Skip to content

Bump protobufjs, @google-cloud/aiplatform and @google-cloud/firestore in /backend#74

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/multi-eab0e25f33
Closed

Bump protobufjs, @google-cloud/aiplatform and @google-cloud/firestore in /backend#74
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/multi-eab0e25f33

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Bumps protobufjs to 7.5.8 and updates ancestor dependencies protobufjs, @google-cloud/aiplatform and @google-cloud/firestore. These dependencies need to be updated together.

Updates protobufjs from 7.2.4 to 7.5.8

Release notes

Sourced from protobufjs's releases.

protobufjs: v7.5.8

7.5.8 (2026-05-12)

Bug Fixes

protobufjs: v7.5.7

7.5.7 (2026-05-09)

Bug Fixes

protobufjs: v7.5.6

7.5.6 (2026-04-27)

Bug Fixes

  • Backport input hardening and CLI fixes to 7.x (#2173) (75392ea)

v7.5.5

This release backports two reported security issues to 7.x branch.

  • fix: do not allow setting __proto__ in Message constructor (#2126)
  • fix: filter invalid characters from the type name (#2127)

Full Changelog: protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.5.5

protobufjs: v7.5.4

7.5.4 (2025-08-15)

Bug Fixes

protobufjs: v7.5.3

7.5.3 (2025-05-28)

Bug Fixes

  • descriptor extensions handling post-editions (#2075) (6e255d4)

protobufjs: v7.5.2

7.5.2 (2025-05-14)

... (truncated)

Changelog

Sourced from protobufjs's changelog.

7.5.8 (2026-05-12)

Bug Fixes

7.5.7 (2026-05-09)

Bug Fixes

7.5.6 (2026-04-27)

Bug Fixes

  • Backport input hardening and CLI fixes to 7.x (#2173) (75392ea)

7.5.4 (2025-08-15)

Bug Fixes

7.5.3 (2025-05-28)

Bug Fixes

  • descriptor extensions handling post-editions (#2075) (6e255d4)

7.5.2 (2025-05-14)

Bug Fixes

7.5.1 (2025-05-08)

Bug Fixes

  • optimize regressions from editions implementations (#2066) (6406d4c)
  • reserved field inside group blocks fail parsing (#2058) (56782bf)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for protobufjs since your current version.


Updates @google-cloud/aiplatform from 2.17.0 to 6.7.0

Release notes

Sourced from @​google-cloud/aiplatform's releases.

bigtable: v6.5.1

6.5.1 (2026-05-11)

Bug Fixes

recaptcha-enterprise: v6.4.1

6.4.1 (2026-05-01)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
  • Do not publish the protos to npm (#8079) (816216b)
  • Revert "fix: Do not publish the protos to npm" (#8096) (ac0fbb6)

text-to-speech: v6.4.1

6.4.1 (2026-05-01)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
  • Do not publish the protos to npm (#8079) (816216b)
  • Revert "fix: Do not publish the protos to npm" (#8096) (ac0fbb6)

resource-manager: v6.2.2

6.2.2 (2026-05-01)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
  • Do not publish the protos to npm (#8079) (816216b)
  • Revert "fix: Do not publish the protos to npm" (#8096) (ac0fbb6)

tasks: v6.2.2

6.2.2 (2026-05-01)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)

video-intelligence: v6.2.2

6.2.2 (2026-05-01)

... (truncated)

Changelog

Sourced from @​google-cloud/aiplatform's changelog.

6.7.0 (2026-05-01)

Features

  • Add OnlineEvaluator API and update Evaluation API (#8044) (7c62c7d)
  • New field CopyModelRequest.custome_service_account for Model Registry CopyModel BYOSA (7c62c7d)

Bug Fixes

  • Change the copyright year for files in the packages folder (#8109) (c1a03fe)
  • Do not publish the protos to npm (#8079) (816216b)
  • Revert "fix: Do not publish the protos to npm" (#8096) (ac0fbb6)

6.6.0 (2026-04-14)

Features

  • A new field evaluation_run is added to message .google.cloud.aiplatform.v1beta1.EvaluateDatasetRun (adee1ec)
  • A new field inference_generation_config is added to message .google.cloud.aiplatform.v1beta1.EvaluationConfig (adee1ec)
  • Add AskContexts and AsyncRetrieveContexts APIs to VertexRagService (adee1ec)
  • Add AskContexts and AsyncRetrieveContexts APIs to VertexRagService (adee1ec)
  • Add custom memory id field to create memory v1beta1 (adee1ec)
  • Add custom session id field to create session v1 (adee1ec)
  • Add custom session id field to create session v1beta1 (adee1ec)
  • Add image_spec to Reasoning Engine public protos (adee1ec)
  • Add image_spec to Reasoning Engine public protos (adee1ec)
  • Add new embed_content_config to message EmbedContentRequest (adee1ec)
  • Add new embed_content_config to message EmbedContentRequest (adee1ec)
  • Add raw_event field to event proto v1 (adee1ec)
  • Add raw_event field to event proto v1beta1 (adee1ec)
  • Add transcription fields to Session Service (adee1ec)
  • RagMetadata and RagDataSchema concepts and Batch API definitions added for Preview (adee1ec)
  • Update the schema proto for the RagChunk with file_id and chunk_id to align with the vertex_rag_data.proto (adee1ec)

6.5.0 (2026-03-02)

Features

  • Add traffic_type, tool_use_prompt_tokens_details to message GenerateContentResponse.UsageMetadata (#7266) (9f91e05)

6.4.0 (2026-02-03)

Features

  • Force-delete for RagCorpora, ignoring any external errors and ensuring deletion of the RagCorpus (#7085) (b69b8ae)

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @google-cloud/firestore from 6.7.0 to 8.6.0

Release notes

Sourced from @​google-cloud/firestore's releases.

firestore: v8.6.0

8.6.0 (2026-05-11)

Features

  • firestore: Added FieldValue.minimum() and FieldValue.maximum() (#8151) (41671b0)
  • firestore: Added search stage support for languageCode, offset, limit, and retrievalDepth (#8161) (4acb075)

Bug Fixes

  • Bump all node submodules (#8178) (9fd76ef)
  • firestore: Ensure limit(0) is properly serialized in query requests (#8076) (8631008), closes #7382
  • firestore: Respect ignoreUndefinedProperties in subpipelines (#8089) (a9f6c3f)

bigquery: v8.3.1

8.3.1 (2026-05-11)

Bug Fixes

  • bigquery: Run npm run types in correct directory in owlbot (#8061) (0948b35)
  • Bump all node submodules (#8178) (9fd76ef)
  • Pin @​sinonjs/fake-timers to unblock build in bigquery (#8121) (374167b)

gcp-metadata: v8.1.3

8.1.3 (2026-05-11)

Bug Fixes

retry-request: v8.0.3

8.0.3 (2026-05-11)

Bug Fixes

googleapis-common: v8.0.2

8.0.2 (2026-05-11)

Bug Fixes

... (truncated)

Changelog

Sourced from @​google-cloud/firestore's changelog.

8.6.0 (2026-05-11)

Features

  • firestore: Added FieldValue.minimum() and FieldValue.maximum() (#8151) (41671b0)
  • firestore: Added search stage support for languageCode, offset, limit, and retrievalDepth (#8161) (4acb075)

Bug Fixes

  • Bump all node submodules (#8178) (9fd76ef)
  • firestore: Ensure limit(0) is properly serialized in query requests (#8076) (8631008), closes #7382
  • firestore: Respect ignoreUndefinedProperties in subpipelines (#8089) (a9f6c3f)

8.5.0 (2026-04-13)

Features

  • [firestore] Add support for DML (09cd24f)
  • [firestore] Add support for DML (77ce319)
  • firestore: Add array expressions (55d6385)
  • firestore: Add array expressions (d72d1c0)
  • firestore: Add array expressions (0fa836d)
  • firestore: Add array expressions (d71b3d9)
  • firestore: Add array expressions (71933e5)
  • firestore: Add array expressions (da46223)
  • firestore: Add array expressions (81733e8)
  • firestore: Add array expressions (2513fd5)
  • firestore: Add array expressions (d8a8334)
  • firestore: Add support for subqueries (#7839) (fb317f8)
  • firestore: add the parent expression (f17a791)
  • firestore: Add timestamp expressions (deeb265)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (228fe85)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (32089a9)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (a95b65d)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (7feca57)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (20a55db)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (0ae2a4f)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (e18620e)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (cf4ea62)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (343c8ec)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (80c3170)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (606f97a)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (410e7fd)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (e6f646b)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (781b5c7)
  • firestore: Added public preview support for full-text search and geo search in Pipelines (0e925ba)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) to 7.5.8 and updates ancestor dependencies [protobufjs](https://github.com/protobufjs/protobuf.js), [@google-cloud/aiplatform](https://github.com/googleapis/google-cloud-node/tree/HEAD/packages/google-cloud-aiplatform) and [@google-cloud/firestore](https://github.com/googleapis/google-cloud-node/tree/HEAD/handwritten/firestore). These dependencies need to be updated together.


Updates `protobufjs` from 7.2.4 to 7.5.8
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.5.8/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v7.2.4...protobufjs-v7.5.8)

Updates `@google-cloud/aiplatform` from 2.17.0 to 6.7.0
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-aiplatform/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/speech-v6.7.0/packages/google-cloud-aiplatform)

Updates `@google-cloud/firestore` from 6.7.0 to 8.6.0
- [Release notes](https://github.com/googleapis/google-cloud-node/releases)
- [Changelog](https://github.com/googleapis/google-cloud-node/blob/main/handwritten/firestore/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-node/commits/spanner-v8.6.0/handwritten/firestore)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-version: 7.5.8
  dependency-type: indirect
- dependency-name: "@google-cloud/aiplatform"
  dependency-version: 6.7.0
  dependency-type: direct:production
- dependency-name: "@google-cloud/firestore"
  dependency-version: 8.6.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 12, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 19, 2026

Superseded by #77.

@dependabot dependabot Bot closed this May 19, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/backend/multi-eab0e25f33 branch May 19, 2026 17:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants