Bump @bufbuild/buf from 1.66.1 to 1.72.0

[dependabot]

Bumps @bufbuild/buf from 1.66.1 to 1.72.0.

Release notes

Sourced from @​bufbuild/buf's releases.

v1.72.0

• Fix buf beta registry webhook create and buf beta registry webhook list to emit proto JSON output.
• Fix HTTPS Basic authentication for remote inputs to use BUF_INPUT_HTTPS_USERNAME for the username.
• Fix IMPORT_USED lint rule silently reporting no unused imports when google/protobuf/descriptor.proto is in the transitive dependency graph.

v1.71.0

• Port new formatter and fix bugs for in-line block comment spacing.
• Fix handling for an empty rpc input/output.

v1.70.0

• Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.
• Fix LSP textDocument/documentSymbol marking every symbol as deprecated.
• Add error for when a dependency is added to buf.yaml and is missing from buf.lock.
• Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.
• Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

v1.69.0

• Increase check plugin WASM memory limits to 1GiB.
• Fix LSP stale diagnostics persisting after a file is closed or deleted.
• Fix handling of unprefixed newlines in block comments.
• Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".
• Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

v1.68.4

• Fix duplicated extension tags across imports from compiler.

v1.68.3

• Fix buf format error handling for edition 2024.

v1.68.2

• Fix build failures for modules with a vendored descriptor.proto.
• Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.
• Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.
• Add --debug-address flag to buf lsp serve to provide debug and profile support.

v1.68.1

• Revert the use of the new compiler report format and properly ungate Editions 2024 features.
• Fix absolute imports (leading-dot) marked unused in diagnostics.

v1.68.0

This release ports buf to our new Protobuf compiler, already used to power the Buf LSP. It uses a query-driven frontend and a new AST and intermediate representation, designed from the ground up to bring several improvements:

• Better diagnostics. The new compiler produces rich, structured diagnostic reports with precise source locations. It also catches issues that protoc misses, such as duplicate repeated modifiers.
• Editions 2024 support. Full support for Protobuf Editions 2024.
• Faster and more memory efficient. Designed for large workspaces, the new compiler uses less memory and compiles faster than the previous implementation.

This is a seamless upgrade for buf users: no changes are required, the output has been automatically updated to a new, richer diagnostics report.

---

... (truncated)

Changelog

Sourced from @​bufbuild/buf's changelog.

[v1.72.0] - 2026-07-17

• Fix buf beta registry webhook create and buf beta registry webhook list to emit proto JSON output.
• Fix HTTPS Basic authentication for remote inputs to use BUF_INPUT_HTTPS_USERNAME for the username.
• Fix IMPORT_USED lint rule silently reporting no unused imports when google/protobuf/descriptor.proto is in the transitive dependency graph.

[v1.71.0] - 2026-06-16

• Port new formatter and fix bugs for in-line block comment spacing.
• Fix handling for an empty rpc input/output.

[v1.70.0] - 2026-05-25

• Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.
• Fix LSP textDocument/documentSymbol marking every symbol as deprecated.
• Add error for when a dependency is added to buf.yaml and is missing from buf.lock.
• Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.
• Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

[v1.69.0] - 2026-04-29

• Increase check plugin WASM memory limits to 1GiB.
• Fix LSP stale diagnostics persisting after a file is closed or deleted.
• Fix handling of unprefixed newlines in block comments.
• Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".
• Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

[v1.68.4] - 2026-04-22

• Fix duplicated extension tags across imports from compiler.

[v1.68.3] - 2026-04-20

• Fix buf format error handling for edition 2024.

[v1.68.2] - 2026-04-17

• Fix build failures for modules with a vendored descriptor.proto.
• Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.
• Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.
• Add --debug-address flag to buf lsp serve to provide debug and profile support.

[v1.68.1] - 2026-04-14

• Revert the use of the new compiler report format and properly ungate Editions 2024 features.
• Fix absolute imports (leading-dot) marked unused in diagnostics.

... (truncated)

Commits

• 7d6f056 Release v1.72.0 (#4617)
• 46fa3e4 Make upgrade (#4616)
• efe167b Fix buf generate clean to not delete nested output (#4615)
• f6c012f Make upgrade (#4608)
• 67dfe4c Fix IMPORT_UNUSED when descriptor.proto is in the dependency graph (#4602)
• b518200 Fix HTTPS Basic auth for env variables (#4600)
• e2b3f44 Add recommended SDK added/removed audit events (#4601)
• 58b4fc0 Make upgrade (#4599)
• f0f8156 Fix webhook create/list output to use protojson (#4592)
• ce80ea7 Return to development (#4584)
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
protobuf-es	Ignored	Preview	Jul 21, 2026 11:38am

[timostamm]

@dependabot recreate