Skip to content

Commit 2247c09

Browse files
chore: upgrade protobufjs to ^7.6.4 to address CVE-2026-54269 (#1336)
Generated with [Linear](https://linear.app/sourcebot/issue/SOU-1361/sourcebot-devsourcebot-cve-2026-54269-protobufjs-schema-derived-names#agent-session-3d4a0084) Co-authored-by: linear-code[bot] <222613912+linear-code[bot]@users.noreply.github.com> Co-authored-by: Brendan Kellam <brendan@sourcebot.dev>
1 parent 52ce4a5 commit 2247c09

2 files changed

Lines changed: 4 additions & 11 deletions

File tree

CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
1818
- Upgraded `dompurify` to `^3.4.11`. [#1332](https://github.com/sourcebot-dev/sourcebot/pull/1332)
1919
- Upgraded `nodemailer` to `^8.0.9`. [#1331](https://github.com/sourcebot-dev/sourcebot/pull/1331)
2020
- Upgraded `nodemailer` to `^8.0.11`. [#1328](https://github.com/sourcebot-dev/sourcebot/pull/1328)
21+
- Upgraded `protobufjs` to `^7.6.4`. [#1336](https://github.com/sourcebot-dev/sourcebot/pull/1336)
2122
- Upgraded `tar` to `^7.5.16`. [#1338](https://github.com/sourcebot-dev/sourcebot/pull/1338)
2223
- Upgraded `esbuild` to `^0.28.1`. [#1342](https://github.com/sourcebot-dev/sourcebot/pull/1342)
2324

yarn.lock

Lines changed: 3 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -5416,13 +5416,6 @@ __metadata:
54165416
languageName: node
54175417
linkType: hard
54185418

5419-
"@protobufjs/inquire@npm:1.1.0":
5420-
version: 1.1.0
5421-
resolution: "@protobufjs/inquire@npm:1.1.0"
5422-
checksum: 10c0/64372482efcba1fb4d166a2664a6395fa978b557803857c9c03500e0ac1013eb4b1aacc9ed851dd5fc22f81583670b4f4431bae186f3373fedcfde863ef5921a
5423-
languageName: node
5424-
linkType: hard
5425-
54265419
"@protobufjs/path@npm:^1.1.2":
54275420
version: 1.1.2
54285421
resolution: "@protobufjs/path@npm:1.1.2"
@@ -19410,22 +19403,21 @@ __metadata:
1941019403
linkType: hard
1941119404

1941219405
"protobufjs@npm:^7.3.0, protobufjs@npm:^7.4.0, protobufjs@npm:^7.5.3, protobufjs@npm:^7.5.4":
19413-
version: 7.6.2
19414-
resolution: "protobufjs@npm:7.6.2"
19406+
version: 7.6.4
19407+
resolution: "protobufjs@npm:7.6.4"
1941519408
dependencies:
1941619409
"@protobufjs/aspromise": "npm:^1.1.2"
1941719410
"@protobufjs/base64": "npm:^1.1.2"
1941819411
"@protobufjs/codegen": "npm:^2.0.5"
1941919412
"@protobufjs/eventemitter": "npm:^1.1.1"
1942019413
"@protobufjs/fetch": "npm:^1.1.1"
1942119414
"@protobufjs/float": "npm:^1.0.2"
19422-
"@protobufjs/inquire": "npm:^1.1.2"
1942319415
"@protobufjs/path": "npm:^1.1.2"
1942419416
"@protobufjs/pool": "npm:^1.1.0"
1942519417
"@protobufjs/utf8": "npm:^1.1.1"
1942619418
"@types/node": "npm:>=13.7.0"
1942719419
long: "npm:^5.3.2"
19428-
checksum: 10c0/3c552dfe3cbcfad2d6c312a76cd189cf5be9fb36b203f6292f79c6020d675f7f33d5531ce312441c42ae75deb24ced32760e64fe4aa3d5b3c2295fd67cea270c
19420+
checksum: 10c0/6403eaa9c5a72cc6450c11f38fefafdde243fd806e7ac606ac8d591bc3fdaec45ae764febf83181a2d9aac51aca624e0f46dec368ceea191f7e85e2d6ccaaf93
1942919421
languageName: node
1943019422
linkType: hard
1943119423

0 commit comments

Comments
 (0)