 2024-11-14
  • 1.46.0 - 2024-10-29
  • 1.45.0 - 2024-10-08
  • 1.44.0 - 2024-10-03
  • 1.43.0 - 2024-09-30
  • 1.42.0 - 2024-09-18
  • 1.41.0 - 2024-09-11
  • 1.40.1 - 2024-09-06
  • 1.40.0 - 2024-09-04
  • 1.39.0 - 2024-08-27
  • 1.38.0 - 2024-08-22
  • 1.37.0 - 2024-08-16
  • 1.36.0 - 2024-08-06
  • 1.35.1 - 2024-07-24
  • 1.35.0 - 2024-07-22
  • 1.34.0 - 2024-06-21
  • 1.33.0 - 2024-06-13
  • 1.32.2 - 2024-05-28
  • 1.32.1 - 2024-05-21
  • 1.32.0 - 2024-05-16
  • 1.31.0 - 2024-04-23
  • 1.30.1 - 2024-04-03
  • 1.30.0 - 2024-03-07
  • 1.29.0 - 2024-01-24
  • 1.28.1 - 2023-11-15
from @bufbuild/buf GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @bufbuild/buf from 1.28.1 to 1.56.0.

See this package in npm:
@bufbuild/buf

See this project in Snyk:
https://app.snyk.io/org/jeffmartson/project/f74611d4-9da3-4d36-9ba9-95d6c89f7c04?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants