Skip to content

Bump github.com/bufbuild/buf from 1.50.0 to 1.56.0 in /tools #4300

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 1, 2025

Bumps github.com/bufbuild/buf from 1.50.0 to 1.56.0.

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.56.0

  • Add buf export --all flag to include non-proto source files.
  • Add s390x binaries for Linux to releases.
  • Fix ppc64le binaries for Linux released as x86_64 binaries.
  • buf lint will no longer warn about uses of (buf.validate.message).disabled, as it was removed in protovalidate v0.14.0. Please update to protovalidate v0.14.0 or higher, using the steps outlined in the protovalidate release notes.
  • Fix buf breaking --against-registry to work with new modules that have no commits on the default branch.

v1.55.1

  • Fix language version for pre-commit hooks.

v1.55.0

  • Promote buf beta stats to buf stats.
  • Update built-in Well-Known Types to Protobuf v31.1.
  • Add buf registry sdk info command.
  • Allow workspaces that are adding new module(s) with no module-specific breaking configurations to run buf breaking, ignoring new module(s).

v1.54.0

  • Add CSR category to breaking rules.
  • Add support for local bufplugins for protoc-gen-buf-breaking and protoc-gen-buf-lint.
  • Add RISC-V (64-bit) binaries for Linux to releases.
  • Fix type filtering on buf generate for empty files, files with no declared types.
  • Fix CEL check on buf lint for predefined rules variables.
  • Fix buf config migrate to filter out removed rules.
  • Allow users to set examples without constraints in PROTOVALIDATE lint rule.
  • Add ppc64le binaries for Linux to releases.

v1.53.0

  • Fix buf breaking annotations for JSON format.

v1.52.1

  • Fix language version for pre-commit hooks.

v1.52.0

  • Fix exclude_type on a non imported package.
  • Fix --exclude-type flag for buf generate when an input is specified.
  • Fix type filter import filtering for options.
  • Add OS environment when invoking local buf plugins.
  • Add file path to buf lint and buf breaking output even when source code info is not available. This allows buf lint and buf breaking to respect ignore and ignore_only configurations when source code info is not available.

v1.51.0

  • Fix buf convert to allow for zero length for binpb, txtpb, and yaml formats.
  • Fix use of deprecated flag --include-types for buf generate.
  • Add --against-registry flag to buf breaking that runs breaking checks against the latest commit on the default branch of the corresponding module in the registry.
  • Fix type filter with unused image dependencies for buf generate.
  • Improve type filtering for buf generate. Adds the ability to exclude types with the parameter exclude_types in buf.gen.yaml and a flag --exclude-types in the CLI. Type filters may now also be specified as plugin parameters in buf.gen.yaml.

v1.50.1

  • Security: Improved input validation to prevent unsafe command execution when running buf registry login. (Reported by Matt Austin)
Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.56.0] - 2025-07-31

  • Add buf export --all flag to include non-proto source files.
  • Add s390x binaries for Linux to releases.
  • Fix ppc64le binaries for Linux released as x86_64 binaries.
  • buf lint will no longer warn about uses of (buf.validate.message).disabled, as it was removed in protovalidate v0.14.0. Please update to protovalidate v0.14.0 or higher, using the steps outlined in the protovalidate release notes.
  • Fix buf breaking --against-registry to work with new modules that have no commits on the default branch.

[v1.55.1] - 2025-06-17

  • Fix language version for pre-commit hooks.

[v1.55.0] - 2025-06-17

  • Promote buf beta stats to buf stats.
  • Update built-in Well-Known Types to Protobuf v31.1.
  • Add buf registry sdk info command.
  • Allow workspaces that are adding new module(s) with no module-specific breaking configurations to run buf breaking, ignoring new module(s).

[v1.54.0] - 2025-05-12

  • Add CSR category to breaking rules.
  • Add support for local bufplugins for protoc-gen-buf-breaking and protoc-gen-buf-lint.
  • Add RISC-V (64-bit) binaries for Linux to releases.
  • Fix type filtering on buf generate for empty files, files with no declared types.
  • Fix CEL check on buf lint for predefined rules variables.
  • Fix buf config migrate to filter out removed rules.
  • Allow users to set examples without constraints in PROTOVALIDATE lint rule.
  • Add ppc64le binaries for Linux to releases.

[v1.53.0] - 2025-04-21

  • Fix buf breaking annotations for JSON format.

[v1.52.1] - 2025-04-08

  • Fix language version for pre-commit hooks.

[v1.52.0] - 2025-04-07

  • Fix exclude_type on a non imported package.
  • Fix --exclude-type flag for buf generate when an input is specified.
  • Fix type filter import filtering for options.
  • Add OS environment when invoking local buf plugins.
  • Add file path to buf lint and buf breaking output even when source code info is not

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/bufbuild/buf](https://github.com/bufbuild/buf) from 1.50.0 to 1.56.0.
- [Release notes](https://github.com/bufbuild/buf/releases)
- [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md)
- [Commits](bufbuild/buf@v1.50.0...v1.56.0)

---
updated-dependencies:
- dependency-name: github.com/bufbuild/buf
  dependency-version: 1.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 1, 2025
@dependabot dependabot bot requested review from a team as code owners August 1, 2025 02:14
@dependabot dependabot bot requested review from ademidoff and BupycHuk and removed request for a team August 1, 2025 02:14
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 1, 2025
@dependabot dependabot bot requested review from idoqo and JiriCtvrtka and removed request for a team August 1, 2025 02:14
@github-actions github-actions bot enabled auto-merge (squash) August 1, 2025 02:14
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 6, 2025

Looks like github.com/bufbuild/buf is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Aug 6, 2025
auto-merge was automatically disabled August 6, 2025 10:52

Pull request was closed

@dependabot dependabot bot deleted the dependabot/go_modules/tools/github.com/bufbuild/buf-1.56.0 branch August 6, 2025 10:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants