Skip to content

Bump protobufjs and firebase-tools in /vue-firebase-crash-course#220

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vue-firebase-crash-course/multi-52d673865d
Open

Bump protobufjs and firebase-tools in /vue-firebase-crash-course#220
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vue-firebase-crash-course/multi-52d673865d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Bumps protobufjs to 7.5.8 and updates ancestor dependency firebase-tools. These dependencies need to be updated together.

Updates protobufjs from 7.2.6 to 7.5.8

Release notes

Sourced from protobufjs's releases.

protobufjs: v7.5.8

7.5.8 (2026-05-12)

Bug Fixes

protobufjs: v7.5.7

7.5.7 (2026-05-09)

Bug Fixes

protobufjs: v7.5.6

7.5.6 (2026-04-27)

Bug Fixes

  • Backport input hardening and CLI fixes to 7.x (#2173) (75392ea)

v7.5.5

This release backports two reported security issues to 7.x branch.

  • fix: do not allow setting __proto__ in Message constructor (#2126)
  • fix: filter invalid characters from the type name (#2127)

Full Changelog: protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.5.5

protobufjs: v7.5.4

7.5.4 (2025-08-15)

Bug Fixes

protobufjs: v7.5.3

7.5.3 (2025-05-28)

Bug Fixes

  • descriptor extensions handling post-editions (#2075) (6e255d4)

protobufjs: v7.5.2

7.5.2 (2025-05-14)

... (truncated)

Changelog

Sourced from protobufjs's changelog.

7.5.8 (2026-05-12)

Bug Fixes

7.5.7 (2026-05-09)

Bug Fixes

7.5.6 (2026-04-27)

Bug Fixes

  • Backport input hardening and CLI fixes to 7.x (#2173) (75392ea)

7.5.4 (2025-08-15)

Bug Fixes

7.5.3 (2025-05-28)

Bug Fixes

  • descriptor extensions handling post-editions (#2075) (6e255d4)

7.5.2 (2025-05-14)

Bug Fixes

7.5.1 (2025-05-08)

Bug Fixes

  • optimize regressions from editions implementations (#2066) (6406d4c)
  • reserved field inside group blocks fail parsing (#2058) (56782bf)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for protobufjs since your current version.


Updates firebase-tools from 13.3.0 to 13.35.1

Release notes

Sourced from firebase-tools's releases.

v13.35.1

  • Fix bug where functions:artifacts:setpolicy command's --none option didn't work as expected (#8330)

v13.35.0

  • Added support for generated Angular SDKs for Data Connect
  • App Hosting emulator can now load secret env vars. (#8305)
  • Fixed webframeworks deployments when using multiple hosting sites in firebase.json. (#8314)
  • Added a new command to setup a cleanup policy for functions artifacts. (#8268)
  • Added support for 3rd party builders for Angular. (#7557)
  • Fixed GCF V2 artifact cleanup by correctly encoding artifact names to match GCF V2's format. (#8318)
  • Increase emulator UI body parser limit to match Storage emulator maximum. (#8329)
  • Fixed Data Connect setup issues for fresh databases due to IAM user not being created. (#8335)
  • Fixed an issue where ext:install used POSIX file seperators on Windows machines. (#8326)
  • Updated the Firebase Data Connect local toolkit to v1.9.2, which adds support for generated Angular SDKs and updates Dart SDK fields to follow best practices. (#8347)
  • Fixed an issue where credentials from firebase login would not be correctly provided to the Data Connect emulator.
  • Fixed misleading comments in firebase init dataconnect connector.yaml template.
  • Improved Data Connect SQL permissions to better handle tables owned by IAM roles. (#8339)
  • Fixed an issue where the Data Connect emulator would crash after some SQL errors.

v13.34.0

  • Fix webframeworks deployments when using site in firebase.json. (#8295)
  • Add support for brownfield project onboard dataconnect:sql:setup. (#8150)
  • Update the Firebase Data Connect local toolkit to v1.8.5, which includes the following changes: (#8310)
    • Fix the Int and Int64 scalars to correctly validate the int32 and int64 ranges, respectively.
    • Fix the generated web SDK so that pnpm properly uses the link functionality.

v13.33.0

  • Fixed issue where apps:init fails to detect the output directory when it was run in a directory where app was the only module.
  • Set LOG_EXECUTION_ID=true by default for Cloud Functions (2nd gen) to improve debugging by displaying execution IDs in logs. (#8276)
  • Fix bug where function deployment no-oped for functions in bad state. (#8289)
  • Updated the Firebase Data Connect local toolkit to v1.8.4 which includes the following changes: (#8290)
    • React hooks for mutations without args no longer require undefined to be passed when calling mutate.
    • Fixed import resolution when moduleResolution is set to bundler.
    • React code generation will now generate a README explaining how to use generated query and mutation hook functions.
    • Fixed an issue where React developers have to pass in an empty object even when all fields are optional.
    • Fixed an issue where FirebaseError wasn't being passed into UseMutationOptions.

v13.32.0

  • Replaced VSCODE_CWD check to address issues running in VSCode environments. (#7471)
  • Added initial delay when loading python functions (#8239)
  • Enforced webframeworks enablement only on webframeworks sites (#8168)
  • Fixed issue where apps:init throws an error upon app creation.
  • Reenabled prompts for unused service deletion in deploy --only.
  • Update Firebase Data Connect local toolkit to v1.8.3, which includes the following changes: (#8263)
    • Adds a _metadata.distance field to vector similarity search results
    • Fixes auth and request.auth when the request is unauthenticated
    • Fixes an issue with hanging commas in import statements in the generated Web SDK
    • Fixes an issue where the additional union type { __angular?: true } breaks type inference in the generated Web SDK

v13.31.2

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump protobufjs and firebase-tools in /vue-firebase-crash-course
2464942 
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) to 7.5.8 and updates ancestor dependency [firebase-tools](https://github.com/firebase/firebase-tools). These dependencies need to be updated together.


Updates `protobufjs` from 7.2.6 to 7.5.8
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.5.8/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v7.2.6...protobufjs-v7.5.8)

Updates `firebase-tools` from 13.3.0 to 13.35.1
- [Release notes](https://github.com/firebase/firebase-tools/releases)
- [Changelog](https://github.com/firebase/firebase-tools/blob/main/CHANGELOG.md)
- [Commits](firebase/firebase-tools@v13.3.0...v13.35.1)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-version: 7.5.8
  dependency-type: indirect
- dependency-name: firebase-tools
  dependency-version: 13.35.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 12, 2026
@dependabot dependabot Bot mentioned this pull request May 12, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants