Skip to content

chore(deps): bump google-protobuf from 3.21.4 to 4.0.2#1244

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/google-protobuf-4.0.2
Open

chore(deps): bump google-protobuf from 3.21.4 to 4.0.2#1244
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/google-protobuf-4.0.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2026

Bumps google-protobuf from 3.21.4 to 4.0.2.

Release notes

Sourced from google-protobuf's releases.

v4.0.2

  • stop hardcoding protoc-gen-js plugin version in download script. This fixes an issue where @​protocolbuffers/protoc-gen-js only downloads v4.0.0, which lacks support for editions 2024

Full Changelog: protocolbuffers/protobuf-javascript@v4.0.1...v4.0.2

EDIT: Feb. 27, 2026: macos and windows releases were mistakenly double-zipped, causing further problems for the @​protocolbuffers/protoc-gen-js's download script. Re-uploading the inner zip files to fix.

v4.0.2-rc7

Using bzlmod with Bazel 7 or later:

Add to your MODULE.bazel file:

bazel_dep(name = "protobuf_javascript", version = "v4.0.2-rc7")

What's Changed

Full Changelog: protocolbuffers/protobuf-javascript@v4.0.2-rc6...v4.0.2-rc7

v4.0.2-rc6

Using bzlmod with Bazel 7 or later:

Add to your MODULE.bazel file:

bazel_dep(name = "protobuf_javascript", version = "v4.0.2-rc6")

What's Changed

Full Changelog: protocolbuffers/protobuf-javascript@v4.0.2-rc5...v4.0.2-rc6

v4.0.2-rc5

Using bzlmod with Bazel 7 or later:

Add to your MODULE.bazel file:

bazel_dep(name = "protobuf_javascript", version = "v4.0.2-rc5")

What's Changed

... (truncated)

Commits
  • 88c63a0 bump version v4.0.2
  • 1cb4478 Use protoc_plugin's package.json version instead of hardcoding
  • 261daec Update for bazel 9 and protobuf 33.4 (#274)
  • d0a7fc0 adjust path for archive and bump pre-release version (#273)
  • 9eb5f39 add MODULE.bazel and licenses to BCR package, bump pre-release version
  • edcf435 Switch BCR release workflow javascript source tarball, bump version (#271)
  • 34756fc Bump version to 4.0.2-rc4 for testing BCR workflow
  • 016866a Use bazel build for BCR release test command
  • 7d64c8d Add placeholder google-protobuf.js file to fix missing input
  • b784079 Bump version to v4.0.2-rc2 or testing BCR workflow
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [google-protobuf](https://github.com/protocolbuffers/protobuf-javascript) from 3.21.4 to 4.0.2.
- [Release notes](https://github.com/protocolbuffers/protobuf-javascript/releases)
- [Commits](protocolbuffers/protobuf-javascript@v3.21.4...v4.0.2)

---
updated-dependencies:
- dependency-name: google-protobuf
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 1, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 1, 2026 12:16
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 1, 2026
@codecov
Copy link

codecov bot commented Mar 1, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.9%. Comparing base (1c265af) to head (5da029d).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@          Coverage Diff          @@
##            main   #1244   +/-   ##
=====================================
  Coverage   65.9%   65.9%           
=====================================
  Files        335     335           
  Lines       9821    9821           
  Branches    1237    1291   +54     
=====================================
  Hits        6477    6477           
+ Misses      2971    2969    -2     
- Partials     373     375    +2     

see 1 file with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants