Skip to content

dependabot: bump @bufbuild/protoc-gen-es from 1.10.1 to 2.12.1 - #11

Open
dependabot[bot] wants to merge 6 commits into
gcp-validation-ci-cdfrom
dependabot/npm_and_yarn/bufbuild/protoc-gen-es-2.12.0
Open

dependabot: bump @bufbuild/protoc-gen-es from 1.10.1 to 2.12.1#11
dependabot[bot] wants to merge 6 commits into
gcp-validation-ci-cdfrom
dependabot/npm_and_yarn/bufbuild/protoc-gen-es-2.12.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps @bufbuild/protoc-gen-es from 1.10.1 to 2.12.1.

Release notes

Sourced from @​bufbuild/protoc-gen-es's releases.

v2.12.1

What's Changed

New Contributors

Full Changelog: bufbuild/protobuf-es@v2.12.0...v2.12.1

v2.12.0

What's Changed

New Contributors

Full Changelog: bufbuild/protobuf-es@v2.11.0...v2.12.0

v2.11.0

What's Changed

Full Changelog: bufbuild/protobuf-es@v2.10.2...v2.11.0

v2.10.2

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​bufbuild/protoc-gen-es since your current version.


vipulwalunj and others added 3 commits May 11, 2026 10:45
- Route /key and /unwrapKey to GCP validation path when attestationType=gcp
- GcpAttestationValidation uses snp_attestation.verifySnpAttestation (real
  SNP binary verification, same CCF built-in as Azure) against a separate
  gcpKeyReleasePolicyMap so Azure and GCP governance are fully independent
- Add GCP_VCPU_MEASUREMENTS (13 vCPU-count → SHA-384 measurement entries)
  and GCP_VALID_MEASUREMENTS to VtpmAttestation.ts for use in governance
  proposals (set_gcp_key_release_policy x-ms-sevsnpvm-launchmeasurement)
- Add set_gcp_key_release_policy.js CCF governance action mirroring the
  Azure action but writing to public:policies.gcp_key_release
- 25 unit tests (64 total passing): measurement table format/uniqueness,
  policy validation via KeyReleasePolicy, routing path confirmation
- Update docs/gcp_attestation_changes.md with full architecture, measurement
  table, governance proposal examples, and updated TODO list

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 22, 2026
prathmeshj1729 and others added 3 commits July 21, 2026 14:13
- For JWT validation Policy now it adds google service account in allowlist
- Key is released only if service account is there in allowlist
- #TODO- Add image digest in key release policy
Bumps [@bufbuild/protoc-gen-es](https://github.com/bufbuild/protobuf-es/tree/HEAD/packages/protoc-gen-es) from 1.10.1 to 2.12.1.
- [Release notes](https://github.com/bufbuild/protobuf-es/releases)
- [Commits](https://github.com/bufbuild/protobuf-es/commits/v2.12.1/packages/protoc-gen-es)

---
updated-dependencies:
- dependency-name: "@bufbuild/protoc-gen-es"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot changed the base branch from main to gcp-validation-ci-cd July 21, 2026 09:30
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/bufbuild/protoc-gen-es-2.12.0 branch from 666dd8b to 165d774 Compare July 21, 2026 09:30
@dependabot dependabot Bot changed the title dependabot: bump @bufbuild/protoc-gen-es from 1.10.1 to 2.12.0 dependabot: bump @bufbuild/protoc-gen-es from 1.10.1 to 2.12.1 Jul 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants