Skip to content

chore(deps): bump protobufjs to 7.6.5 in /tests#107

Open
kparkinson-ld wants to merge 1 commit into
mainfrom
devin/1783987967-bump-protobufjs
Open

chore(deps): bump protobufjs to 7.6.5 in /tests#107
kparkinson-ld wants to merge 1 commit into
mainfrom
devin/1783987967-bump-protobufjs

Conversation

@kparkinson-ld

Copy link
Copy Markdown
Contributor

Summary

  • Remediates a CRITICAL Dependabot alert for protobufjs (< 7.5.5) in tests/package-lock.json.
  • protobufjs is a transitive dev dependency (via promptfoo@opentelemetry/otlp-transformer, and onnxruntime-web). Bumped via npm update protobufjs --package-lock-only, taking all instances to at least the patched version:
    • 7.5.47.6.5 (≥ patched 7.5.5)
    • top-level 8.0.18.7.1
  • Lockfile-only change; no package.json version floors modified (protobufjs: "^7.0.0" preserved).

Testing

  • Not applicable

Notes

  • Smallest focused change: only protobufjs and its @protobufjs/* sub-packages are touched in the lockfile.

Link to Devin session: https://app.devin.ai/sessions/80a42b6861cc45748b87e6dd4cb90b05
Requested by: @kparkinson-ld

@kparkinson-ld kparkinson-ld self-assigned this Jul 14, 2026
@devin-ai-integration

Copy link
Copy Markdown
Contributor

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

  • Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
  • Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

  • Disable automatic comment, CI, and merge conflict monitoring

@github-actions

Copy link
Copy Markdown

Skill eval results

Skill Before After Δ
agentcontrol/configs-create 100/100 (4/4) 100/100 (4/4) no change
agentcontrol/configs-update 80/100 (4/5) 80/100 (4/5) no change
agentcontrol/configs-variations 80/100 (4/5) 80/100 (4/5) no change
agentcontrol/tools 75/100 (3/4) 75/100 (3/4) no change
feature-flags/launchdarkly-flag-command - 100/100 (3/3) new
feature-flags/launchdarkly-flag-create 100/100 (3/3) 100/100 (3/3) no change

Only suites whose source actually changed since their last recorded score were re-run. Soft-failing while we stabilise the baseline.

@devin-ai-integration devin-ai-integration Bot marked this pull request as ready for review July 14, 2026 00:32
@devin-ai-integration devin-ai-integration Bot requested a review from a team as a code owner July 14, 2026 00:32
@devin-ai-integration devin-ai-integration Bot requested a review from a team July 14, 2026 01:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants