chore(deps): bump protobufjs from 7.5.8 to 7.6.3#2470
Conversation
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 7.5.8 to 7.6.3. - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.3/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.8...protobufjs-v7.6.3) --- updated-dependencies: - dependency-name: protobufjs dependency-version: 7.6.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
github-actions
Bot
added
the
review/tier-1
🟢 Tier 1 — TrivialDocs, images, lock files, or a dependency bump. No functional code changes detected. Why this tier:
Review process: Auto-merge once CI passes. No human review required. Stats
|
Greptile SummaryThis PR bumps
Confidence Score: 5/5Safe to merge — the bump picks up upstream bug fixes with no breaking changes and no changes to application logic. The change is a routine dependency bump with an unbroken semver-compatible range. The upstream changelog contains only bug fixes and one additive BigInt feature; nothing in the diff touches application code. No files require special attention; the yarn.lock duplication is cosmetic and can be cleaned up with a dedupe pass at any time. Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
A[packages/api] -->|requires ^7.6.3| B[protobufjs 7.6.3]
C[indirect dep] -->|requires ^7.3.0| D[protobufjs 7.5.8]
E[yarn dedupe protobufjs] -.->|would consolidate| B
D -.->|could resolve to| B
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
A[packages/api] -->|requires ^7.6.3| B[protobufjs 7.6.3]
C[indirect dep] -->|requires ^7.3.0| D[protobufjs 7.5.8]
E[yarn dedupe protobufjs] -.->|would consolidate| B
D -.->|could resolve to| B
Reviews (2): Last reviewed commit: "Merge branch 'main' into dependabot/npm_..." | Re-trigger Greptile |
E2E Test Results❌ 1 test failed • 198 passed • 3 skipped • 1350s
Tests ran across 4 shards in parallel. |
1 participant
Bumps protobufjs from 7.5.8 to 7.6.3.
Release notes
Sourced from protobufjs's releases.
Changelog
Sourced from protobufjs's changelog.
Commits
1d3796dchore: release protobufjs-v7.x (#2317)df91652fix: Preserve null conversion behavior for fieldless messages (#2312)78a9576fix: Avoid name collisions in generated code (#2311)ec90ef9chore: release protobufjs-v7.x (#2295)a92f72efix: Backport consistency and correctness fixes (#2294)f0b50d2chore: release protobufjs-v7.x (#2268)8a45c13fix: Backport misc utility hardening (#2280)479dfdcfix: Treat fixed64 as unsigned in converters (#2266)e30c334chore: release protobufjs-v7.x (#2260)f769242feat: Support BigInt conversions (7.x) (#2258)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.