Skip to content

deps(deps): bump protobufjs from 8.4.2 to 8.6.3 - #27

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/protobufjs-8.6.3
Closed

deps(deps): bump protobufjs from 8.4.2 to 8.6.3#27
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/protobufjs-8.6.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Bumps protobufjs from 8.4.2 to 8.6.3.

Release notes

Sourced from protobufjs's releases.

protobufjs: v8.6.3

8.6.3 (2026-06-10)

Bug Fixes

  • Consistently reject truncated 64-bit varints (#2322) (ec868f3)
  • Include interfaces in API docs and fix FieldMask doc comment (#2319) (c98a4e5)
  • Preserve explicit URLs in path resolution (#2320) (c97cdbe)
  • Remove renamed reflection objects by identity (#2324) (9c9f8ee)
  • Support Node ESM named imports from CommonJS entrypoints (#2315) (3359e64)
  • Support utf8_validation during decode (#2325) (4dff8e4)

protobufjs: v8.6.2

8.6.2 (2026-06-09)

Bug Fixes

protobufjs: v8.6.1

8.6.1 (2026-06-07)

Bug Fixes

  • cli: Consistently wait for pbts output before JSDoc exit (#2306) (87ff02f)
  • cli: Preserve indentation in multiline declarations (#2307) (b38748d)
  • Preserve descriptor metadata needed by protoc-gen-pbjs (#2308) (a3b8dc7)
  • Remove inquire submodule (#2305) (cc42616)

protobufjs: v8.6.0

8.6.0 (2026-06-04)

Features

Bug Fixes

protobufjs: v8.5.0

8.5.0 (2026-05-29)

... (truncated)

Changelog

Sourced from protobufjs's changelog.

8.6.3 (2026-06-10)

Bug Fixes

  • Consistently reject truncated 64-bit varints (#2322) (ec868f3)
  • Include interfaces in API docs and fix FieldMask doc comment (#2319) (c98a4e5)
  • Preserve explicit URLs in path resolution (#2320) (c97cdbe)
  • Remove renamed reflection objects by identity (#2324) (9c9f8ee)
  • Support Node ESM named imports from CommonJS entrypoints (#2315) (3359e64)
  • Support utf8_validation during decode (#2325) (4dff8e4)

8.6.2 (2026-06-09)

Bug Fixes

8.6.1 (2026-06-07)

Bug Fixes

  • cli: Consistently wait for pbts output before JSDoc exit (#2306) (87ff02f)
  • cli: Preserve indentation in multiline declarations (#2307) (b38748d)
  • Preserve descriptor metadata needed by protoc-gen-pbjs (#2308) (a3b8dc7)
  • Remove inquire submodule (#2305) (cc42616)

8.6.0 (2026-06-04)

Features

Bug Fixes

8.5.0 (2026-05-29)

Features

... (truncated)

Commits
  • 8076a5e chore: release master (#2318)
  • 4dff8e4 fix: Support utf8_validation during decode (#2325)
  • 9c9f8ee fix: Remove renamed reflection objects by identity (#2324)
  • de18bbe docs: Document custom constructor registration order (#2323)
  • c98a4e5 fix: Include interfaces in API docs and fix FieldMask doc comment (#2319)
  • c97cdbe fix: Preserve explicit URLs in path resolution (#2320)
  • ec868f3 fix: Consistently reject truncated 64-bit varints (#2322)
  • 3359e64 fix: Support Node ESM named imports from CommonJS entrypoints (#2315)
  • 41d3517 chore: release master (#2316)
  • bf12d56 fix: Discard unknown fields by default (#2310)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 8.4.2 to 8.6.3.
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v8.4.2...protobufjs-v8.6.3)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-version: 8.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 15, 2026
@github-actions

Copy link
Copy Markdown

🔍 CodeQL Analysis Complete (actions)

CodeQL analysis has completed successfully. Results are available in the Security tab of this PR.

Language Analyzed: actions
Query Suite: security-extended, security-and-quality

📋 View Results:

  • Check the Security tab above for detailed findings
  • Review any alerts and address them before merging

Note: CodeQL does not natively support PowerShell. This analysis covers GitHub Actions workflows in .github/workflows.

Analysis performed automatically by CodeQL

@bolens bolens closed this Jun 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/protobufjs-8.6.3 branch June 15, 2026 20:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant