Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 5, 2026

Bumps google-protobuf from 3.21.4 to 4.0.1.

Release notes

Sourced from google-protobuf's releases.

v4.0.1

  • Add support for protobuf edition 2024
  • Add --version argument to protoc-gen-js binary for easier version checking. E.g. running ./protoc-gen-js will yield 4.0.1.

v4.0.0

What's Changed

  • Backport: binary proto serialization/deserialization changes and enable protobuf Editions 2023 (breaking change)
  • Backport: Fix JSPB binary utf8 decoding and validate by default (breaking change)
  • Do not ignore descriptor extensions
  • Limit global resolution to globalThis by (breaking change)
Commits
  • e50318a Allow edition 2024 (#259)
  • d221239 update intel macos build runner
  • 25fe480 Update READMEs and add keywords for npm
  • 373d074 bump protobuf to v33
  • 4a683cd protoc_plugin: normalize git repo URL with npm pkg fix
  • bc95baf add standlone protoc-gen-js npm package (@​protocolbuffers/protoc-gen-js) for ...
  • e63a279 Add --version flag for protoc-gen-js
  • 5c70f21 remove writeZigzagVarint64BigInt
  • ec3bc7f Revert BUILD file change, remove bigint handling in writer.js
  • 6a7eced Fix closure-js output
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 5, 2026
Bumps [google-protobuf](https://github.com/protocolbuffers/protobuf-javascript) from 3.21.4 to 4.0.1.
- [Release notes](https://github.com/protocolbuffers/protobuf-javascript/releases)
- [Commits](protocolbuffers/protobuf-javascript@v3.21.4...v4.0.1)

---
updated-dependencies:
- dependency-name: google-protobuf
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/google-protobuf-4.0.1 branch from 6ed7114 to 26a54e3 Compare January 19, 2026 05:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant