Skip to content

fix(security): resolve Dependabot vulnerabilities and bump actions - #3

Merged
toumorokoshi merged 1 commit into
mainfrom
fix/security-updates
Sep 1, 2026
Merged

fix(security): resolve Dependabot vulnerabilities and bump actions#3
toumorokoshi merged 1 commit into
mainfrom
fix/security-updates

Conversation

@toumorokoshi

@toumorokoshi toumorokoshi commented Aug 17, 2026

Copy link
Copy Markdown
Member

Summary

Applies Dependabot security updates and dependency bumps for api-linter.

Key Changes

  1. api-linter Updates:
    • Upgraded buf.build/go/bufplugin (v0.9.0 -> v0.10.0)
    • Upgraded buf.build/go/protovalidate (v1.0.0 -> v1.1.3)
    • Bumped indirect protobuf runtime dependencies: buf.build/gen/go/bufbuild/bufplugin/protocolbuffers/go (v1.36.11-20250718181942-e35f9b667443.1) and buf.build/gen/go/pluginrpc/pluginrpc/protocolbuffers/go (v1.36.11-20241007202033-cf42259fcbfc.1)
    • Synchronized api-linter/go.sum

Verification

  • bazel test //... --nocache_test_results -> Passed (45/45 test targets)
  • bazel run //:check -> Passed

@toumorokoshi
toumorokoshi merged commit 11bfb44 into main Sep 1, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant