[dependabot]

Bumps @bufbuild/buf from 1.74.0 to 1.75.0.

Release notes

Sourced from @​bufbuild/buf's releases.

v1.75.0

• Fix buf build dropping message_set_wire_format, weak field options, and MessageSet extensions, and truncating MessageSet extension ranges, when a file has an unused import.
• Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8, such as '\x95' in a protovalidate rule.
• Add BUF_DEBUG, BUF_LOG_FORMAT, and BUF_TIMEOUT environment variables as defaults for the --debug, --log-format, and --timeout global flags. Flags take precedence when set.
• Add support to images for option dependencies declared with the import option syntax in edition 2024 and later.
• Add support for Protobuf edition 2026.
• Update built-in Well-Known Types to Protobuf v36.2.
• Update managed mode to skip cc_enable_arenas for edition 2026 files, where the option was removed.
• Fix buf convert and buf curl ignoring the (pb.enumvalue.json).string option for enum value JSON names.

Changelog

Sourced from @​bufbuild/buf's changelog.

[v1.75.0] - 2026-10-21

• Fix buf build dropping message_set_wire_format, weak field options, and MessageSet extensions, and truncating MessageSet extension ranges, when a file has an unused import.
• Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8, such as '\x95' in a protovalidate rule.
• Add BUF_DEBUG, BUF_LOG_FORMAT, and BUF_TIMEOUT environment variables as defaults for the --debug, --log-format, and --timeout global flags. Flags take precedence when set.
• Add support to images for option dependencies declared with the import option syntax in edition 2024 and later.
• Add support for Protobuf edition 2026.
• Update built-in Well-Known Types to Protobuf v36.2.
• Update managed mode to skip cc_enable_arenas for edition 2026 files, where the option was removed.
• Fix buf convert and buf curl ignoring the (pb.enumvalue.json).string option for enum value JSON names.

Commits

• 1a3a05a Release v1.75.0 (#4761)
• f1454f8 Bump github.com/klauspost/pgzip from 1.2.7 to 1.3.0 (#4759)
• fac447e Bump connect-go v2.0.2 (#4760)
• 5e632f9 Ensure Dockerfile builds at latest versions (#4758)
• 4ef41d4 Fix handling of enum value JSON names (#4755)
• 61b910e Add support for edition 2026 (#4752)
• 7675c0e Add option dependency support to image (#4753)
• 4e84ec2 Fix legacy options being stripped from images when a file has an unused impor...
• 1c40cb3 Add environment variables as defaults for global flags (#4750)
• e214652 Make upgrade (#4749)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.