Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 11, 2025

Bumps protobuf from 4.25.0 to 4.25.8.

Commits
  • a4cbdd3 Updating version.json and repo version numbers to: 25.8
  • 29445be Merge pull request #21880 from shaod2/py-25
  • cc13b69 Remove debugging code and add EOLs
  • d31100c Manually backport recursion limit enforcement to 25.x
  • 88a3b90 Change pre-22 poison pill to only log once per affected message type. (#21754)
  • 320eafa Weaken vulnerable gencode poison pills to warning by default.
  • f584fe3 Merge branch 'protocolbuffers:25.x' into 25.x
  • c710036 Update test_upb.yml to use ubuntu-22
  • 9721758 Fix missing trailing newline.
  • cca7b28 Update test_upb.yml to use ubuntu-22
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 11, 2025
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 11, 2025
@dependabot dependabot bot added the python Pull requests that update Python code label Jul 11, 2025
@dependabot dependabot bot requested a review from fsalemi as a code owner July 11, 2025 01:00
Copy link

github-actions bot commented Jul 11, 2025

Terraform plan in iac/cal-itp-data-infra-staging/airflow/us

Plan: 0 to add, 2 to change, 0 to destroy.
Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
!~  update in-place

Terraform will perform the following actions:

  # google_storage_bucket_object.calitp-staging-composer-catalog will be updated in-place
!~  resource "google_storage_bucket_object" "calitp-staging-composer-catalog" {
!~      content             = (sensitive value)
!~      crc32c              = "+75UUw==" -> (known after apply)
!~      detect_md5hash      = "kYJ017tQ9U4yBylbOoLHRw==" -> "different hash"
!~      generation          = 1754429793908797 -> (known after apply)
        id                  = "calitp-staging-composer-data/warehouse/target/catalog.json"
!~      md5hash             = "kYJ017tQ9U4yBylbOoLHRw==" -> (known after apply)
        name                = "data/warehouse/target/catalog.json"
#        (16 unchanged attributes hidden)
    }

  # google_storage_bucket_object.calitp-staging-composer-manifest will be updated in-place
!~  resource "google_storage_bucket_object" "calitp-staging-composer-manifest" {
!~      content             = (sensitive value)
!~      crc32c              = "v0ba3w==" -> (known after apply)
!~      detect_md5hash      = "ixwmCbFgA9HXpdGzOqh3pg==" -> "different hash"
!~      generation          = 1754429795282716 -> (known after apply)
        id                  = "calitp-staging-composer-data/warehouse/target/manifest.json"
!~      md5hash             = "ixwmCbFgA9HXpdGzOqh3pg==" -> (known after apply)
        name                = "data/warehouse/target/manifest.json"
#        (16 unchanged attributes hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

📝 Plan generated in Plan Airflow DAGs #448

Copy link

github-actions bot commented Jul 11, 2025

Terraform plan in iac/cal-itp-data-infra/airflow/us

No changes. Your infrastructure matches the configuration.
No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

📝 Plan generated in Plan Airflow DAGs #448

@dependabot dependabot bot force-pushed the dependabot/pip/airflow/protobuf-4.25.8 branch from bab5a07 to b302b52 Compare July 14, 2025 23:00
@dependabot dependabot bot requested a review from raebot as a code owner July 14, 2025 23:00
@dependabot dependabot bot force-pushed the dependabot/pip/airflow/protobuf-4.25.8 branch from b302b52 to 080f0cf Compare July 16, 2025 23:26
Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 4.25.0 to 4.25.8.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v4.25.0...v4.25.8)

---
updated-dependencies:
- dependency-name: protobuf
  dependency-version: 4.25.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/airflow/protobuf-4.25.8 branch from 080f0cf to 7034c78 Compare August 6, 2025 20:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants