Skip to content

build(deps): bump protobufjs, gtfs and gtfs-realtime-bindings#69

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-027de646c7
Open

build(deps): bump protobufjs, gtfs and gtfs-realtime-bindings#69
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-027de646c7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 18, 2026

Copy link
Copy Markdown
Contributor

Bumps protobufjs to 8.6.4 and updates ancestor dependencies protobufjs, gtfs and gtfs-realtime-bindings. These dependencies need to be updated together.

Updates protobufjs from 7.5.4 to 8.6.4

Release notes

Sourced from protobufjs's releases.

protobufjs: v8.6.4

8.6.4 (2026-06-16)

Bug Fixes

protobufjs: v8.6.3

8.6.3 (2026-06-10)

Bug Fixes

  • Consistently reject truncated 64-bit varints (#2322) (ec868f3)
  • Include interfaces in API docs and fix FieldMask doc comment (#2319) (c98a4e5)
  • Preserve explicit URLs in path resolution (#2320) (c97cdbe)
  • Remove renamed reflection objects by identity (#2324) (9c9f8ee)
  • Support Node ESM named imports from CommonJS entrypoints (#2315) (3359e64)
  • Support utf8_validation during decode (#2325) (4dff8e4)

protobufjs: v8.6.2

8.6.2 (2026-06-09)

Bug Fixes

protobufjs: v8.6.1

8.6.1 (2026-06-07)

Bug Fixes

  • cli: Consistently wait for pbts output before JSDoc exit (#2306) (87ff02f)
  • cli: Preserve indentation in multiline declarations (#2307) (b38748d)
  • Preserve descriptor metadata needed by protoc-gen-pbjs (#2308) (a3b8dc7)
  • Remove inquire submodule (#2305) (cc42616)

protobufjs: v8.6.0

8.6.0 (2026-06-04)

Features

... (truncated)

Changelog

Sourced from protobufjs's changelog.

8.6.4 (2026-06-16)

Bug Fixes

8.6.3 (2026-06-10)

Bug Fixes

  • Consistently reject truncated 64-bit varints (#2322) (ec868f3)
  • Include interfaces in API docs and fix FieldMask doc comment (#2319) (c98a4e5)
  • Preserve explicit URLs in path resolution (#2320) (c97cdbe)
  • Remove renamed reflection objects by identity (#2324) (9c9f8ee)
  • Support Node ESM named imports from CommonJS entrypoints (#2315) (3359e64)
  • Support utf8_validation during decode (#2325) (4dff8e4)

8.6.2 (2026-06-09)

Bug Fixes

8.6.1 (2026-06-07)

Bug Fixes

  • cli: Consistently wait for pbts output before JSDoc exit (#2306) (87ff02f)
  • cli: Preserve indentation in multiline declarations (#2307) (b38748d)
  • Preserve descriptor metadata needed by protoc-gen-pbjs (#2308) (a3b8dc7)
  • Remove inquire submodule (#2305) (cc42616)

8.6.0 (2026-06-04)

Features

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for protobufjs since your current version.


Updates gtfs from 4.18.5 to 4.19.0

Release notes

Sourced from gtfs's releases.

Release 4.19.0

Updated

  • Dependency Updates
  • Add node 26 to testing workflow

Changed

  • Fix rt alert informed_entities - allowing alert import to maintain multiple informed entities
  • Allow filtering alerts informed entity columns
  • Deduplicate RT stop_time_updates
  • Pass user agent when fetching GTFS and GTFS-realtime
  • Allow response.status 2xx when fetching GTFS and GTFS-realtime
  • Import gtfs realtime using sequential processing
  • Add indexes

Fixed

  • Avoid prefixing undefined values
  • Fix for deleteDb() error on in memory databases
  • Fix for column constraints set to 0 being dropped
  • FIx for getStopsAsGeoJSON crashe when no agency
  • Add active_period to ServiceAlert interface
  • Fixes for TIDES schema

Release 4.18.7

Updated

  • Dependency Updates

Added

  • New fields in trips.txt - safe_duration_factor and safe_duration_offset

Release 4.18.6

Updated

  • Use pnpm
  • Dependency Updates
Changelog

Sourced from gtfs's changelog.

[4.19.0] - 2026-06-13

Updated

  • Dependency Updates
  • Add node 26 to testing workflow

Changed

  • Fix rt alert informed_entities - allowing alert import to maintain multiple informed entities
  • Allow filtering alerts informed entity columns
  • Deduplicate RT stop_time_updates
  • Pass user agent when fetching GTFS and GTFS-realtime
  • Allow response.status 2xx when fetching GTFS and GTFS-realtime
  • Import gtfs realtime using sequential processing
  • Add indexes

Fixed

  • Avoid prefixing undefined values
  • Fix for deleteDb() error on in memory databases
  • Fix for column constraints set to 0 being dropped
  • FIx for getStopsAsGeoJSON crashe when no agency
  • Add active_period to ServiceAlert interface
  • Fixes for TIDES schema

[4.18.7] - 2026-05-27

Updated

  • Dependency Updates

Added

  • New fields in trips.txt - safe_duration_factor and safe_duration_offset

[4.18.6] - 2026-05-24

Updated

  • Use pnpm
  • Dependency Updates
Commits
  • 8449c50 Release 4.19.0
  • 2d1e68f Pass user agent and allow response.status 2xx
  • 4a7283d Fixes for TIDES schema
  • 75954f2 README improvements
  • e56f2c0 Add indexes
  • 34a5ebf import gtfs realtime use sequential processing
  • d864809 Add active_period to ServiceAlert interface
  • 5e2b8f9 FIx for getStopsAsGeoJSON crashe when no agency
  • bfc293c Fix for column constraints set to 0 being dropped
  • 24f96c3 Fix for deleteDb() error on in memory databases
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates gtfs-realtime-bindings from 1.1.1 to 2.0.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for gtfs-realtime-bindings since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) to 8.6.4 and updates ancestor dependencies [protobufjs](https://github.com/protobufjs/protobuf.js), [gtfs](https://github.com/blinktaginc/node-gtfs) and [gtfs-realtime-bindings](https://github.com/MobilityData/gtfs-realtime-bindings). These dependencies need to be updated together.


Updates `protobufjs` from 7.5.4 to 8.6.4
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v8.6.4)

Updates `gtfs` from 4.18.5 to 4.19.0
- [Release notes](https://github.com/blinktaginc/node-gtfs/releases)
- [Changelog](https://github.com/BlinkTagInc/node-gtfs/blob/master/CHANGELOG.md)
- [Commits](BlinkTagInc/node-gtfs@4.18.5...4.19.0)

Updates `gtfs-realtime-bindings` from 1.1.1 to 2.0.0
- [Commits](https://github.com/MobilityData/gtfs-realtime-bindings/commits)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-version: 8.6.4
  dependency-type: indirect
- dependency-name: gtfs
  dependency-version: 4.19.0
  dependency-type: direct:production
- dependency-name: gtfs-realtime-bindings
  dependency-version: 2.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants