build(deps): Bump github.com/bufbuild/buf from 1.7.0 to 1.53.0

[dependabot]

Bumps github.com/bufbuild/buf from 1.7.0 to 1.53.0.

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.53.0

• Fix buf breaking annotations for JSON format.

v1.52.1

• Fix language version for pre-commit hooks.

v1.52.0

• Fix exclude_type on a non imported package.
• Fix --exclude-type flag for buf generate when an input is specified.
• Fix type filter import filtering for options.
• Add OS environment when invoking local buf plugins.
• Add file path to buf lint and buf breaking output even when source code info is not available. This allows buf lint and buf breaking to respect ignore and ignore_only configurations when source code info is not available.

v1.51.0

• Fix buf convert to allow for zero length for binpb, txtpb, and yaml formats.
• Fix use of deprecated flag --include-types for buf generate.
• Add --against-registry flag to buf breaking that runs breaking checks against the latest commit on the default branch of the corresponding module in the registry.
• Fix type filter with unused image dependencies for buf generate.
• Improve type filtering for buf generate. Adds the ability to exclude types with the parameter exclude_types in buf.gen.yaml and a flag --exclude-types in the CLI. Type filters may now also be specified as plugin parameters in buf.gen.yaml.

v1.50.1

• Security: Improved input validation to prevent unsafe command execution when running buf registry login. (Reported by Matt Austin)

v1.50.0

• Add input parameter filter for use with git inputs. This sets the filter flag argument for the git fetch command.

v1.49.0

• Fix buf plugin push --label to allow pushing a plugin with a label.
• Add --digest-changes-only flag to buf registry {module,plugin} commit list to filter out commits that have no digest changes.
• Fix buf plugin push --source-control-url to allow pushing a plugin with the source control url.

v1.48.0

• Add buf registry plugin {create,delete,info,update} commands to manage BSR plugins.
• Breaking analysis support for buf beta lsp.
• Fix bug when using the --type flag filter for buf build where import ordering is not determinisitic.
• Add buf plugin push command to push a plugin to the Buf Schema Registry. Only WebAssembly check plugins are supported at this time.
• Add buf plugin update and buf plugin prune command to manage plugins in the buf.lock file. Only WebAssembly check plugins are supported at this time.
• Add buf registry plugin commit {add-label,info,list,resolve} to manage BSR plugin commits.
• Add buf registry plugin label {archive,info,list,unarchive} to manage BSR plugin commits.
• Move buf registry module update to buf registry module settings update. Command buf registry module update is now deprecated.
• Support remote check plugins in buf lint and buf breaking commands.

v1.47.2

• Update the patch version to resolve NPM packaging issues. No command updates or user changes.

v1.47.1

• Update the patch version to resolve NPM packaging issues. No command updates or user changes.

v1.47.0

• Move buf registry commit to buf registry module commit. Command buf registry commit is now deprecated.

... (truncated)

Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.53.0] - 2025-04-21

• Fix buf breaking annotations for JSON format.

[v1.52.1] - 2025-04-08

• Fix language version for pre-commit hooks.

[v1.52.0] - 2025-04-07

• Fix exclude_type on a non imported package.
• Fix --exclude-type flag for buf generate when an input is specified.
• Fix type filter import filtering for options.
• Add OS environment when invoking local buf plugins.
• Add file path to buf lint and buf breaking output even when source code info is not available. This allows buf lint and buf breaking to respect ignore and ignore_only configurations when source code info is not available.

[v1.51.0] - 2025-03-28

• Fix buf convert to allow for zero length for binpb, txtpb, and yaml formats.
• Fix use of deprecated flag --include-types for buf generate.
• Add --against-registry flag to buf breaking that runs breaking checks against the latest commit on the default branch of the corresponding module in the registry.
• Fix type filter with unused image dependencies for buf generate.
• Improve type filtering for buf generate. Adds the ability to exclude types with the parameter exclude_types in buf.gen.yaml and a flag --exclude-types in the CLI. Type filters may now also be specified as plugin parameters in buf.gen.yaml.

[v1.50.1] - 2025-03-10

• Minor fixes and dependency updates.

[v1.50.0] - 2025-01-17

• Add input parameter filter for use with git inputs. This sets the filter flag argument for the git fetch command.

[v1.49.0] - 2025-01-07

• Fix buf plugin push --label to allow pushing a plugin with a label.
• Add --digest-changes-only flag to buf registry {module,plugin} commit list to filter out commits that have no digest changes.
• Fix buf plugin push --source-control-url to allow pushing a plugin with the source control url.

[v1.48.0] - 2024-12-19

• Add buf registry plugin {create,delete,info,update} commands to manage BSR plugins.
• Breaking analysis support for buf beta lsp.

... (truncated)

Commits

• c6b88ef Release v1.53.0 (#3781)
• 9af062e Refactor bufcheck client options for plugin configuration (#3762)
• 8d45601 Make upgrade (#3779)
• f889f6f Add repository idp group audit resource type (#3776)
• 054cd80 Init bufpolicy pkg for policies (#3740)
• 47078d3 Run modernize tool to update to newer APIs (#3775)
• 7a40a5f Repository IdP group mapping (#3770)
• 8b8651d Update to latest makego (#3774)
• 4adc0b7 Cleanup Wasm runtime creation (#3755)
• 2d8edc8 Add buf breaking fix to CHANGELOG (#3772)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: S:automerge, T:dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.