[dependabot]

Bumps github.com/bufbuild/buf from 1.73.0 to 1.75.0.

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.75.0

• Fix buf build dropping message_set_wire_format, weak field options, and MessageSet extensions, and truncating MessageSet extension ranges, when a file has an unused import.
• Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8, such as '\x95' in a protovalidate rule.
• Add BUF_DEBUG, BUF_LOG_FORMAT, and BUF_TIMEOUT environment variables as defaults for the --debug, --log-format, and --timeout global flags. Flags take precedence when set.
• Add support to images for option dependencies declared with the import option syntax in edition 2024 and later.
• Add support for Protobuf edition 2026.
• Update built-in Well-Known Types to Protobuf v36.2.
• Update managed mode to skip cc_enable_arenas for edition 2026 files, where the option was removed.
• Fix buf convert and buf curl ignoring the (pb.enumvalue.json).string option for enum value JSON names.

v1.74.0

• Improve the performance of the PROTOVALIDATE lint rule, which is now up to 3x faster and allocates less memory on modules using cel rules or example values.
• Send the module name of each file to check plugins, which is available as FileDescriptor.ModuleName() in bufplugin-go v0.11.0 and later.
• Update buf curl to automatically use HTTP/2 prior knowledge for http URLs when server reflection, the gRPC protocol, or a bidirectional streaming method is used, since all of these require HTTP/2. The --http2-prior-knowledge flag is no longer required in these cases.
• Add --stdin-filepath flag to buf format, which reads a single .proto file from stdin and writes the formatted result to stdout. The path is not read from disk, and is only used to report parse errors and diffs.
• Fix buf convert panic when converting images that contain files without a syntax declaration or with unused imports.
• Fix buf generate with strategy: directory and include_imports: true adding imports to the CodeGeneratorRequest of the directory that imports them. Imports are now split by directory into their own requests, the same as non-imports.
• Fix configuration files silently accepting unquoted values that start with !, such as ignore: [!foo/bar.proto]. Previously they parsed as empty strings, now they rejected with an error.
• Fix lint comment ignores on proto2 group fields being ignored.
• Update the LSP to support named generation templates such as buf.go.gen.yaml and buf.gen.go.yaml.
• Improve the buf curl error message for methods that accept a single request message.
• Add --config flag to buf lsp serve to use a buf.yaml file or data in place of discovering buf.yaml files. Workspaces are resolved from the editor's root folder.
• Deduplicate remote input fetches within a single command invocation, so that multiple inputs in a buf.gen.yaml that resolve to the same archive, git repository, or image are fetched once instead of once per input.
• Fix intermittent concurrent map write crash when compiling Editions files.
• Fix Edition 2024 handling of enum value features, STRICT default symbol visibility, and source locations of export/local types.

Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.75.0] - 2026-10-21

• Fix buf build dropping message_set_wire_format, weak field options, and MessageSet extensions, and truncating MessageSet extension ranges, when a file has an unused import.
• Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8, such as '\x95' in a protovalidate rule.
• Add BUF_DEBUG, BUF_LOG_FORMAT, and BUF_TIMEOUT environment variables as defaults for the --debug, --log-format, and --timeout global flags. Flags take precedence when set.
• Add support to images for option dependencies declared with the import option syntax in edition 2024 and later.
• Add support for Protobuf edition 2026.
• Update built-in Well-Known Types to Protobuf v36.2.
• Update managed mode to skip cc_enable_arenas for edition 2026 files, where the option was removed.
• Fix buf convert and buf curl ignoring the (pb.enumvalue.json).string option for enum value JSON names.

[v1.74.0] - 2026-10-14

• Improve the performance of the PROTOVALIDATE lint rule, which is now up to 3x faster and allocates less memory on modules using cel rules or example values.
• Send the module name of each file to check plugins, which is available as FileDescriptor.ModuleName() in bufplugin-go v0.11.0 and later.
• Update buf curl to automatically use HTTP/2 prior knowledge for http URLs when server reflection, the gRPC protocol, or a bidirectional streaming method is used, since all of these require HTTP/2. The --http2-prior-knowledge flag is no longer required in these cases.
• Add --stdin-filepath flag to buf format, which reads a single .proto file from stdin and writes the formatted result to stdout. The path is not read from disk, and is only used to report parse errors and diffs.
• Fix buf convert panic when converting images that contain files without a syntax declaration or with unused imports.
• Fix buf generate with strategy: directory and include_imports: true adding imports to the CodeGeneratorRequest of the directory that imports them. Imports are now split by directory into their own requests, the same as non-imports.
• Fix configuration files silently accepting unquoted values that start with !, such as ignore: [!foo/bar.proto]. Previously they parsed as empty strings, now they rejected with an error.
• Fix lint comment ignores on proto2 group fields being ignored.
• Update the LSP to support named generation templates such as buf.go.gen.yaml and buf.gen.go.yaml.
• Improve the buf curl error message for methods that accept a single request message.
• Add --config flag to buf lsp serve to use a buf.yaml file or data in place of discovering buf.yaml files. Workspaces are resolved from the editor's root folder.
• Deduplicate remote input fetches within a single command invocation, so that multiple inputs in a buf.gen.yaml that resolve to the same archive, git repository, or image are fetched once instead of once per input.
• Fix intermittent concurrent map write crash when compiling Editions files.
• Fix Edition 2024 handling of enum value features, STRICT default symbol visibility, and source locations of export/local types.

Commits

• 1a3a05a Release v1.75.0 (#4761)
• f1454f8 Bump github.com/klauspost/pgzip from 1.2.7 to 1.3.0 (#4759)
• fac447e Bump connect-go v2.0.2 (#4760)
• 5e632f9 Ensure Dockerfile builds at latest versions (#4758)
• 4ef41d4 Fix handling of enum value JSON names (#4755)
• 61b910e Add support for edition 2026 (#4752)
• 7675c0e Add option dependency support to image (#4753)
• 4e84ec2 Fix legacy options being stripped from images when a file has an unused impor...
• 1c40cb3 Add environment variables as defaults for global flags (#4750)
• e214652 Make upgrade (#4749)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)